Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2daf746-15ed-4356-a205-5229705fbec9.roa
File: a2daf746-15ed-4356-a205-5229705fbec9.roa (raw, json)
Hash identifier: A7bET/5APdcBm9de1RawFI2qIk4+uXX0J01XHt9VFN0=
Subject key identifier: E2:93:E4:88:40:5D:BB:99:CE:4E:D1:00:BE:71:8F:7A:C9:A9:D2:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 612E2421B26009F21D7EE98DE63C8F7A62BD333A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2daf746-15ed-4356-a205-5229705fbec9.roa
Signing time: Wed 09 Sep 2026 16:16:33 +0000
ROA not before: Wed 09 Sep 2026 16:16:33 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2e:24:21:b2:60:09:f2:1d:7e:e9:8d:e6:3c:8f:7a:62:bd:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:33 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=30881114d3e5d788addfa0f4d47a1b6e2c9f1d451de5d1d18ef98fa07b439b30, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:2d:d9:7d:ff:d0:dd:af:08:c2:78:d8:79:
79:b2:31:a2:51:28:86:19:68:51:7c:4e:84:56:fb:
ce:3d:16:14:05:fd:ad:a1:b0:45:e3:e2:f1:f6:04:
17:88:88:14:1f:dd:73:93:9a:95:6c:b2:e0:6c:8c:
d7:b6:18:9a:3e:0b:4f:d3:c7:60:1f:45:44:0a:b9:
ba:0b:9c:ca:15:a3:bc:d7:6c:bf:7f:03:ed:6a:26:
95:08:a0:2a:3c:21:a2:1b:21:95:75:9c:2a:be:c4:
be:44:6a:96:bf:3a:b8:23:4f:08:4c:95:6e:b7:8a:
a4:4f:3c:97:47:be:41:9c:27:a6:01:ea:66:2c:a3:
a2:95:ba:11:38:5d:65:84:42:e7:4b:1d:83:22:b7:
e0:1a:ad:cd:4d:29:e5:7a:0e:d9:61:74:87:38:38:
fc:08:b6:3b:21:1d:24:05:fc:11:32:2c:29:e2:fc:
50:d3:26:51:00:d7:a8:87:6a:d6:d0:c3:37:93:49:
17:43:d7:39:9c:a7:0e:32:df:b5:2d:af:38:ae:64:
bf:ea:2c:db:3b:b5:ae:6e:81:a3:ae:50:b9:cd:21:
eb:b5:2d:05:a9:42:f5:87:84:8f:d9:51:93:cd:33:
ef:c8:93:a8:90:1f:80:29:ce:5e:1b:ba:30:0b:6f:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:93:E4:88:40:5D:BB:99:CE:4E:D1:00:BE:71:8F:7A:C9:A9:D2:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2daf746-15ed-4356-a205-5229705fbec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4800::/40
Signature Algorithm: sha256WithRSAEncryption
53:df:f9:73:de:27:69:43:34:fa:64:17:ba:54:05:3f:8a:a1:
fa:a4:9c:bd:a7:1c:17:a4:81:c0:45:a2:67:b1:fc:a7:3c:25:
27:38:a3:96:7e:90:6a:4e:10:33:58:b1:40:80:df:ca:96:c1:
a8:bd:ba:0f:8b:c5:eb:d7:13:58:a9:b6:26:70:53:c4:ba:ff:
52:30:76:d7:51:ae:39:55:69:92:a2:75:d0:04:83:12:bc:31:
b6:e0:fd:ff:f8:cb:24:ef:61:39:0b:c2:d8:9d:cb:06:3f:ad:
b5:be:23:b3:a3:e1:2b:8a:90:3d:5d:d8:1e:c6:a3:f8:63:38:
09:c9:87:6c:42:7f:07:87:0d:c0:3f:a7:ac:f9:a4:93:d9:03:
12:68:ec:54:2e:a4:84:d8:42:27:c8:ea:69:60:0b:07:c4:a8:
ad:dd:31:b2:9e:0a:f5:b2:40:b6:a9:81:48:88:f2:fe:a6:79:
6f:ed:49:aa:f0:4b:56:7e:05:9f:81:2c:4d:6e:1b:4b:f5:2b:
01:3d:6a:d0:df:38:e4:6a:de:e6:e2:39:66:f9:58:87:28:6b:
18:58:bd:50:a6:1b:08:69:11:4e:e1:c4:46:cb:b0:87:cb:e7:
a6:6f:c3:da:e0:90:d0:b3:b4:d7:6d:ea:42:b5:fb:12:45:33:
57:90:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:25 2026 by rpki-client