Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fb96617-2d2f-468d-b766-35c52d9f2681.roa
File: 9fb96617-2d2f-468d-b766-35c52d9f2681.roa (raw, json)
Hash identifier: twDDXKZ9G16CGgakfsgEbfmPDgFL7enwpj0E6Xq18Ss=
Subject key identifier: AD:60:4B:0A:2F:B3:3E:51:28:E3:E3:27:12:27:A3:16:0B:82:C8:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 353BFCAC6D9936DBF911CF95B768B2E525338E1E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fb96617-2d2f-468d-b766-35c52d9f2681.roa
Signing time: Fri 07 Aug 2026 04:41:15 +0000
ROA not before: Fri 07 Aug 2026 04:41:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3b:fc:ac:6d:99:36:db:f9:11:cf:95:b7:68:b2:e5:25:33:8e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b5b9b0ade34fc5207e396dfba676476215ffcd28839a0e62d14958d791240caa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:fb:71:c9:ee:d8:56:c0:a2:ad:57:0e:cf:
4f:44:fe:2e:94:ec:4d:2a:cc:cc:a6:38:53:2c:43:
9f:45:43:ed:64:ff:4a:43:86:f2:dc:54:e9:a0:64:
e2:2a:17:6c:12:45:0b:33:06:50:2a:ac:89:4f:d5:
b2:df:7c:5e:7b:ea:48:ac:f4:3b:ae:b9:ab:aa:3a:
13:29:a6:7f:45:5a:0c:de:8a:f5:94:ef:81:ba:b9:
26:3b:60:4d:b7:8e:0c:34:b4:f1:a9:aa:d9:0e:a5:
e8:fc:c2:b7:ea:84:07:59:8e:12:b4:cc:e1:79:ef:
bf:03:10:de:fb:fc:7a:f2:5f:b4:a6:1d:bc:5b:98:
30:e2:ee:53:27:8c:83:8b:83:f7:cc:d5:fe:3a:cd:
1b:63:06:7a:67:d0:03:65:98:8f:8f:49:a9:1c:3b:
1e:8f:b0:95:68:c2:86:3c:7d:24:53:97:fd:4a:4a:
06:41:42:94:5c:c5:ab:e5:63:49:ef:05:c5:b5:48:
e9:0a:1d:9c:72:9e:de:2a:16:1d:9d:e5:a7:ac:33:
e8:f5:fa:44:5e:77:a2:24:7f:09:41:a1:2f:6b:3d:
3c:44:54:98:58:eb:27:90:bd:bf:ac:52:4c:04:21:
da:79:2f:f2:fe:94:e9:41:e8:27:91:cc:8a:21:58:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:4B:0A:2F:B3:3E:51:28:E3:E3:27:12:27:A3:16:0B:82:C8:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fb96617-2d2f-468d-b766-35c52d9f2681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:800::/38
Signature Algorithm: sha256WithRSAEncryption
08:7e:46:f9:fe:de:ab:d4:9e:90:b8:96:b3:f1:d4:19:36:71:
f2:49:51:c0:cd:4c:dd:22:17:69:1a:2e:fe:e5:09:eb:bb:fe:
4b:d7:fa:17:a4:32:72:35:26:c1:75:f6:5d:98:dd:8b:aa:c1:
a2:be:59:c2:77:e0:de:e7:c0:a1:df:0b:bd:de:d7:ad:2f:05:
a7:ee:5d:f0:da:05:82:bf:5f:57:37:dd:a2:59:15:a0:b9:61:
96:49:f5:50:82:d3:1b:db:06:0b:d5:15:ab:e2:59:92:3d:c4:
72:78:dc:23:15:0a:b8:64:f2:9a:d9:f3:c4:55:6f:1c:0c:74:
7e:6d:df:de:b5:6d:76:0b:09:61:ea:73:48:93:6a:3d:4e:21:
c9:ab:5a:02:c2:d4:b7:69:72:13:7c:5a:34:8f:2b:73:1d:26:
4a:c3:5e:f4:11:04:44:73:80:b4:a0:7d:49:3c:c5:fc:00:2c:
a8:ec:43:9c:2c:d6:08:58:14:c0:6c:3a:af:38:da:9e:eb:f1:
da:92:0c:8f:00:8d:45:5d:7f:7c:e8:09:0f:f9:79:fd:ac:39:
7e:df:14:f6:42:40:93:2d:56:1f:cd:cb:c3:b8:3f:47:b2:60:
ec:e1:93:05:33:73:a7:e8:b7:7c:04:b5:55:fb:0a:33:dc:5b:
df:df:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:39 2026 by rpki-client