Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8eeffc4-b19e-4e8e-bd21-cc1cb8141d5c.roa
File: e8eeffc4-b19e-4e8e-bd21-cc1cb8141d5c.roa (raw, json)
Hash identifier: zbeIz91RpQcUmHkj7IQvdR8SBTlPphsvIRRG/KpIIO8=
Subject key identifier: 39:F7:C2:33:CA:62:CF:87:08:95:C3:22:D8:11:83:53:BC:2C:C5:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AFFD96D56B8956C8CB124EF4BD1291D135C1F33
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8eeffc4-b19e-4e8e-bd21-cc1cb8141d5c.roa
Signing time: Wed 19 Aug 2026 01:00:59 +0000
ROA not before: Wed 19 Aug 2026 01:00:59 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ff:d9:6d:56:b8:95:6c:8c:b1:24:ef:4b:d1:29:1d:13:5c:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:59 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=0acc0da235854a1205abec76e613580c3f91bf88a7a6e91e07e10b3afd8030dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:34:cb:7a:79:26:0c:3d:b9:81:8e:9e:01:
4e:ae:a8:4c:4d:62:c7:84:26:9c:03:22:51:e4:3f:
33:6f:7d:cb:27:e2:68:d3:90:cd:de:db:29:25:32:
b4:4b:0f:34:8e:db:94:88:16:fb:0d:12:af:b5:ac:
b2:a6:d2:e5:4a:0f:72:10:34:f7:e2:d3:98:fb:22:
a3:41:26:0c:28:3b:10:b8:ff:f5:13:3b:e6:7c:6c:
52:8b:af:92:69:9f:ac:c9:7b:e8:8a:28:2f:7f:1c:
d5:71:e2:e8:35:dc:86:1e:51:0f:12:06:a7:e2:25:
ac:e5:40:b7:37:6c:da:32:99:1a:75:41:e2:5b:c9:
55:ec:40:3f:20:62:30:6c:63:c9:51:dc:8a:1a:27:
b5:ed:e2:0f:da:60:03:c7:93:5c:42:6c:c2:da:12:
c4:6b:2e:80:fe:de:f1:b6:b0:f6:9a:e5:a3:2a:6e:
0e:41:fc:15:a3:3d:e1:eb:49:33:37:2c:c7:8f:39:
2b:9e:ba:e3:e2:00:b0:f7:fd:ac:3c:81:6f:d1:c6:
73:5a:9d:cd:db:fb:8c:c4:2b:87:4f:90:a2:34:29:
b0:28:0f:92:76:1f:e6:0a:c6:27:97:09:57:90:2c:
48:c8:c5:41:4d:24:f6:13:e9:9f:27:2d:0d:c2:9e:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F7:C2:33:CA:62:CF:87:08:95:C3:22:D8:11:83:53:BC:2C:C5:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8eeffc4-b19e-4e8e-bd21-cc1cb8141d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:4080::/48
Signature Algorithm: sha256WithRSAEncryption
50:32:6b:2e:83:ab:f9:0e:c6:a3:fa:72:7f:d1:f3:5d:33:d7:
e1:3b:bc:0e:97:b5:a4:a8:7c:a8:ad:7d:49:33:c3:0a:0c:ff:
ba:af:17:81:77:51:78:9b:bb:2d:e3:2d:77:94:50:5d:e5:d1:
37:97:84:0f:f5:5c:74:98:fb:68:aa:60:d7:3c:ed:8a:eb:c6:
49:9e:dc:27:d5:04:51:57:96:27:d1:6d:e8:c7:81:b5:ed:cb:
8e:5d:d4:32:83:7a:94:9a:4e:c6:5e:de:fc:f0:a3:2f:40:4a:
b2:d6:06:d3:8e:77:12:10:53:f2:0a:41:06:ba:c7:f7:3d:1e:
31:6a:6c:ac:51:2c:ad:8b:90:87:49:94:d8:a7:be:3a:22:9e:
a2:54:b7:1b:95:80:85:a8:f1:65:12:7a:ad:40:86:16:18:85:
73:0f:33:8e:f0:95:bb:55:97:82:c0:00:dd:f3:ec:24:ad:0d:
81:c7:97:b6:05:67:06:d2:5b:a0:43:74:87:de:52:16:00:ea:
cf:54:ca:ff:bc:1f:4c:0b:e3:5b:c2:c8:2a:87:80:c5:b0:84:
5e:c2:a7:8f:e8:a9:87:14:14:be:1d:47:8a:9f:8a:71:22:e7:
6e:04:db:22:78:80:58:98:36:ea:1e:dc:df:11:1d:f8:cb:61:
0a:5a:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:43 2026 by rpki-client