Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
File: ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa (raw, json)
Hash identifier: 8nAZPVnhbpX+EsJvzFoFttB9aBq1heazMjdJ549fa/o=
Subject key identifier: 51:47:63:85:8F:EC:50:46:E6:3D:58:A3:FE:8B:A5:04:8B:FC:D7:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F27E5805EC194848C008BADAE9ABE06DAD49356
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
Signing time: Fri 07 Aug 2026 05:10:20 +0000
ROA not before: Fri 07 Aug 2026 05:10:20 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:27:e5:80:5e:c1:94:84:8c:00:8b:ad:ae:9a:be:06:da:d4:93:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:20 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d87b32bacf98c7f3b5d9c0ce1ad5c36e1e76ce38f57ed0cb2b6663e04ea71727, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:c2:24:ec:0d:9c:f9:99:98:6c:d5:83:14:
a6:c1:e2:10:8f:69:30:17:f5:4d:c3:6c:f7:cf:3e:
1e:0c:73:f2:f7:b4:61:3b:8b:11:b7:ed:a8:04:b2:
e1:2f:5e:59:90:47:cb:ff:d3:c5:b6:27:95:9c:ab:
50:43:28:1e:af:49:58:8a:9d:e8:68:8b:ec:41:ba:
07:1a:95:dc:2e:5f:b0:9d:ce:45:a8:a4:f6:78:a4:
ba:e9:85:0f:1d:d8:4d:05:5c:dc:fc:a5:b8:5b:ef:
3d:b1:75:8f:f2:d5:f7:de:90:1c:f6:8f:a4:c4:f4:
c4:6c:d9:7c:7a:fe:b2:84:04:5b:fa:c0:21:30:7f:
fc:52:47:8c:65:c7:5f:74:00:df:28:05:4b:50:42:
a8:b4:6e:c3:d0:0c:f8:87:62:0a:0a:73:2f:f5:0c:
69:43:44:b1:52:45:05:0f:2c:3b:79:b6:c0:83:19:
01:c4:b9:0d:1e:a3:d2:57:5c:ef:2f:e4:17:f5:0b:
31:a6:d9:d0:14:3e:78:bb:4f:2a:7e:3e:2e:0f:6a:
19:83:e0:f4:ac:e1:17:e5:a2:9c:2d:ac:a3:b2:0a:
eb:5f:14:4e:8e:15:d3:c4:2a:47:97:72:fb:94:c8:
d3:e4:f0:ec:8a:33:82:21:09:5b:f6:3d:f2:87:f1:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:63:85:8F:EC:50:46:E6:3D:58:A3:FE:8B:A5:04:8B:FC:D7:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:a000::/40
Signature Algorithm: sha256WithRSAEncryption
26:3a:36:09:b9:d9:b9:5b:3b:5d:1c:62:71:47:b7:7f:46:9f:
5e:f2:c6:af:20:e3:b9:70:bb:40:43:3f:07:bd:12:4b:7f:19:
42:db:9d:5c:ac:f0:b3:57:35:c5:42:49:bc:3d:ec:a3:a1:5b:
68:06:88:8b:f1:e9:ad:f6:26:89:5d:00:9b:00:d1:b1:99:47:
fe:82:a9:5b:d7:d9:50:3c:db:82:5b:84:97:56:5c:10:66:33:
29:a5:7c:3b:bf:2c:51:d4:b5:52:47:8d:37:3b:9a:01:3a:90:
f2:86:b0:fe:ec:af:1f:a9:39:40:3e:de:99:f5:41:b2:16:91:
82:37:83:2a:bb:f2:55:54:e9:e6:39:1c:7f:07:a8:08:8a:c5:
97:02:9c:bb:eb:b3:24:d4:75:0b:8f:7f:41:f5:f6:f2:1f:aa:
b1:52:6f:17:e6:d3:e9:15:5c:be:a4:94:b3:2f:d8:09:75:25:
64:c4:29:8a:8d:18:8c:dc:03:d8:13:f5:4a:c7:a8:d3:5a:27:
29:03:e8:3d:a4:d6:29:53:0a:53:7c:1a:2f:3f:c5:2a:da:7c:
22:83:ba:46:e0:f6:4b:0f:99:b4:0c:d2:b8:aa:4f:80:48:26:
41:72:3e:c4:8a:6a:c8:b9:c4:ed:e5:cc:f7:bb:41:fe:be:66:
55:1a:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:48 2026 by rpki-client