Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ff0a46-4c68-43b8-be33-3f3098623685.roa
File: d7ff0a46-4c68-43b8-be33-3f3098623685.roa (raw, json)
Hash identifier: JBSHDtu/Zzt+7vwYuytwJj+MsilV4fAicxw/A/oRup8=
Subject key identifier: 36:DA:56:B2:E8:17:83:62:B5:DA:29:5F:89:74:25:A0:16:8B:C2:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 722E886CECEC296569374A698B003018AAEDE87E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ff0a46-4c68-43b8-be33-3f3098623685.roa
Signing time: Fri 07 Aug 2026 04:40:11 +0000
ROA not before: Fri 07 Aug 2026 04:40:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2e:88:6c:ec:ec:29:65:69:37:4a:69:8b:00:30:18:aa:ed:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1e00bd9d5873e3d378fdbb8885a686d2626088d2a5dc1c032d8a8f542a90a4b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:8a:6e:8b:6d:a7:2b:09:62:78:a5:d3:24:
84:74:ee:26:42:cd:4d:48:ce:67:53:e9:b1:06:74:
c4:30:1a:be:c1:42:98:fa:fa:60:6e:29:36:cb:aa:
f5:b3:5f:1a:48:9e:70:89:d9:46:c3:86:05:be:f3:
2f:33:93:21:9f:11:7a:aa:a4:32:75:0d:2d:3f:27:
4b:64:8d:8d:9c:5d:6c:4e:a6:72:c7:74:3f:55:65:
82:c0:97:b0:07:66:65:21:2a:05:c8:2b:6d:bc:a9:
04:b5:81:34:b6:da:ee:01:e1:dc:61:65:d9:6e:33:
a7:57:50:49:5d:d1:59:c6:2e:4e:5d:36:ef:f9:f4:
48:3d:bb:03:04:7a:fd:57:67:68:16:18:66:a1:a4:
01:4d:b5:08:f0:5f:bc:d2:be:69:7c:7f:3e:81:ad:
9b:c6:5e:b6:01:41:76:a3:b5:96:0d:24:6f:fb:d9:
ec:d0:ed:0a:9a:61:74:fa:81:f1:a1:28:b0:4c:3d:
89:f1:f7:a6:ab:1a:48:85:f7:5f:52:56:14:f2:71:
8d:61:eb:15:e6:e1:9c:96:ea:3e:19:c9:64:3b:42:
24:79:73:ad:f9:7a:55:df:47:26:1c:88:27:4e:d1:
41:1a:8f:b6:67:2f:92:90:d6:80:19:7e:42:0d:8f:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:56:B2:E8:17:83:62:B5:DA:29:5F:89:74:25:A0:16:8B:C2:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ff0a46-4c68-43b8-be33-3f3098623685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
51:0e:c2:9e:41:5c:61:8b:3d:00:06:97:dc:d2:b2:1a:6b:cc:
bb:a5:23:d9:c1:2a:e2:27:8b:8c:c8:e4:08:24:ec:74:4f:dc:
8a:56:a4:ab:f1:be:64:12:b3:54:c3:74:60:65:76:91:29:99:
93:ff:8e:50:0c:98:c1:17:20:70:67:36:f9:3f:01:23:3f:7d:
59:8d:24:37:35:a1:bd:94:dd:09:8c:4d:1c:43:4b:12:59:2e:
02:56:b0:e1:80:0d:aa:df:d9:e9:de:87:18:e4:df:28:46:48:
78:f1:49:fa:b3:05:5d:a7:70:08:d3:37:f4:57:60:32:05:90:
ac:60:ec:30:c7:a8:ec:b2:6a:44:3b:d0:f0:6d:99:9b:24:4f:
20:5d:70:10:ae:6b:b0:46:e5:6e:52:8f:a2:8e:5f:9f:e7:ee:
c1:82:b7:62:4a:3d:b2:82:aa:eb:e7:4f:51:78:95:65:e7:61:
d3:c4:03:01:bd:f1:65:83:84:2b:9d:37:11:4e:23:d1:5f:bd:
1e:55:8d:9b:e3:35:91:70:52:0d:b1:a3:9f:c0:15:a2:4e:16:
ab:59:7c:2c:47:e5:ba:e9:0c:13:fd:09:d8:95:d1:22:c6:13:
13:dc:11:b6:d1:30:c2:f6:6f:e4:65:05:4a:27:31:6e:8a:d4:
86:18:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:48 2026 by rpki-client