Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
File: e84166dd-4497-414d-9864-983017c7c326.roa (raw, json)
Hash identifier: 5rqvDbr1khIXTgJ8KLHAOe9RpM535x2DgShgY7kbmy4=
Subject key identifier: E6:65:A8:6E:A4:1B:75:80:84:D5:68:82:42:A6:94:60:22:D1:48:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41FE0A3BF0DBA3FAD919B5723D3501E94DEA4925
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
Signing time: Fri 07 Aug 2026 05:20:53 +0000
ROA not before: Fri 07 Aug 2026 05:20:53 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fe:0a:3b:f0:db:a3:fa:d9:19:b5:72:3d:35:01:e9:4d:ea:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:53 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5f30cf9f296ad22af77c23a71c0bfea2225591010952368b368915dfc8c5a6d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:ac:5d:e9:39:c8:80:d1:40:22:b6:1b:6b:
45:bc:a6:cb:9a:a6:1a:91:69:90:73:6b:91:b5:96:
60:9f:fc:98:ab:b4:e6:4a:c7:9c:2f:c4:d1:f6:f0:
bb:fd:41:8b:3d:1f:e3:10:fb:02:29:88:8b:aa:cb:
03:19:b7:fd:bc:1e:ae:69:60:76:fc:e1:b2:4b:02:
0d:66:9d:3e:16:c6:85:54:32:d4:6a:83:bf:79:2a:
c4:c9:be:fd:46:de:dc:23:d9:b1:b8:0b:a0:e4:f9:
11:02:0d:d6:18:c2:6d:da:69:04:16:66:b1:5f:c5:
af:90:f8:56:e4:59:ef:d3:32:74:77:45:c4:4b:1d:
2c:9b:23:32:cb:fb:cb:b4:a7:b8:fe:aa:bf:bf:ca:
9b:5f:2c:2c:5c:9e:53:96:fa:dd:72:08:5f:3a:c2:
4e:8c:f8:c8:db:c4:e4:d5:a8:e3:97:91:e9:94:b5:
e7:6c:fe:35:99:a6:78:60:2e:89:37:11:32:c1:b7:
fb:42:08:99:36:6b:22:a5:59:4c:91:63:36:6a:99:
12:cd:4a:22:9d:dc:84:1d:d8:df:50:76:5a:8c:04:
29:c0:c6:2b:99:b3:ba:0d:9b:0c:27:d7:40:c7:f5:
71:c1:9a:46:90:aa:31:56:95:d2:98:d4:4d:4b:22:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:A8:6E:A4:1B:75:80:84:D5:68:82:42:A6:94:60:22:D1:48:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:5000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:1c:2f:b3:ac:7e:e9:c5:3d:7b:64:13:f8:e2:1a:e6:10:72:
f0:61:1f:a9:b8:9f:2d:41:eb:c3:8d:a5:54:0b:9b:5f:1a:d1:
93:8a:5e:56:3c:24:ba:9a:ce:fb:82:c3:fb:af:6f:1d:38:94:
bd:f5:05:06:54:42:ad:1e:e2:35:fc:0b:27:7f:de:03:2e:04:
e9:99:a7:76:ed:6f:41:94:92:7d:81:c0:5e:4e:a0:8d:e9:e1:
5e:0b:9a:9a:dc:6c:b3:56:10:39:9e:57:6c:f7:18:8b:cb:5c:
45:71:5c:97:64:16:b1:c7:27:89:c4:17:d2:d7:2c:4b:0c:8d:
83:96:16:c2:78:ac:ce:27:1b:fe:d2:38:a9:6c:5c:de:2d:c2:
d9:bc:66:fe:a3:22:2a:4d:70:96:5c:52:93:2d:de:61:c7:6a:
a3:36:6c:2b:1f:1c:15:4d:d6:39:fd:d3:f5:65:d5:aa:ee:94:
c1:ee:e2:8d:ef:cf:5b:1d:57:90:de:dc:cd:da:30:d8:5d:0d:
c8:b5:59:7e:fe:83:31:11:ad:86:ea:ba:be:6b:30:36:5d:e9:
0a:5c:aa:3a:2f:2e:89:0c:5b:fe:a7:70:a6:a8:ad:1a:6c:0d:
77:7d:50:7d:c6:c7:74:24:4f:31:07:f8:ff:30:05:0f:2b:31:
c9:28:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:24 2026 by rpki-client