Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
File: a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json)
Hash identifier: wEoMk7bVTnvs/MEHItcqad4h6pPHihFTp3pFfsh8roI=
Subject key identifier: D5:23:77:BA:43:F6:CA:77:52:D8:4F:CC:5F:59:19:D6:A8:33:50:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 390168A912A64199845120973C8B5B52C437BDC4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
Signing time: Fri 07 Aug 2026 05:20:09 +0000
ROA not before: Fri 07 Aug 2026 05:20:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:01:68:a9:12:a6:41:99:84:51:20:97:3c:8b:5b:52:c4:37:bd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3091d9bc75a8ee604dba63bf5f3b423af5c5d3c7a37b7a8fdd95c10a9724c1fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:91:e9:ee:7a:46:e1:a8:54:52:07:be:dc:
b1:a7:3e:75:4e:94:e1:10:19:c0:dc:18:b6:20:4b:
30:02:53:f8:16:40:12:22:14:93:24:22:b5:7f:87:
d9:b4:e9:10:47:df:eb:b2:99:ea:71:44:2b:d0:66:
8f:76:a9:50:f9:d9:5f:37:21:f6:89:02:4e:db:d7:
98:16:96:ae:95:be:0a:7b:e5:60:ed:73:58:8a:8f:
8c:20:dd:8a:3e:3a:e3:a5:8f:46:47:ee:e0:97:45:
39:a6:47:bc:81:6f:c6:cf:38:5c:2c:3b:9d:1b:58:
36:7c:6b:35:44:1f:7f:99:4b:d9:48:80:6f:ec:54:
ac:7e:f0:66:41:ed:ba:dd:16:5e:2d:fb:f5:cf:15:
23:22:3e:8e:fb:d7:ab:c6:9f:14:9a:a2:f3:f2:3f:
6c:4d:2c:19:bb:87:8a:01:3d:02:a3:b8:c2:f6:34:
e3:88:bf:af:3b:6f:0e:73:d9:ad:4d:dc:82:01:48:
1c:d6:5d:04:74:9f:92:fe:00:b7:5b:5b:49:b6:10:
13:93:15:ef:f7:61:7b:34:e5:55:28:d8:e1:f1:04:
6c:62:a8:65:70:37:3b:f7:ad:b7:ac:96:2b:06:f8:
8b:3f:ee:4a:f4:30:0e:22:7a:9e:30:55:97:af:74:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:77:BA:43:F6:CA:77:52:D8:4F:CC:5F:59:19:D6:A8:33:50:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
b6:c9:e9:07:78:8e:07:70:6a:33:9d:41:5d:92:2d:5d:8c:79:
8e:29:74:05:93:ec:95:81:fe:e4:bc:3a:42:92:02:95:c1:59:
9c:dd:e4:6b:46:13:22:91:c4:67:da:10:62:a9:77:fc:15:c0:
87:e0:2e:b4:23:01:01:0d:0b:b0:e9:42:b4:07:8f:ff:ba:97:
6d:3d:d2:e7:39:f6:64:2c:4f:eb:de:bf:53:7d:13:c5:8f:e8:
c1:b3:e4:8a:65:36:dd:dc:4f:f1:a4:71:ed:33:82:68:a5:5c:
fe:38:45:70:ee:ea:58:a8:8a:13:cc:2d:ee:87:2a:dc:70:6c:
71:17:a3:95:e1:c8:ef:10:ba:b3:76:43:b9:85:bb:68:65:32:
98:92:87:61:9b:b8:b6:23:43:c0:6f:aa:b5:52:9e:7a:b2:ba:
00:b0:f6:94:f7:52:f2:e3:1c:ca:d3:64:3d:cb:c6:bf:e4:65:
9b:93:b5:e5:3a:0f:0b:1e:ea:44:f6:fd:98:15:4f:c0:53:24:
dc:39:1a:52:19:d9:54:12:e1:82:20:41:e2:12:da:b7:5f:b7:
cd:79:0d:fc:2f:a2:46:b6:65:eb:c3:27:20:d5:de:72:bb:b2:
e7:c0:69:54:43:47:f2:1f:cb:4f:cb:fd:a7:b8:fc:08:99:99:
a3:48:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:56 2026 by rpki-client