Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
File: a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa (raw, json)
Hash identifier: 4uV1a8HDsFVUdyMrMzd3kt7yYJlH6HeqsbUsyKOZLuw=
Subject key identifier: B3:80:11:FD:F2:64:E7:64:99:35:9B:F4:B3:6B:86:F6:9A:69:F1:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FAF80147AEA870D42ED2615D7F10CD630FA8AF9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
Signing time: Fri 07 Aug 2026 04:50:38 +0000
ROA not before: Fri 07 Aug 2026 04:50:38 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:af:80:14:7a:ea:87:0d:42:ed:26:15:d7:f1:0c:d6:30:fa:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:38 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4d1b8cdf21cfb6b2e8221dc2d8493b70f036b7ad133148a92ccedda3737b2c3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:2f:24:51:e3:b0:93:0c:40:28:f4:e2:dd:
94:52:03:f5:c5:3b:e4:ce:c5:29:8e:e3:70:6c:26:
ec:6f:f9:ee:29:9f:4c:94:ce:ac:e3:ba:c5:86:8e:
09:d1:ed:e9:7a:ef:4f:ab:30:6b:5f:89:cc:18:e3:
c7:b6:b0:0e:2c:6e:04:fa:d8:51:95:9f:bd:60:ff:
f7:18:1c:95:ee:27:b0:f4:c8:2a:b7:14:e8:5c:05:
1f:af:9e:57:19:85:f3:84:c6:11:4a:49:25:fa:e4:
10:e5:33:f5:5b:b8:ff:0a:ef:f3:9a:69:a4:df:9d:
45:8f:8a:0a:97:18:91:64:6e:4c:be:46:7a:7f:b3:
b0:c6:c1:10:ed:7b:b8:ae:d5:8f:61:ca:75:ae:97:
81:ef:1d:03:24:2a:91:56:b9:b3:74:30:20:6f:43:
3b:7a:ee:6a:4d:cf:4b:c2:27:96:c6:a3:fd:4e:8a:
76:83:ac:93:ed:5d:f3:95:df:04:d0:4e:9b:e1:b6:
63:9f:48:d8:0e:f5:cd:6f:38:38:1a:af:66:25:6f:
03:1a:22:98:e7:8c:fa:83:81:4d:21:8e:ee:82:08:
2a:b7:fd:83:c3:09:23:c6:0a:89:56:68:e2:91:0a:
9b:cd:93:d8:4d:ce:f8:a5:f8:1f:03:e7:36:87:29:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:11:FD:F2:64:E7:64:99:35:9B:F4:B3:6B:86:F6:9A:69:F1:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
aa:ee:da:9b:d2:82:57:65:f1:bc:a1:e6:63:0e:38:b9:5c:2e:
cd:82:e7:80:40:1c:00:e3:94:92:92:b0:ab:61:e2:f2:0a:cd:
5c:2f:5b:08:e0:86:df:6c:7b:a3:0f:49:c4:29:5d:54:e6:f0:
8e:4d:e0:aa:ac:a9:3c:78:f9:8a:e6:a2:a2:5e:bc:8a:d9:6a:
22:73:fe:6c:f3:f9:af:67:a6:66:30:c2:ae:a7:6f:f9:d4:4f:
eb:98:2c:fa:6d:a0:22:2c:2a:ae:f2:06:1a:b5:27:82:82:91:
1a:20:a1:cb:4b:c3:fb:1b:93:c5:52:3a:1f:c1:5f:85:19:a8:
13:eb:35:44:2e:8a:56:b4:92:d9:49:78:17:9e:f7:5a:68:8a:
72:5e:84:01:b1:11:b9:23:24:b6:51:08:1e:29:fd:d6:a0:f4:
67:95:c8:30:c4:cf:c8:2f:5b:bc:9a:cc:5e:fe:de:be:fc:df:
2f:24:b7:c1:1b:a7:c6:42:30:63:7e:ee:ce:f3:62:a2:23:67:
6d:9b:a6:43:e3:be:43:8e:27:6e:02:e0:36:9b:c5:69:77:e6:
6d:ec:35:04:bf:88:ff:eb:50:a0:7c:c3:13:ab:76:f5:88:6a:
fa:83:8a:f8:18:48:b1:71:d2:20:53:a9:da:28:7f:e1:fd:68:
19:c5:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:03 2026 by rpki-client