Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a3cf7c4b-50db-44ec-b347-06935db52d29.roa
File: a3cf7c4b-50db-44ec-b347-06935db52d29.roa (raw, json)
Hash identifier: Yv0phl+Ph3sF0aF/xnNhnsSKWeb3gOiNhyh05qPhj3I=
Subject key identifier: 11:84:9A:6B:8A:2B:4D:06:07:04:43:01:5B:EF:1F:BF:60:3B:AB:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6ED2293C251F00F800C60F429828C446B83D68B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a3cf7c4b-50db-44ec-b347-06935db52d29.roa
Signing time: Wed 19 Aug 2026 00:50:06 +0000
ROA not before: Wed 19 Aug 2026 00:50:06 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d2:29:3c:25:1f:00:f8:00:c6:0f:42:98:28:c4:46:b8:3d:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:06 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=68433877d69b6f95846415fd2d02e9317456e363de9e9421e7a7e178b19218b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:5d:1c:c8:9d:81:d5:0d:4e:11:55:b2:99:
a3:6c:d1:ce:e3:80:7a:f6:88:73:12:58:9c:78:3a:
ff:00:c4:2e:98:c3:49:aa:05:7c:1a:42:dc:48:db:
68:f9:31:65:f9:75:75:5a:ee:68:39:5f:fd:74:35:
43:db:56:31:a8:04:1a:2c:f3:1e:a1:4f:b4:d2:e0:
88:de:b5:09:04:da:06:ba:cb:33:e1:52:1a:99:62:
50:b4:1e:3a:78:93:60:3e:7b:cf:2f:f5:56:13:d8:
06:3f:6c:cc:51:4a:29:39:ba:2e:f0:1e:88:e7:0f:
b4:37:d1:5a:1e:50:4e:45:bf:6f:1a:62:7d:46:c7:
8d:96:e6:76:a3:74:bb:41:44:84:1c:7e:31:ee:5b:
f5:07:e1:3e:0d:fc:d8:bd:dd:c1:ec:a3:14:07:59:
35:da:78:a0:d2:98:e4:a7:f8:51:9d:93:6f:88:88:
52:da:ff:a6:9f:7f:af:41:b3:b3:48:4f:b8:6b:49:
19:6b:97:43:cd:81:24:6a:26:25:46:33:60:b7:f6:
03:f0:b9:48:ac:7f:81:be:21:27:5d:f0:65:8b:bc:
1d:31:47:6f:98:6c:b5:76:ee:d8:19:14:87:93:86:
2f:2c:d4:06:d8:ae:29:ce:2a:e7:d3:d8:ca:80:11:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:9A:6B:8A:2B:4D:06:07:04:43:01:5B:EF:1F:BF:60:3B:AB:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a3cf7c4b-50db-44ec-b347-06935db52d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:2040::/48
Signature Algorithm: sha256WithRSAEncryption
16:81:43:e2:eb:e0:41:f1:ad:ff:43:6f:41:b3:d7:ea:5b:5b:
34:d2:c2:ae:de:fc:4c:77:3f:8f:02:9d:b6:56:bb:87:78:1c:
56:8c:b5:64:de:84:a9:42:6c:69:9b:da:8f:d1:9f:26:16:07:
32:46:7f:d1:fa:c5:0b:09:80:78:b9:71:25:37:e8:58:60:5b:
a9:1c:82:a6:8b:4d:eb:bf:f0:2b:9c:e5:12:f3:ed:5c:19:43:
18:6d:7a:6a:2c:0c:c3:a6:f3:ba:01:6f:9b:7b:c1:f5:d1:7c:
fe:57:f1:86:0b:26:2b:0b:e2:0c:15:f0:7c:fd:9d:8d:8b:fc:
88:49:c4:a1:bb:15:ac:83:a1:34:0b:0c:c7:09:f4:8f:98:bb:
24:02:3e:9d:90:ba:bd:dc:67:63:64:7e:7d:7b:41:fb:77:8b:
9b:d3:b1:bd:8e:3a:f4:71:79:ff:39:8f:a6:e5:37:af:59:90:
f0:2b:cc:ff:8a:8b:a4:b6:4f:5e:82:20:06:52:9a:d3:1b:47:
57:08:3c:0a:48:3b:5e:e9:7d:66:8d:d1:50:e6:e1:ff:f2:5c:
8b:17:7a:c9:a3:25:2c:06:7b:1d:c4:53:33:fa:3b:86:cd:ed:
70:57:de:d6:e8:e2:78:4b:1b:31:69:27:cd:98:84:59:b0:32:
ae:e1:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:36 2026 by rpki-client