Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9762274-c916-4e75-a8ee-f0e4966bd488.roa
File: c9762274-c916-4e75-a8ee-f0e4966bd488.roa (raw, json)
Hash identifier: fC93Mu3R8om9SgMVNrh/JkJaON+enW6KmEWLKF1cRzE=
Subject key identifier: EA:F4:3E:50:8A:B8:DA:5C:08:EE:74:BC:95:07:A9:67:C8:38:81:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 330790483EF7C8EB80F20F603B03594D0BD5BCB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9762274-c916-4e75-a8ee-f0e4966bd488.roa
Signing time: Tue 04 Aug 2026 01:10:06 +0000
ROA not before: Tue 04 Aug 2026 01:10:06 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:07:90:48:3e:f7:c8:eb:80:f2:0f:60:3b:03:59:4d:0b:d5:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:06 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=fe529aa119f9a48d00582473b86048fe894629ccffb7cfbee7821f559ecc8022, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:e6:c1:6d:bf:0a:11:55:f6:10:c7:36:8f:
02:4a:be:4d:ca:a5:63:4e:12:76:bf:45:ea:22:19:
cd:d0:97:5e:45:8f:60:8e:9f:75:bb:c8:4d:31:9d:
ea:ac:6b:e2:0a:79:85:66:49:5c:a6:52:a4:30:a1:
55:0b:e3:58:cf:2e:aa:65:6a:18:82:10:95:8e:33:
4e:46:ca:04:1c:8c:6c:88:78:48:30:64:76:c2:47:
26:5d:a8:f3:49:8e:7e:6d:bb:37:80:5a:99:38:69:
5b:2d:a2:27:11:4b:c0:ae:2d:a3:70:30:b7:78:1d:
05:06:73:8f:87:91:b6:7f:b2:e8:8d:03:62:bb:7f:
ee:90:08:f9:17:24:eb:c5:0a:55:ad:bc:fc:55:9e:
8c:d8:75:50:d8:08:5e:01:3a:5b:42:ba:b0:65:10:
f3:2e:c1:96:45:6f:df:28:ef:53:3d:b4:1e:8a:95:
97:58:6a:b2:a6:9e:e6:f4:29:3c:8c:28:a0:5d:42:
88:ce:f2:9b:8c:0b:77:99:91:22:93:78:21:33:e1:
22:01:24:e1:83:d6:e4:e4:ca:cb:60:56:c9:d2:cc:
f7:6d:bf:c0:12:57:a9:7d:fb:3f:fa:f9:cd:e8:6b:
ec:7d:f4:ae:58:83:75:13:1a:e0:82:9f:47:a2:b4:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:3E:50:8A:B8:DA:5C:08:EE:74:BC:95:07:A9:67:C8:38:81:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9762274-c916-4e75-a8ee-f0e4966bd488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:9000::/40
Signature Algorithm: sha256WithRSAEncryption
26:d4:81:46:47:7a:8e:be:47:48:28:7b:1f:bc:6b:f4:a6:4e:
42:67:e0:b2:42:11:40:ba:59:a4:97:f8:3d:ab:04:c3:81:8f:
d6:83:0d:0e:96:75:21:09:37:20:f7:ad:0a:cf:3e:d5:8b:88:
b2:0f:0f:fc:47:11:30:fe:71:69:53:d5:45:b9:fc:5f:f3:c5:
4c:36:89:ac:ec:d7:26:e4:45:31:e4:1a:28:ce:74:3e:4d:f1:
8a:9a:6b:8a:5f:bf:7c:cb:3a:a6:83:b0:4e:33:db:66:55:16:
5e:2f:7f:73:4f:48:f0:99:72:c5:0d:2d:f0:db:fc:ff:92:b6:
21:4d:03:9e:72:21:f0:13:2d:54:52:4b:80:72:52:3d:6f:fb:
a4:78:6b:48:36:f3:0f:ba:0a:0c:91:06:97:c8:76:6c:99:1a:
de:ae:27:48:06:41:36:8b:aa:ee:4d:8c:4e:d9:34:87:89:bd:
33:37:0c:6c:a5:cd:6b:ae:ea:7e:da:9e:26:fc:75:f1:15:08:
2d:21:50:0c:0f:76:6b:cf:b2:c3:b4:e8:d8:ff:0d:a0:39:ab:
f8:fc:5b:ac:ed:34:12:59:3d:3d:46:c5:cd:1c:ee:7c:97:d2:
21:c5:dc:bb:76:2c:bc:f8:72:63:eb:83:cf:58:66:c3:15:fd:
11:db:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:10 2026 by rpki-client