Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json)
Hash identifier: +TnKRevsSDDJF5YKfWqPvWtKM2a2Vf8hSY5veP/JV8U=
Subject key identifier: EE:16:77:D9:B4:0D:FE:76:17:AE:C3:37:9C:18:1C:72:77:0C:2B:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 542F2A3C68534F1F5C2E638BDC5D293B7B8278FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
Signing time: Fri 07 Aug 2026 04:30:33 +0000
ROA not before: Fri 07 Aug 2026 04:30:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2f:2a:3c:68:53:4f:1f:5c:2e:63:8b:dc:5d:29:3b:7b:82:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=edb3db74fae5e9e31ad8ece4495a9d9e10ae337bdaba0757f401fc62dda3ddd2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:b6:bc:4e:bf:74:d1:0b:9d:13:73:8a:6a:
82:d5:6f:cc:40:f9:bb:de:ff:a4:e5:0e:b0:cf:fc:
c2:2b:9c:82:62:73:60:c3:b5:72:96:38:fc:1e:f9:
ed:b4:b2:06:d0:4f:23:4a:17:ff:90:45:9d:06:f4:
55:a5:c9:88:62:aa:fb:af:e1:44:fc:c3:5e:7f:33:
02:2c:e6:ea:a6:cb:d3:58:ef:3a:d2:52:7d:50:54:
1f:50:24:e2:d4:8f:6f:83:f7:66:e8:68:2e:43:6e:
f4:25:ca:75:85:11:ac:12:1f:64:c5:29:0a:7e:67:
04:8d:6e:07:96:4b:0c:91:f1:c7:36:ce:0e:21:aa:
8a:10:7e:14:bd:24:d4:f2:06:e5:95:ce:32:29:e1:
5b:36:cb:50:f2:24:3a:63:fd:6c:07:2d:21:10:10:
10:4f:0a:0d:6d:a0:e9:33:d4:bf:1b:9c:7f:9a:b0:
29:65:fe:56:3d:5d:b7:cf:45:6f:57:e0:f7:f8:81:
ea:d3:72:c8:e9:ae:38:2e:03:84:7f:5e:d1:e9:1d:
fb:7c:aa:1e:a3:55:2e:75:ff:6c:f3:2b:f0:29:82:
b7:39:ef:69:a1:e6:2d:b0:e6:01:9f:77:39:03:c1:
c6:e9:db:b6:67:d3:84:c1:0b:0f:7b:28:7a:a8:0f:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:77:D9:B4:0D:FE:76:17:AE:C3:37:9C:18:1C:72:77:0C:2B:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:25:2c:f3:6d:46:07:c6:ed:14:b9:79:da:6b:a3:1f:e2:83:
40:a9:70:44:37:45:68:28:81:fc:19:ab:9f:dd:e0:cd:53:3a:
b3:9d:88:ff:25:62:6b:76:23:2d:17:b4:85:34:0f:eb:24:cd:
04:4b:34:cd:90:d0:71:d6:8a:47:50:ae:83:76:87:22:29:97:
aa:c7:e5:88:ec:a9:7b:a5:3e:04:9e:66:80:f1:dd:01:2d:0a:
69:0c:ff:aa:c1:ca:2f:73:6e:5d:63:00:fa:df:08:69:82:a5:
dd:da:07:c1:d9:71:66:02:f1:c1:61:b5:8a:9e:68:12:b6:81:
fa:b2:e8:ec:37:3d:f0:d4:ba:36:da:b7:44:5b:d7:3f:a5:30:
0d:0c:49:4d:fb:c9:89:eb:85:49:21:47:0a:b1:55:e7:fe:91:
27:aa:b8:26:6b:cd:4d:a2:9c:d3:a4:0f:2d:52:f2:0d:2d:ae:
2a:cb:f8:d3:91:d8:52:dc:82:18:25:56:8e:42:9c:cc:60:ed:
36:82:60:38:5d:a8:9f:48:8d:0f:17:8d:e9:20:a9:43:83:aa:
92:8b:36:13:2e:3d:c3:0e:77:fc:42:92:ac:53:84:9b:d2:c9:
8e:31:6d:01:ed:95:12:03:f5:42:1e:f5:6b:4a:dd:60:95:f8:
7f:59:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:38 2026 by rpki-client