Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d776994a-af2b-429b-a96a-85d6c3d8262a.roa
File: d776994a-af2b-429b-a96a-85d6c3d8262a.roa (raw, json)
Hash identifier: qgxSnROsGx996bk4VfLIyBQ1q0iZ579y0DrFMqBL4mE=
Subject key identifier: DA:F1:EE:86:22:C0:5A:71:A9:EC:48:1E:05:DD:EB:7A:2E:11:FF:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 427EA7105A0E157226532730D6761435CC4E4C5C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d776994a-af2b-429b-a96a-85d6c3d8262a.roa
Signing time: Mon 10 Aug 2026 01:00:50 +0000
ROA not before: Mon 10 Aug 2026 01:00:50 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7e:a7:10:5a:0e:15:72:26:53:27:30:d6:76:14:35:cc:4e:4c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:50 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=4380151549f2b9c7a99d0765ba6c857fa61224fb62d9814ee4ae7f7f97301191, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:a8:74:87:1b:38:06:66:77:85:dd:a3:a8:
8a:b2:c6:bc:97:6a:97:66:2b:8a:bb:20:ac:ba:75:
ed:a0:72:f3:23:ac:c3:52:a0:67:24:d1:b8:b6:32:
95:0d:e0:25:e7:eb:78:6d:fe:1d:e6:61:6b:82:6c:
a2:ba:6c:15:53:de:15:b1:75:17:80:6b:02:59:86:
d8:14:35:c8:3d:3f:17:0f:bc:e5:07:3a:bb:6c:b4:
6b:d5:03:e8:1f:7d:e3:46:4c:71:b7:0d:3a:6f:51:
03:8b:de:5a:80:4b:9d:8c:44:27:04:9b:ec:cf:46:
05:c7:69:3f:fd:21:18:bd:8b:e8:94:99:e5:b4:8c:
05:36:0d:71:45:d0:34:41:7a:91:d4:e7:16:c7:53:
67:9f:72:4f:3c:19:52:46:b1:b7:49:2e:b5:9d:e5:
e6:a0:e5:e8:9d:32:43:9d:ff:c0:34:21:8d:e2:87:
04:0b:b7:5c:1d:64:9f:42:3c:ed:13:bc:c6:c0:c1:
96:21:b9:8e:77:13:8c:37:5c:ec:9c:b3:7b:1d:19:
7a:25:cd:5e:bf:42:40:b8:53:43:cb:08:33:42:26:
0b:13:69:07:f0:ff:24:6a:78:03:c1:4f:86:ef:87:
f1:2a:dc:4f:bb:51:35:a9:69:7f:0c:b9:70:fc:b8:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:EE:86:22:C0:5A:71:A9:EC:48:1E:05:DD:EB:7A:2E:11:FF:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d776994a-af2b-429b-a96a-85d6c3d8262a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:b8:ef:74:27:0a:0c:e0:e9:c1:3d:41:91:a1:ed:0f:9c:15:
32:18:33:6d:84:d3:65:0b:1c:47:4f:2d:eb:01:69:d5:15:ba:
e3:f7:c3:f0:a8:59:df:59:be:20:f5:dc:cf:55:d4:8a:9b:fd:
bb:7e:ef:a6:5b:49:4d:fa:8c:cf:a4:f4:c7:55:59:93:7f:c0:
96:69:4a:21:0a:33:cf:1c:bd:6f:65:62:29:b7:40:44:92:c6:
e4:91:ed:44:8b:97:40:f8:89:4a:3c:82:bf:eb:2c:63:12:c9:
03:17:cf:39:d1:d7:1e:88:c6:63:68:6b:81:21:b2:36:86:1f:
df:28:e8:28:b4:bf:4c:f9:6a:bf:d8:58:2e:c8:8e:b7:d9:c2:
36:13:79:ad:59:60:1f:2b:93:56:03:f0:bb:7a:f9:71:d4:4f:
3b:91:30:01:99:51:f0:9a:a3:96:1a:1a:3a:8b:6a:b2:76:6a:
7f:ae:48:d1:34:44:25:60:2c:96:4b:75:dd:8e:7f:ca:e9:7c:
6e:8a:fe:b9:99:f1:7b:60:ad:81:d6:6f:62:ee:ae:85:6e:c3:
f8:2c:36:65:bd:f5:9a:73:3b:54:50:7a:e5:0e:7d:bd:ee:0c:
fd:31:1c:ab:b4:30:ec:a1:be:2d:bd:7a:81:4d:4d:5e:12:5a:
ef:4f:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:37 2026 by rpki-client