Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
File: ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa (raw, json)
Hash identifier: aUJe+CNc9SrZDQ3njqRze2vuNrz3jT0KrAhGC6Z0crU=
Subject key identifier: 8A:93:0F:98:D5:61:C7:DC:87:0F:4C:FC:BC:A9:5A:59:B0:2D:44:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4EE26A67D093E5A7B252545582F3E1518DB613FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
Signing time: Fri 07 Aug 2026 05:10:21 +0000
ROA not before: Fri 07 Aug 2026 05:10:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e2:6a:67:d0:93:e5:a7:b2:52:54:55:82:f3:e1:51:8d:b6:13:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=dd1def38f8b9bd11ab82b660ffc4c828e625362e496c959c61127d043ea38b73, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:07:a1:55:49:eb:72:86:cd:7f:a7:c3:0c:
d4:2c:94:26:6f:4c:56:a9:e0:a6:48:7d:d7:81:8e:
e7:52:ad:8d:28:83:5f:78:28:0d:4b:fc:e6:7a:09:
d5:60:23:1e:56:5f:99:81:c6:dd:5d:0a:4a:f5:7c:
b8:7e:03:58:8c:c1:17:64:88:cd:2e:a5:51:6b:4c:
10:a6:a8:84:c8:ab:97:7d:c7:ba:f4:a8:52:fd:d4:
7d:8e:e9:d1:27:9d:eb:21:f4:4e:ff:7e:ea:27:8e:
95:fa:4e:11:c3:f6:bb:5d:71:4e:99:da:fd:7d:56:
d0:10:37:6e:ea:69:ed:f4:ff:6c:80:95:74:c4:7e:
41:9e:b9:43:57:8f:c4:e4:f7:17:2a:c1:42:be:5d:
81:91:5a:16:32:9a:f6:d9:af:81:12:cf:ba:dd:36:
65:87:02:f3:38:69:bb:8a:dd:9e:1f:39:d0:7a:80:
11:7a:48:3d:f5:58:53:f8:c5:97:6d:3e:0e:1b:b3:
41:19:6a:77:4a:6c:91:69:10:5b:99:71:e9:a4:98:
52:18:5d:f5:a3:ba:b6:60:37:3b:71:5c:0f:da:00:
bc:dc:11:32:9f:ee:46:92:18:55:19:63:22:94:11:
11:57:54:7f:99:d5:4d:ee:a5:be:70:5a:e3:61:8f:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:0F:98:D5:61:C7:DC:87:0F:4C:FC:BC:A9:5A:59:B0:2D:44:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:800::/38
Signature Algorithm: sha256WithRSAEncryption
8c:6d:a8:65:ee:b4:db:ff:66:88:fe:09:3e:bb:95:c9:f2:30:
30:85:ab:f9:39:67:a3:10:b4:84:a1:0d:68:8c:b2:a9:d0:98:
f4:3a:7e:12:ff:fa:43:e3:cf:8f:66:4a:5d:5d:9c:37:09:97:
bd:da:70:9a:4e:28:c0:a7:b7:c6:f1:14:d3:eb:a5:86:33:a5:
ae:eb:a8:1b:7f:73:d1:8b:d8:c7:c6:36:3e:b5:8e:8c:de:50:
c2:c2:bf:87:5a:84:a6:53:91:d9:0b:e3:9a:a4:f9:ad:97:a5:
9f:44:ba:e2:19:3b:93:dd:ff:2c:dd:23:39:3b:38:5b:7e:7b:
48:6c:e6:e2:fa:2e:ae:2a:5a:52:57:4f:a6:05:86:13:e9:02:
7c:c7:3f:8b:62:c7:09:10:79:30:13:38:ff:05:50:44:b5:ca:
cd:cc:b8:ae:ac:3a:11:9a:0a:ad:6b:4e:2f:35:94:c7:f9:1b:
77:6b:33:b6:49:28:f7:dc:21:fa:44:3d:ef:af:44:57:ee:a1:
81:d9:6c:1d:e2:9f:f9:a6:80:19:24:f2:8a:3e:43:e3:37:0f:
c0:b8:b1:f8:f0:8c:05:b2:2d:cf:bb:67:82:16:41:71:9f:91:
2e:8b:e8:67:99:ba:90:8c:00:52:d7:d0:93:47:7e:a8:44:f1:
5d:e6:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:11 2026 by rpki-client