Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
File: ce04c6c2-3994-4b71-a579-ee490d4b125b.roa (raw, json)
Hash identifier: GV6YDh0OplGaU0J+Wxm23KJMcAxFWQJuwNHj2uiBJbc=
Subject key identifier: 07:92:00:17:29:80:2B:56:76:C7:29:8F:E0:D6:13:A2:D7:E1:64:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 613716CDA69EF74C0A84E8B735CD8D2F51B17ED1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
Signing time: Mon 03 Aug 2026 01:30:18 +0000
ROA not before: Mon 03 Aug 2026 01:30:18 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:37:16:cd:a6:9e:f7:4c:0a:84:e8:b7:35:cd:8d:2f:51:b1:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:18 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=a8bde2cfd258d8fecfbdb410ce401d104cd65282abde077065f8be1c19d2ca6d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:1f:ec:32:f7:f0:ed:e6:e1:39:85:94:5b:
64:f1:50:c3:86:a6:77:0e:3e:17:43:5a:d4:66:0e:
f3:b1:49:38:cc:85:82:0a:63:22:85:84:02:1b:83:
32:cf:d2:ef:24:37:0d:35:08:f6:76:ce:a1:80:45:
72:34:50:bb:49:25:d1:9f:62:67:10:6a:10:57:71:
f0:97:8b:b1:7b:34:04:09:27:fb:52:86:a4:50:53:
a3:15:6d:09:cd:45:c2:4f:4a:19:fd:35:65:d1:9d:
c6:af:00:ed:76:40:b0:12:25:65:21:b9:33:43:dd:
24:98:f2:ac:6b:3b:7c:81:77:6d:0e:28:1c:1f:17:
d7:15:4e:11:87:dc:42:18:f1:b7:6f:db:f3:28:69:
26:e1:95:44:3d:63:e3:ee:56:20:05:5e:bb:4d:2f:
47:05:79:4f:aa:29:0c:da:f9:36:b4:11:e4:bd:e5:
1b:98:2f:ab:f0:6c:a5:74:4a:39:df:bd:da:6e:83:
28:2a:29:88:0d:3c:0d:2e:8a:60:01:5a:2a:6e:69:
76:90:53:78:9b:62:7d:fb:b1:63:04:9e:a4:32:07:
c0:3e:aa:b9:96:aa:65:58:ce:e5:88:c0:6b:09:46:
c8:f6:95:3f:ae:d3:a9:ad:5a:05:fd:d1:c5:68:68:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:00:17:29:80:2B:56:76:C7:29:8F:E0:D6:13:A2:D7:E1:64:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:f000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:11:76:66:93:1a:de:75:7e:a2:dd:c7:d4:63:ed:07:0d:f4:
34:ed:01:1d:ce:1c:62:51:de:4c:cc:e5:0f:bd:40:8a:e3:0e:
5b:e2:99:68:03:51:2f:d2:8d:27:96:ba:8f:de:45:ea:73:35:
92:c0:64:c3:5c:a4:8f:18:f9:fb:a0:b3:02:2d:32:86:79:4a:
83:2e:02:90:36:d7:f3:5f:8e:bb:f6:af:45:79:a2:b0:a8:dd:
16:23:a2:33:73:ef:24:52:d0:96:31:98:91:2f:08:0c:f1:9b:
3c:df:69:75:59:d3:82:3e:84:0e:03:09:9e:bd:f4:22:2d:46:
f4:cc:c6:dd:8e:8a:5f:b5:e1:4b:ec:d3:3c:98:9e:e0:e4:18:
bf:97:c7:8f:0b:35:ce:2e:46:95:db:7e:fb:97:c3:1c:26:c1:
4a:87:99:8b:f3:d4:b5:0e:76:57:11:22:9b:aa:e4:d1:9a:5b:
47:32:bc:ed:08:72:8c:c8:af:da:a2:aa:64:6b:dc:4b:21:73:
23:fb:65:09:ef:31:e0:bf:e5:3b:cf:20:c3:f1:36:dc:e3:15:
b4:b5:48:19:e6:12:d0:55:5c:4b:fd:50:c4:0f:8a:d7:28:31:
87:94:77:37:69:fc:d8:fd:04:8e:d6:97:2c:4f:6b:c8:df:a2:
85:06:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:17 2026 by rpki-client