Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
File: e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa (raw, json)
Hash identifier: qscvWavun44J66zcnLQAVMqTfKlRU/xla5uTQ6BQFyw=
Subject key identifier: 70:41:49:FC:4C:46:31:7B:C5:38:E4:70:C5:8E:20:90:3B:99:69:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C888AE8DE47D85B874BEDF308EA0AB3C1DA4130
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
Signing time: Sat 08 Aug 2026 00:00:10 +0000
ROA not before: Sat 08 Aug 2026 00:00:10 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:88:8a:e8:de:47:d8:5b:87:4b:ed:f3:08:ea:0a:b3:c1:da:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:10 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=30f8b7fbd271b6fa8855e82d580fea529f3881a5215d80e4b0a07ef949c115c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a8:56:45:77:54:b5:b2:64:20:79:75:60:4b:
60:c9:bf:ac:8a:1f:df:f3:ad:48:4b:95:3b:9d:12:
3e:40:e9:f5:af:c4:6f:22:da:6d:e3:97:21:3c:c9:
77:47:f0:3a:8c:c3:b3:e0:bd:05:ec:e4:4b:d7:66:
db:46:c4:ed:dc:c9:5a:47:ec:f9:14:c7:5a:c9:8a:
49:53:02:69:22:6a:94:15:a0:2c:fb:1c:bd:42:4e:
ac:b7:8f:a5:c8:51:8f:8a:13:d9:84:92:25:6d:d8:
12:18:72:33:89:fe:72:4a:1c:fa:3c:83:79:93:da:
b1:4f:eb:9e:fe:1b:b4:21:9b:9b:2d:69:dd:7b:f4:
48:09:33:12:ac:a5:5c:4f:25:6f:be:a1:b1:42:8f:
40:43:1a:2e:7c:8c:ba:fd:f3:e7:b6:3d:9c:ec:76:
e1:de:53:3f:ad:de:a1:f5:1a:13:90:41:0f:b9:52:
a9:1a:87:a8:47:f0:70:a2:e6:67:b9:24:79:bb:02:
42:ef:ce:8f:16:75:2a:b4:75:0f:fa:d3:68:8f:93:
75:93:4d:dc:7b:ab:48:50:0f:d2:0e:06:05:a1:d3:
57:74:f0:f3:7d:b3:07:89:dd:6a:8e:a1:99:e7:12:
a1:de:47:99:ab:55:62:f4:bd:52:b2:8f:ec:37:f7:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:49:FC:4C:46:31:7B:C5:38:E4:70:C5:8E:20:90:3B:99:69:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c8:bf:f1:35:fa:18:27:bd:44:de:f0:cc:1a:12:27:cc:b3:7e:
8e:68:cd:f5:be:f3:72:fb:86:4e:10:29:aa:ec:a9:0c:0d:80:
5a:19:db:4d:23:de:47:db:b5:64:04:70:62:2e:94:fa:b7:9a:
35:c1:ee:0a:18:0e:2e:87:f1:33:18:2e:19:f1:e1:31:d0:f7:
aa:9f:83:22:28:d7:12:01:ef:0f:05:14:0c:aa:d7:ad:fd:c9:
76:9d:44:4c:37:a1:a5:a4:43:2f:59:76:38:20:32:3a:58:90:
64:63:8d:dd:13:67:9d:62:a6:b7:35:91:e0:52:46:d1:96:3a:
d5:b0:49:c1:6f:ec:00:63:a7:ab:58:4d:b4:9d:e6:c6:b2:01:
df:88:98:b3:31:7b:aa:89:51:4d:4d:2e:0c:b2:94:95:e7:d8:
ac:18:50:ad:0c:62:b1:c4:70:96:ad:24:41:3f:c8:c7:bc:3c:
6b:cf:1f:c5:39:15:af:43:f5:10:d5:01:95:1e:57:36:c7:1a:
13:ea:98:32:61:8c:18:64:58:72:40:7e:60:c3:75:9e:19:df:
39:a0:7f:2a:58:78:2d:36:35:f9:88:15:fb:e5:20:dc:bb:d9:
d4:3f:93:4e:fa:a3:21:fa:2e:71:35:7c:0b:7e:3a:fe:88:e9:
79:c3:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:10 2026 by rpki-client