Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9f380a4b-02ea-44af-a54c-9c09e6cdf523.roa
File: 9f380a4b-02ea-44af-a54c-9c09e6cdf523.roa (raw, json)
Hash identifier: //iaN+ywlQFBTS9MyXLIffl3Oqzldt0kHyIcYf2JDL0=
Subject key identifier: 76:AA:29:0B:98:C2:0F:58:4B:93:9B:D0:10:9D:53:32:82:B6:D3:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33FDDC6555A3DAE98460F0E50C74913908B312D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9f380a4b-02ea-44af-a54c-9c09e6cdf523.roa
Signing time: Wed 09 Sep 2026 16:12:50 +0000
ROA not before: Wed 09 Sep 2026 16:12:50 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fd:dc:65:55:a3:da:e9:84:60:f0:e5:0c:74:91:39:08:b3:12:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:50 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=1f4268928a4e38cc8ece120407af0821aa502968cc9012a2cc97cc0c99ffb59d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:21:70:d5:44:de:d7:61:2e:61:40:ac:e9:
66:21:96:da:2a:29:4a:17:8d:ed:f4:85:b4:4f:dc:
c8:3e:b2:01:d3:71:b7:75:59:31:7c:f0:aa:3c:77:
81:cf:58:f0:29:41:f2:9a:96:4a:22:24:b7:81:9d:
92:71:93:b4:c2:ea:b1:c8:56:14:51:29:5c:31:08:
49:c5:18:e4:eb:4d:fb:6f:b0:72:da:c9:74:d0:80:
64:8b:55:d5:46:bf:ef:14:aa:81:02:bc:64:da:24:
80:b6:61:2d:ac:01:0d:9a:50:a3:e0:71:f9:64:3c:
59:8c:dc:6a:ad:b0:bb:73:58:88:5b:72:62:dc:2e:
34:c0:82:72:25:6f:44:bb:04:0c:7b:d6:28:cc:c5:
ad:cb:08:56:2a:99:0a:cf:ca:5c:47:d2:dc:ab:32:
16:dd:af:45:0f:fd:8d:fc:f1:de:5b:b0:10:ee:f1:
5f:13:9b:25:6f:2f:c3:cf:1c:97:ef:3c:48:26:39:
f8:96:40:a2:62:23:43:f5:56:df:85:91:b7:7c:d4:
a1:6b:da:7e:7e:56:ba:7f:6d:75:7a:fe:9a:a7:36:
7a:89:2d:a3:88:12:f4:a0:92:84:64:ed:e1:ba:27:
29:6e:a5:cb:6f:16:db:ec:55:f6:ad:c1:2b:aa:c1:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:29:0B:98:C2:0F:58:4B:93:9B:D0:10:9D:53:32:82:B6:D3:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9f380a4b-02ea-44af-a54c-9c09e6cdf523.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4800::/40
Signature Algorithm: sha256WithRSAEncryption
13:cb:75:ff:86:28:33:cf:c1:38:9a:aa:de:a3:b2:71:f4:46:
74:c3:99:89:cb:86:ee:c1:f2:48:2e:21:00:04:c3:7a:89:f2:
ee:b5:78:58:eb:b9:d7:a4:1e:da:41:74:25:fe:e0:e3:e6:9a:
48:9a:0c:c9:96:6a:2d:c6:2c:24:fd:65:79:d7:83:ee:16:90:
7f:6a:16:6b:32:a0:d8:5a:9c:b5:b6:db:6a:df:ee:23:88:bd:
4a:02:dd:01:86:a2:8b:25:34:c5:b6:8b:ae:9f:44:7a:d2:45:
d9:2f:41:09:f3:61:da:16:fe:00:93:b5:aa:0b:47:0c:d6:d7:
ca:5a:4e:f5:cf:e0:4c:eb:2f:70:81:ec:6c:8b:ba:4d:58:22:
7a:d7:dc:b5:33:a1:04:c9:99:df:3f:14:ef:db:0a:37:98:ad:
0f:ee:87:4b:bd:6b:62:50:b8:33:28:84:ef:51:89:2b:26:57:
d0:26:16:05:b8:d1:7d:40:db:fc:f2:ee:25:1e:b7:36:88:1f:
2a:a8:c7:e4:fc:43:8e:c9:dd:e2:eb:27:79:85:e1:63:db:33:
79:72:e5:99:b8:d6:00:40:08:e8:c2:ab:5a:bf:04:e5:81:76:
49:6e:40:61:7d:4d:c9:04:70:85:ae:95:74:36:9c:6a:8d:92:
1f:8e:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:29 2026 by rpki-client