Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
File: ddbb8798-3423-4d98-a384-58621b010556.roa (raw, json)
Hash identifier: tPpvQLemfOZeLOu+Fe5Iu12JHZ8koKnRzbCRXqBv7u0=
Subject key identifier: 5E:31:3D:A5:97:69:F3:64:99:0E:96:BE:70:E7:E8:8E:D8:65:1D:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0720F7E492EA4C32C584029CF1F5EC72B09644EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
Signing time: Fri 07 Aug 2026 05:20:27 +0000
ROA not before: Fri 07 Aug 2026 05:20:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:20:f7:e4:92:ea:4c:32:c5:84:02:9c:f1:f5:ec:72:b0:96:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=900ff7654b49069b0c1525b05e718cecbd7696374174e4a303a5658397cbed43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:5b:a4:03:72:86:42:d3:01:23:78:9c:c8:
34:87:37:d4:7f:88:4c:34:bc:ad:8d:ff:6d:26:af:
a5:be:f7:f0:58:34:4d:58:04:d8:6c:f7:e4:c0:a8:
af:45:cf:f7:ca:e3:27:57:c7:0d:04:b6:08:38:4a:
3c:a8:d1:61:dc:f8:a4:b0:67:15:a4:42:f7:da:3f:
fa:92:70:15:0c:16:97:85:bc:f2:04:13:78:ad:40:
93:7b:23:a4:dd:87:76:7e:ee:fb:b6:b1:a3:3d:d5:
bd:5d:44:b9:ef:45:5d:ec:20:f8:f9:9d:b1:d8:60:
86:9b:35:c1:4a:f0:90:62:f1:b0:ee:01:16:0f:bc:
f0:35:f0:aa:dc:fb:d9:e2:86:43:89:5a:77:d0:f4:
51:a0:d8:99:0e:d7:d6:15:53:cc:dc:6e:b0:4e:f2:
53:ce:ee:64:46:85:42:c3:b6:65:a5:e3:e7:9d:c8:
a3:4e:15:65:b5:2c:c3:46:94:6f:a4:0d:c2:19:33:
61:44:41:83:7c:d8:49:9e:4f:12:4b:92:27:65:6d:
53:5a:1b:58:50:91:70:fa:5b:f6:62:89:9d:3d:2b:
da:85:74:28:b5:aa:3b:89:2f:b1:ee:3c:fe:1e:a9:
42:23:21:97:ed:da:45:df:8b:67:fc:18:72:55:c7:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:3D:A5:97:69:F3:64:99:0E:96:BE:70:E7:E8:8E:D8:65:1D:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:c00::/38
Signature Algorithm: sha256WithRSAEncryption
48:4a:1e:6c:1a:db:4e:3c:aa:e6:bf:85:54:72:b9:83:3b:35:
d0:cf:e6:0d:4f:69:ff:27:4d:31:4d:11:52:bf:df:e7:8f:b5:
c4:8e:e4:cf:2a:85:5b:c3:1f:03:d4:a3:d4:05:26:d1:41:87:
cc:5b:86:c4:86:66:04:f7:ac:6f:f7:31:2c:0e:c2:2d:66:07:
44:c6:04:09:09:47:df:e8:ec:d8:94:44:af:24:fd:58:45:9a:
be:b5:8a:dd:cc:41:69:d3:65:35:ee:93:94:19:1b:f6:3a:16:
eb:05:ae:f2:60:e7:b0:5a:4d:a5:3e:e0:cb:3f:4d:80:d1:ab:
9b:87:aa:48:2b:46:d3:e1:b3:a3:e0:5a:f2:93:c2:ed:e9:4f:
ca:ea:b4:83:4d:9b:67:78:da:95:03:fe:25:af:62:fb:7c:7a:
b7:45:26:f0:b5:c6:02:e6:da:6c:80:d7:f7:20:08:fb:40:a2:
48:de:87:e9:68:64:05:f4:57:e5:55:f9:83:b3:14:2e:6b:a2:
66:7e:d3:2e:2d:6f:1c:2d:45:d1:a1:45:55:7b:eb:fb:1f:5c:
4f:1a:51:49:b2:da:2a:42:35:11:80:44:26:62:99:df:22:62:
92:2e:61:3d:cc:f1:1a:c4:cc:8c:0d:dc:56:45:ba:07:a6:02:
08:5d:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:22 2026 by rpki-client