Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7799f50-6acc-4097-88e1-1a281b4503e4.roa
File: c7799f50-6acc-4097-88e1-1a281b4503e4.roa (raw, json)
Hash identifier: 8fssWI1uFIaQBH4tVI9XqHdNUXr6QPCGBlf//GfSFXU=
Subject key identifier: 26:4E:F1:A7:85:BC:BD:B9:2E:C7:83:DB:1B:03:82:17:D5:BF:5A:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D99858D198AA219B607AC2FD24E75B4B1FD22D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7799f50-6acc-4097-88e1-1a281b4503e4.roa
Signing time: Wed 19 Aug 2026 01:00:40 +0000
ROA not before: Wed 19 Aug 2026 01:00:40 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:99:85:8d:19:8a:a2:19:b6:07:ac:2f:d2:4e:75:b4:b1:fd:22:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:40 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=e03f84a35a3e41d480f11c68321bc36e25a65e61e3cb8183f38be9c3914d5ad5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:be:9a:ad:6a:c2:a3:09:fc:35:b3:c8:d0:
ea:10:ee:4e:3c:9e:a8:5b:63:77:8b:f3:2b:fa:e4:
89:f9:c3:45:6f:cf:c2:a3:e6:49:9c:e4:9f:a1:0e:
c6:70:90:31:8c:ee:a9:24:c8:ea:e7:ef:0a:46:ab:
e5:d9:83:e3:5c:d9:25:de:01:cf:c0:e2:bc:44:81:
36:54:a8:f9:c7:11:00:62:ed:d0:ac:d5:90:35:5b:
6a:91:a5:1e:e0:a7:c6:fe:4a:e7:c7:4a:3c:5d:31:
1e:c5:ca:4e:d4:c6:cc:61:b9:45:c5:33:0c:a3:a1:
76:64:8e:1f:7b:a0:69:78:b0:63:28:a6:c9:ff:7e:
4e:1a:b4:d8:4d:38:43:5b:6d:50:27:0c:34:0c:8b:
01:ee:92:56:fa:0a:ef:3d:cf:60:04:83:cf:d5:92:
3f:06:91:16:f2:9a:d9:81:e7:64:38:c0:dd:b8:13:
37:f9:5a:a5:5e:8b:59:1f:4e:5b:fd:c1:f4:20:04:
c4:54:98:b9:d9:2a:a3:f9:1f:2b:a4:7a:96:b9:8e:
8d:bf:09:dc:18:7e:d9:30:55:ef:ce:f2:07:8b:7b:
a6:34:1b:8c:ff:39:11:70:88:55:e3:2a:f1:ee:d5:
63:0d:eb:2a:5c:6f:60:b6:f5:8f:cf:27:0b:85:09:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:F1:A7:85:BC:BD:B9:2E:C7:83:DB:1B:03:82:17:D5:BF:5A:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7799f50-6acc-4097-88e1-1a281b4503e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:a1:79:50:cf:b8:30:2e:73:13:19:fc:ed:98:0a:ff:62:d4:
6a:01:4d:08:e2:6b:9d:dc:97:e7:f2:40:e5:ea:a7:24:02:37:
23:b9:37:d9:5e:41:17:b0:1c:72:3d:8c:c6:98:be:20:b6:9c:
14:e0:51:e9:6a:b1:ea:d7:a3:1f:22:72:a9:ee:82:b5:08:c8:
2f:00:4d:ea:d8:06:bf:ca:d8:91:c3:43:a9:77:88:d6:5d:00:
68:ca:77:a2:60:c9:99:d5:e9:c1:d9:28:b9:68:ad:ba:df:ea:
69:5e:8f:57:63:09:a3:ed:87:61:8d:b6:6c:11:1c:f0:26:51:
37:9e:ca:a0:05:38:d9:16:80:e3:88:e7:4e:c0:7a:76:ac:c5:
38:4d:c7:b3:7f:28:1f:8c:dd:c8:a9:80:f2:52:18:4c:2c:06:
ee:b3:70:3a:14:eb:89:0e:02:17:f5:ed:b8:7b:c4:fc:26:40:
91:ff:71:60:e5:ea:27:56:24:2a:8d:5d:91:1d:2a:e6:08:a3:
be:77:12:e9:31:39:bb:0f:f3:cb:14:02:4d:64:24:ff:ea:04:
7f:bd:01:9c:6f:ea:72:fe:3c:e6:9e:e0:02:9d:ad:11:0d:f5:
86:65:4a:b6:e3:3c:b9:50:d6:a4:59:a2:39:f6:e6:0e:6b:e9:
84:31:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:25 2026 by rpki-client