Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8542371-3893-4cdb-94d2-85447ab04a42.roa
File: e8542371-3893-4cdb-94d2-85447ab04a42.roa (raw, json)
Hash identifier: y7m5nEJQ7xIF7MmDiACUOj8wgbmXqCsbGuPr+NkrTwM=
Subject key identifier: DC:F4:65:68:5D:60:68:58:8E:11:2A:0D:FD:C1:41:D0:5D:A8:DB:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 461E63F0255F1DB386C86F7D3FD9CD5A1EC57DDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8542371-3893-4cdb-94d2-85447ab04a42.roa
Signing time: Wed 09 Sep 2026 16:16:36 +0000
ROA not before: Wed 09 Sep 2026 16:16:36 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1e:63:f0:25:5f:1d:b3:86:c8:6f:7d:3f:d9:cd:5a:1e:c5:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:36 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=f22edf20bbfefece43147b1f9f7f500058af890c153a365dbbdb93d9213f2c4b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f8:a5:f6:73:a8:3d:9d:06:91:bb:ff:71:ec:
ee:30:2a:05:f4:af:ee:47:d3:11:ef:a2:88:3f:91:
14:f8:d5:16:e2:d7:e0:28:72:54:67:13:17:b1:56:
5b:83:f4:e5:7a:48:46:50:2f:cc:93:34:72:98:24:
7f:aa:88:a0:61:19:0e:aa:ba:58:32:cf:d3:f7:7a:
8e:bc:5d:28:87:e0:2f:a9:cc:8f:68:eb:06:3b:12:
d9:7a:c4:e3:06:8c:5b:ef:44:85:1b:1c:90:73:89:
f5:34:a5:b4:ea:ee:06:c1:e2:65:6c:7e:99:01:a7:
11:02:9f:8a:cf:9c:ec:a0:be:a1:d4:b2:20:ab:56:
af:33:81:10:1d:56:48:f7:80:4a:25:ac:dd:46:4f:
a5:46:a0:c8:5b:3d:26:dc:bf:77:b4:8e:5b:5c:0c:
b4:38:72:b0:28:3d:00:c0:4d:69:ab:6b:f9:57:9b:
3b:f7:55:31:c8:69:a2:c3:7e:f1:38:4e:db:aa:1e:
7a:9d:cf:98:b8:5b:5d:f3:3f:d3:7c:03:c6:3e:b4:
b2:7e:de:cf:52:e5:c1:c7:12:1d:d6:e5:04:a5:7f:
f5:df:19:48:da:fc:a5:3f:77:12:2b:0d:6c:c2:83:
63:5f:9d:c6:28:c9:bd:70:ad:47:6c:05:48:66:01:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:65:68:5D:60:68:58:8E:11:2A:0D:FD:C1:41:D0:5D:A8:DB:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8542371-3893-4cdb-94d2-85447ab04a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4800::/40
Signature Algorithm: sha256WithRSAEncryption
38:31:96:df:1a:31:f6:e2:58:1e:45:ad:f6:5c:bc:4c:48:12:
fc:a7:99:f7:2a:29:fd:69:43:74:1a:3f:b0:6b:09:87:12:34:
97:be:a0:cc:38:7d:91:00:43:b2:90:61:7a:2d:95:fc:9d:62:
ed:e6:98:a9:81:7c:3e:ef:ec:9c:ca:bd:21:b5:a6:c1:4e:00:
78:ac:1e:3b:1f:bd:b7:55:75:bd:0a:62:68:09:b9:5f:64:6e:
3c:d5:54:64:1d:96:e9:c5:83:e9:e5:e7:34:eb:88:6e:aa:35:
88:ed:7d:d0:93:eb:63:ff:fc:f0:de:b5:c8:8f:b1:ce:e7:76:
f6:6c:52:d1:2b:d7:a2:4a:e9:8b:c7:a0:6b:ba:c0:39:21:b9:
15:f3:23:f4:ef:93:c7:69:ce:68:31:fd:a4:1c:ff:5b:fc:84:
43:61:0b:70:e5:0a:97:0f:1b:b3:63:66:86:39:65:a2:fc:4c:
85:38:f4:24:61:a9:be:69:74:ba:5b:30:f1:18:5e:06:8a:dd:
67:ee:a5:b6:38:b7:94:32:d6:fc:b7:fe:c7:6f:24:d6:45:f1:
07:12:8f:f3:63:9a:fd:bc:4a:70:5f:d4:15:6d:be:07:8d:5f:
3d:dd:79:04:c0:30:64:d1:ce:e3:e5:07:2b:9d:e7:9e:14:8c:
c7:c2:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:16 2026 by rpki-client