Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: PSdriC0IMYbHlz7hI6jIIxejBd8dpPmKDEO32hmDMI4=
Subject key identifier: 7D:B4:18:51:69:B1:87:10:11:48:8A:65:15:08:9E:32:8D:05:59:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D5BF118CB2590889A373B87144E2DDF1FDD73D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Fri 07 Aug 2026 05:00:46 +0000
ROA not before: Fri 07 Aug 2026 05:00:46 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5b:f1:18:cb:25:90:88:9a:37:3b:87:14:4e:2d:df:1f:dd:73:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:46 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=65b7d744c3431d3639eaa5ba98a29a8e07e2065ea31e82daac23f9464082439a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:f7:dc:fe:d8:86:10:29:1a:5f:9b:63:9c:
e3:31:31:5a:83:c4:cf:cd:9c:17:7d:3e:ee:89:a1:
25:65:d2:0d:ad:ca:ff:0e:09:c4:34:ea:9b:e5:99:
e0:d9:6b:84:dd:47:ff:e7:78:6f:b1:d6:e9:0f:0f:
a2:67:ab:48:2c:3c:58:05:ba:fd:c9:07:9b:42:f7:
4a:f5:01:12:dc:6c:50:06:d6:b4:d9:92:cc:3b:38:
86:1c:08:8f:9a:20:9e:df:df:0f:b0:8d:bc:27:79:
a1:9b:58:7c:da:76:a6:16:c4:f8:ae:6a:12:da:a4:
11:9c:c1:34:1a:68:57:b7:ca:b2:00:3a:2e:f3:73:
e4:0b:d1:42:f2:8d:44:c4:40:75:e4:dd:ed:b6:bf:
14:54:09:b5:22:b8:79:57:1f:52:d7:d0:ee:c5:98:
23:4d:86:c6:88:01:65:14:d9:1c:05:31:eb:c8:7f:
41:5c:41:32:1e:97:10:95:84:82:67:1f:0c:23:e3:
7f:46:dd:dd:cb:1f:9d:4d:a2:ca:6f:5d:0a:5d:c6:
7a:17:9d:70:c4:e4:eb:29:ce:9a:e7:f3:ff:68:ae:
af:9d:9c:28:0b:54:7d:76:5e:f2:07:04:81:c1:82:
c1:16:4b:ab:e5:2e:c2:4e:2a:a2:73:6e:56:b0:f8:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:18:51:69:B1:87:10:11:48:8A:65:15:08:9E:32:8D:05:59:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
5f:1f:d6:4b:bb:4a:79:24:e3:57:19:12:d9:b1:e0:fd:80:28:
75:d0:dc:0c:06:40:88:42:17:e2:f6:9b:6b:c1:c3:04:5e:6b:
e8:ad:55:75:57:42:c5:9e:bb:ea:95:11:e1:06:c7:9f:e2:50:
21:93:f3:e3:61:05:6f:1e:f9:b2:86:9d:79:91:46:17:6a:58:
e1:cb:83:ff:60:b2:dc:ce:4c:28:77:43:39:cd:67:03:6d:7a:
69:da:03:a3:ce:29:3d:11:56:dd:f3:b2:3e:2d:78:fe:ce:f4:
8d:45:71:63:31:21:c1:0c:56:64:ba:2c:ee:ee:e4:37:80:90:
bd:5f:57:5a:1f:52:7f:a9:38:46:b9:aa:ec:9d:4a:14:83:57:
be:43:9f:3e:9b:de:3b:de:89:cd:00:59:98:5a:94:b4:ad:21:
25:39:44:21:1e:6c:af:fe:1b:01:96:b7:00:95:2d:ba:37:a3:
ac:4a:3b:65:49:f9:e1:b4:fe:bf:65:09:57:b9:d9:3c:bc:e3:
ca:e6:68:a7:c0:38:ef:64:a8:dd:1d:20:5c:3d:16:ea:19:bb:
b3:85:de:56:b1:2f:72:1c:60:77:b0:fa:61:be:b1:ec:2d:e3:
dc:d2:54:68:5e:f2:6e:85:c4:52:52:41:a2:e8:6f:73:7f:87:
ba:b2:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:21 2026 by rpki-client