Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
File: a7031a07-12ba-45f8-a53b-6bd5b713c999.roa (raw, json)
Hash identifier: /f0BoKoAdUoHzKo4Shlh0mYJNOsjKJuVFmDAtkKSJEI=
Subject key identifier: C5:41:71:3F:DA:18:F1:8C:F2:6F:26:62:9E:D2:E4:B2:DC:47:02:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 405617D6750CB873DBF191507970EBBDA03E58A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
Signing time: Fri 07 Aug 2026 04:41:14 +0000
ROA not before: Fri 07 Aug 2026 04:41:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:56:17:d6:75:0c:b8:73:db:f1:91:50:79:70:eb:bd:a0:3e:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=728b31cfbb6701176d7c36c25e3ab37914f07591928f587b1ebe6ce982af7bd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:df:be:3d:2f:16:c2:fa:5b:43:85:12:9c:
af:fe:62:6d:c6:03:46:46:26:76:65:60:43:d4:d1:
1e:ec:44:24:62:62:87:ed:eb:1f:a8:9a:b1:93:af:
6a:f4:14:d7:67:4a:b2:ab:26:94:ce:2b:9d:85:cc:
97:76:22:fa:81:2e:d8:95:05:5b:ad:b7:4f:94:3c:
84:62:2b:fe:58:2e:89:cc:ab:f5:fc:a2:08:5a:02:
d4:6d:01:f2:93:5e:14:04:8b:85:67:7b:51:66:ac:
ed:b9:d7:39:ac:d1:ec:b1:b7:ec:a4:46:f0:ea:bd:
09:8e:b8:47:09:91:ec:8d:77:00:be:0f:c3:80:b3:
ac:17:87:39:20:ab:24:c9:97:5a:18:04:81:cc:86:
0c:e7:d4:8a:26:bc:fc:42:e1:57:b3:2c:a7:ee:23:
4a:e3:b5:40:ec:99:66:9c:4e:7f:a9:17:c6:17:4e:
2f:e3:19:65:bd:91:2b:69:62:75:46:22:db:91:68:
a9:29:10:04:4b:6a:a6:d0:b1:80:8c:37:e1:15:92:
b7:c6:cc:c0:bb:f8:06:86:0c:a9:68:66:37:fa:64:
35:d9:39:17:98:e2:c8:f5:cc:4e:c5:74:e0:18:0b:
b8:f4:59:1c:4a:3f:98:85:f0:26:9a:8e:35:1c:e6:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:71:3F:DA:18:F1:8C:F2:6F:26:62:9E:D2:E4:B2:DC:47:02:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:400::/38
Signature Algorithm: sha256WithRSAEncryption
c7:7c:82:2d:c6:41:14:f8:f8:ea:5d:11:f9:38:88:6c:aa:7d:
a7:b5:94:3f:d4:be:ad:5a:63:fd:c6:ab:96:7b:93:7f:f2:52:
35:5e:d9:c0:5e:72:86:e7:fc:2c:cf:b2:55:0b:4d:ea:30:cb:
a7:4f:6b:9d:61:da:11:ac:4c:65:da:8c:6b:67:be:59:b0:13:
dd:4c:de:68:c9:35:99:6f:b6:51:a6:d6:2a:8b:09:d7:a4:9e:
5a:d9:48:04:12:61:2c:c3:1e:49:22:2b:5f:2a:9c:70:20:c4:
fd:9c:8d:60:54:70:cb:3a:77:14:25:37:44:36:6e:80:cf:97:
6b:a9:8c:69:04:83:4d:f0:92:6b:dc:01:60:8c:8a:bb:7e:98:
e8:8f:ac:ac:16:16:06:6f:4d:f3:26:6f:40:0d:8a:d5:ff:a9:
47:23:31:8c:9c:2c:f9:3f:d4:b3:ed:61:a5:60:9d:16:95:93:
3c:0a:2b:a3:75:d1:5e:2a:bb:f7:aa:db:15:70:f4:f3:86:3b:
bc:b7:3c:bb:fb:24:57:e6:cc:d2:7b:94:35:6e:5c:b0:cf:93:
73:80:c0:aa:a7:24:fb:7a:ba:e8:1a:e5:3d:77:08:53:ed:6b:
2b:10:c7:ac:f7:98:e9:cd:61:88:a7:bc:73:92:87:45:6e:df:
54:82:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:49 2026 by rpki-client