Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa
File: c056757c-bb27-4ef4-91ff-67b9307d3085.roa (raw, json)
Hash identifier: 0149PqEyOLLFA/lY52VYoUXiSIeLodyKSXEuWFRsBvQ=
Subject key identifier: 6E:8E:0E:33:7C:2C:B9:1D:83:E3:FE:B1:D6:2E:AE:40:B3:56:F2:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 393F477085A154FDD39FF7043172655BD2A6C970
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa
Signing time: Fri 07 Aug 2026 05:30:17 +0000
ROA not before: Fri 07 Aug 2026 05:30:17 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3f:47:70:85:a1:54:fd:d3:9f:f7:04:31:72:65:5b:d2:a6:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:17 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0ac031d3d4992d0435e58ce8171e92028a83d5a3ef63d39237b30d3569f7400f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:35:44:5f:aa:1b:ef:68:0a:a1:c6:a5:a1:
6b:0c:15:28:0c:fe:35:ec:41:de:67:64:43:43:c2:
b8:73:da:43:52:bf:e7:db:dc:86:1a:ad:7d:83:97:
3f:ed:cc:1f:9c:4f:54:ff:d9:f8:dc:e2:bd:4f:9b:
9b:79:f5:8b:03:5b:4b:1a:d9:a2:e4:d1:40:e4:d3:
c6:bd:05:c1:4d:ac:af:73:d2:e1:c1:7c:2d:27:8e:
b8:bc:73:8c:99:53:ce:9b:99:89:4e:4b:46:37:06:
9a:1d:ef:92:b1:2c:41:48:64:d4:a9:75:00:88:b4:
2d:6d:80:58:ac:80:bf:6b:c1:be:4c:1d:08:18:ae:
91:b2:02:77:ea:79:9d:4a:7d:00:e9:59:03:cc:ce:
d3:eb:27:bf:76:dd:c5:9f:1c:59:1a:a0:63:4d:6c:
fb:ef:b2:22:5f:22:f3:c1:a4:77:bc:d1:4d:5d:c7:
a0:49:ca:28:2e:a1:97:1e:0c:10:0b:c3:79:ff:c8:
ee:fb:bb:47:bb:d8:e1:52:4e:84:40:7a:7f:b4:e8:
c0:4d:98:f3:0a:9f:f5:34:f8:2a:52:dc:41:79:64:
a3:6a:b0:67:58:8f:56:fa:34:77:94:53:ce:61:c7:
7a:ec:bc:52:90:c8:89:74:5b:93:3b:6c:49:79:4e:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:0E:33:7C:2C:B9:1D:83:E3:FE:B1:D6:2E:AE:40:B3:56:F2:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:7b:1b:82:32:ba:ef:0a:69:08:78:c5:72:1e:db:b1:d6:2a:
a3:16:b3:05:c2:b3:99:ec:f7:76:be:a4:9b:f6:e4:53:4b:48:
38:2f:2b:bb:b8:8a:20:b9:84:53:9e:82:44:ba:ab:d4:36:ae:
32:64:cd:3e:b2:59:b5:f0:62:f9:fe:37:22:61:be:5d:56:36:
45:30:92:e1:e9:16:6c:9c:df:a7:07:16:6f:63:04:a0:2f:bb:
68:52:0b:bc:32:28:d3:11:6b:4f:ca:e6:5a:8b:d0:77:a8:7c:
70:35:5c:37:f2:49:d1:03:68:68:fd:a3:8e:93:8c:03:5e:78:
97:76:73:66:9a:da:7f:f2:55:db:ea:e7:a2:44:9d:1b:0e:32:
4c:6d:82:c1:19:37:a8:b7:f7:c7:60:74:a3:4c:02:97:00:bc:
29:40:61:0c:db:ea:de:7f:c8:48:b7:a2:af:34:6a:35:43:b6:
db:67:3a:6a:e2:35:7f:b2:b8:f9:af:5b:c8:d8:d7:d0:ca:99:
ef:fb:8f:90:6a:0e:56:2f:85:8c:fb:c2:1d:93:ee:85:2d:53:
1b:80:1e:f8:e4:07:a8:10:c8:14:24:c0:57:71:93:e6:8a:aa:
a5:0a:2a:b0:e4:33:67:28:ec:24:c3:3c:38:f1:11:ed:8b:52:
57:1c:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 23:39:42 2026 by rpki-client