Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7b50434-74df-4adc-81dc-bcfbccdff7dc.roa
File: a7b50434-74df-4adc-81dc-bcfbccdff7dc.roa (raw, json)
Hash identifier: 9BdZps3AnwFYpvmzv9pjpHUn/ksiSsO/pKQ3tQzy0V0=
Subject key identifier: AC:CD:3D:93:60:05:27:D1:63:CE:DC:71:37:CE:20:CA:96:45:B9:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D4B34F9BEB52FC1BDFCAD9A0BD66FD00BE9C364
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7b50434-74df-4adc-81dc-bcfbccdff7dc.roa
Signing time: Wed 19 Aug 2026 00:50:07 +0000
ROA not before: Wed 19 Aug 2026 00:50:07 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4b:34:f9:be:b5:2f:c1:bd:fc:ad:9a:0b:d6:6f:d0:0b:e9:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:07 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=bdd28a01fb8858ac30bea693ad959d030ef73d5a2205a37616ff385d277fce82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:a6:88:81:0c:57:94:ce:7f:75:de:f7:19:
3b:d0:81:10:15:42:ca:34:1d:96:70:44:64:e5:61:
60:cb:4b:89:d8:e4:b6:b9:8d:7a:c0:da:3f:83:c5:
10:c0:49:e6:d8:ea:4d:d0:80:16:98:a7:2f:57:fe:
0d:c3:f0:57:b2:81:7a:82:fc:16:b3:af:de:4e:f4:
f5:6e:aa:51:b9:f1:56:9e:e7:47:72:78:7c:7c:bc:
31:e0:58:dd:46:c5:76:fd:94:bc:17:c3:c0:aa:4e:
79:da:5b:66:a3:a3:ab:72:13:ee:a9:9a:21:69:13:
b6:b3:f1:44:a0:39:7a:05:2b:05:ea:69:d2:18:52:
8a:8b:ac:b2:cb:72:2e:54:b4:4e:ef:52:a9:a0:44:
5d:0e:4d:3c:48:eb:85:78:5b:6b:4e:f7:65:d1:f6:
54:03:8e:5e:9a:c1:99:36:b2:89:a4:13:f0:c5:19:
d2:d9:d2:8b:c3:7b:e5:91:c8:ea:be:1a:a7:be:18:
66:1e:60:bb:12:3f:06:44:43:0a:1d:cd:c2:21:0a:
63:1c:b0:06:4d:5c:b9:f8:64:39:e8:33:4a:3c:47:
e3:c8:c6:86:b4:93:73:b7:c7:e8:38:03:7f:10:53:
ef:4c:1c:ee:f3:06:28:00:bf:0b:d1:1b:64:06:d4:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:3D:93:60:05:27:D1:63:CE:DC:71:37:CE:20:CA:96:45:B9:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7b50434-74df-4adc-81dc-bcfbccdff7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:b000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:6a:db:fb:12:60:5b:10:cf:23:7e:ba:8d:47:78:c2:ca:1c:
66:c8:d6:42:93:0e:13:42:85:65:5d:bd:0f:78:ec:1e:3b:12:
d7:f6:42:67:7b:b7:36:d7:b6:f8:a5:4e:bc:fd:56:10:d0:ce:
20:7e:27:02:6d:dc:68:0b:06:e4:4f:e2:11:60:75:8d:d9:4c:
d3:a9:63:bc:07:52:d0:0d:86:34:86:78:35:63:6c:eb:e1:5e:
0c:5c:c3:9f:98:19:e0:64:8c:73:2f:4f:09:f1:78:49:3c:9f:
b6:a6:af:c4:72:03:f3:64:12:ea:be:f1:a8:a6:cf:6c:12:89:
82:e4:d5:4b:59:a8:4d:55:82:be:d1:aa:78:a4:eb:57:3f:c2:
f2:ae:22:6b:25:a8:37:14:b7:1b:46:4f:40:53:08:49:c4:d2:
16:ad:54:78:bd:50:f7:61:c0:b7:b2:51:e8:f4:54:f7:b1:3b:
2c:e7:ed:59:23:1a:4a:79:ad:d4:90:a6:69:6e:93:71:91:50:
20:2a:bd:ac:03:71:cf:0a:63:f0:f0:35:17:ff:12:55:4c:df:
1b:93:e0:72:85:75:79:75:b3:f4:54:f5:45:61:25:93:03:31:
7f:94:20:dc:5c:ee:ce:51:f3:6b:ed:b0:45:0d:1c:00:2a:ce:
7a:c2:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:53 2026 by rpki-client