Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8634123-be18-438a-a6c1-409cabb2e73d.roa
File: e8634123-be18-438a-a6c1-409cabb2e73d.roa (raw, json)
Hash identifier: G2PBFo1GJQpfYoIk+GdKlxyi9FGy2wfNrwy22vN+CpQ=
Subject key identifier: F9:96:AC:83:AB:EB:CF:13:A1:5F:33:37:58:E5:16:EB:D2:E9:41:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1443207932F491103B5BCEB57D33A38B3C73816E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8634123-be18-438a-a6c1-409cabb2e73d.roa
Signing time: Wed 09 Sep 2026 16:12:58 +0000
ROA not before: Wed 09 Sep 2026 16:12:58 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:43:20:79:32:f4:91:10:3b:5b:ce:b5:7d:33:a3:8b:3c:73:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:58 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=f057d21ec0454c7ae1ef01ca4e0d68c894b85bc05dcb9944b1e763aa34a092f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:70:e0:88:25:16:98:07:91:74:f7:a1:f5:
34:33:ce:0c:a4:b2:7d:86:3a:7b:c9:c4:99:9b:04:
21:08:a5:a6:f2:a8:77:99:ed:06:13:94:95:93:fd:
fc:91:cb:6a:98:2a:f5:16:43:49:42:46:65:5f:2e:
f5:c9:a6:d6:03:74:31:12:24:d5:5f:cc:c6:43:b1:
4b:33:d7:6e:92:43:01:6d:45:09:86:7c:08:8c:39:
2f:a0:bd:cd:20:ba:f0:91:ab:da:34:00:c0:6b:fa:
f6:f1:0d:89:60:9a:40:1c:10:f9:b0:04:58:b5:6a:
3d:b2:27:c2:e2:9b:f6:f3:23:d2:bf:86:c7:8c:67:
6a:b2:03:14:69:a5:dc:5d:6e:74:a7:99:fd:25:ff:
26:00:21:07:81:b2:1c:c0:c4:2b:25:69:95:4b:bc:
11:9b:3f:f9:41:a5:9e:32:23:d3:65:cd:43:eb:69:
c3:02:8b:c7:66:55:88:c9:0c:94:50:f9:73:82:67:
81:e6:88:e8:50:da:2e:b2:b9:39:b0:85:c0:42:d9:
dd:96:a8:4c:04:13:ac:cf:be:c7:9e:6d:58:23:d0:
85:aa:7c:71:2a:ba:45:ab:e8:4e:09:c5:1c:4f:1e:
63:87:52:3e:bb:f2:d6:8c:94:63:09:43:38:bd:89:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:AC:83:AB:EB:CF:13:A1:5F:33:37:58:E5:16:EB:D2:E9:41:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8634123-be18-438a-a6c1-409cabb2e73d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:b000::/40
Signature Algorithm: sha256WithRSAEncryption
8b:5a:26:61:26:34:82:59:77:2f:a6:d9:a8:a5:cb:78:44:5b:
b2:0b:b5:df:ba:ee:04:39:d8:5b:fa:57:e5:cc:94:10:ae:87:
41:7d:08:fe:94:01:77:12:87:6d:80:ac:39:f1:b1:da:63:85:
69:6d:8d:6a:d6:a9:f6:8f:d8:36:9f:2c:29:46:b9:aa:41:7e:
26:56:e4:8f:6f:b5:4f:8e:af:97:3d:df:f8:a7:e4:0e:80:c1:
9e:08:ba:75:cb:12:39:06:41:44:db:34:80:87:b8:64:6e:3b:
42:fd:61:67:e4:32:98:fe:e8:bf:e7:f3:7e:64:ba:dd:00:29:
bb:4b:58:dc:1f:e2:97:29:8a:a5:1d:21:c7:85:5f:74:8e:ed:
cc:ca:93:7f:d1:f2:4c:f7:00:70:24:87:c8:9e:3b:ed:32:2f:
d9:5d:58:f5:51:59:ff:85:4b:90:f2:93:0b:7f:cd:3f:d3:99:
be:d0:14:0f:5b:38:7c:94:97:3e:85:2b:30:6a:7d:81:1a:18:
f8:47:69:c1:fe:27:70:d2:8a:ec:e1:3f:d7:df:c2:7a:13:4f:
e0:04:41:79:73:86:30:c0:66:0c:0c:3b:eb:89:e1:b4:a8:9f:
12:56:34:b1:a5:12:af:12:7a:f0:60:ab:ec:d3:2b:05:c0:94:
ab:c9:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:44 2026 by rpki-client