Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa
File: c96bf604-3011-4557-9ec9-70093d8470a9.roa (raw, json)
Hash identifier: fkLD3w33D1J5wYvSDMZNrq0jK/CWBJincaBOvGYFnS4=
Subject key identifier: 17:69:9A:BE:EF:B4:DF:A5:A4:73:CF:64:1A:39:71:7A:68:5D:A2:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 674C60D215358140112067B9D7A313169D3D65E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa
Signing time: Thu 10 Sep 2026 02:40:07 +0000
ROA not before: Thu 10 Sep 2026 02:40:07 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4c:60:d2:15:35:81:40:11:20:67:b9:d7:a3:13:16:9d:3d:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:07 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=c3bc3e3725773b955b31dccfbd2c48e910f3bff74e69d98bd764589bdc60a804, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:41:9a:d6:aa:08:ca:0e:3a:36:6a:d1:5a:
c2:49:5a:58:8c:be:56:51:d4:16:36:53:80:20:f7:
9b:82:71:3a:2e:87:66:0e:50:86:af:d1:13:ae:91:
1a:3b:f2:0b:d1:67:9a:a9:17:9e:aa:07:8f:7d:9c:
ca:c9:13:8d:b4:9d:6b:c8:3a:6b:dc:45:1a:f8:d4:
6b:d6:70:fb:9f:db:1d:e0:96:12:fb:ed:3c:c1:1a:
56:ca:ab:98:c5:a9:e2:7f:94:72:00:f2:e1:e5:bb:
ec:83:67:b6:4f:f9:78:87:5c:d2:d5:1c:9e:ba:7f:
4f:53:5e:79:bb:bd:51:97:03:59:70:7a:bd:10:4f:
88:a9:8d:de:d3:de:02:70:88:6f:e3:63:a5:4c:b6:
28:9e:74:fe:22:ba:24:e7:63:59:91:ae:3e:f3:3e:
c8:d1:b9:54:a3:f9:18:72:e9:d1:23:20:c6:99:c7:
80:e7:95:13:9c:68:1b:55:53:d0:cd:62:5a:7c:47:
6f:a8:ce:a3:27:7c:0b:4d:50:78:eb:09:04:70:12:
7d:71:47:64:e0:74:df:31:dd:bb:f1:3c:86:e2:b5:
38:f4:27:d2:fc:b0:27:da:97:52:32:7e:3f:3f:23:
de:fb:1d:d8:3e:5d:23:07:8d:67:63:d4:0f:09:1c:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:9A:BE:EF:B4:DF:A5:A4:73:CF:64:1A:39:71:7A:68:5D:A2:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:80:30:ac:da:dc:96:b4:2d:e1:3b:24:7b:09:79:f2:a9:86:
6f:8b:13:e6:eb:2e:1a:61:14:62:bf:f4:d1:38:b6:cb:c1:57:
6f:24:8c:a3:38:e5:03:2a:a6:fc:d1:16:14:e1:f8:a9:23:df:
01:bd:02:e4:d7:d2:3f:4a:de:8b:9e:f2:9c:fc:e9:00:74:a2:
42:59:81:05:de:37:5f:64:c6:4f:93:aa:09:9b:29:cc:15:a0:
eb:36:d2:2d:49:85:40:68:98:cc:ce:5c:ff:a6:fb:38:e5:76:
35:b7:4c:1c:0f:b6:bd:45:4b:4d:01:34:fd:f8:40:12:d6:16:
83:e7:87:11:08:a6:ba:03:ae:6a:83:be:20:4a:d9:b5:dd:b3:
86:60:5c:a9:49:5a:b0:46:08:b6:b6:3e:c6:7e:d2:73:ba:96:
e6:29:7c:d2:5d:74:59:6f:30:36:8e:d2:8c:98:28:8d:fb:4b:
57:ec:89:5a:ba:f8:23:f1:ab:85:12:ad:33:71:8b:b0:3b:14:
90:92:76:be:cc:7f:5c:63:3c:a5:ea:b9:6d:9f:90:b0:bd:6b:
2e:58:00:4b:4a:46:80:82:a4:e7:ab:2e:32:97:8a:69:25:45:
08:76:85:81:4c:08:a8:79:c2:68:cc:c2:9d:14:59:e7:df:04:
c2:4d:bb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:42 2026 by rpki-client