Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
File: ea31a166-ce12-4108-9868-894ac9df0e65.roa (raw, json)
Hash identifier: gJAKmEhI2YkV/GNyPwSSdnM0yB55YvT24Zo7Nxk5a6w=
Subject key identifier: 0B:CC:81:A3:09:44:F2:34:73:E3:39:48:5D:07:F5:8A:0B:40:4F:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36B727B5FEA9E06D19380F089C58D01FF04FD99D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
Signing time: Fri 07 Aug 2026 04:51:00 +0000
ROA not before: Fri 07 Aug 2026 04:51:00 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b7:27:b5:fe:a9:e0:6d:19:38:0f:08:9c:58:d0:1f:f0:4f:d9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:00 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=37c544170260127f173c7c50708c61711e5e41f29506b6affcf22d1cf63f86de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:30:42:f2:56:46:32:96:46:c7:8b:d1:7f:
50:9a:fa:ec:34:17:81:fc:18:9a:28:94:50:7a:18:
67:32:09:ac:8e:1d:cd:5b:fe:24:64:81:95:21:bf:
e3:eb:08:52:8c:76:33:72:e3:12:71:ef:e3:e9:8b:
4c:82:08:a1:c8:09:fc:fc:4e:08:fd:a5:04:90:cb:
b7:4d:5c:5c:06:75:7a:08:b1:d8:67:35:d8:d2:04:
23:a3:ab:e0:45:8e:4e:6f:e2:56:41:43:fe:de:63:
37:a4:0f:69:f7:f6:2f:4a:b0:3a:58:db:3e:98:b8:
5a:df:d2:42:27:20:4f:cb:90:98:9e:10:7a:31:5c:
a2:89:b1:e9:e7:60:a1:26:af:ae:6b:8e:70:67:1e:
54:08:db:fb:4a:cc:c2:07:fa:14:6d:77:83:ff:dd:
63:de:00:02:51:17:b5:1e:75:e7:5e:5e:58:36:69:
9b:a6:6e:64:9a:10:e1:8d:fe:f6:39:9d:32:e1:f8:
2e:29:a6:28:17:ba:f9:4c:83:27:be:24:10:51:87:
c9:14:bf:63:f2:46:53:16:fc:eb:d6:2d:3a:af:08:
0b:94:2c:32:16:c4:a6:65:0b:38:45:2d:e1:01:04:
7a:31:70:45:5b:c0:e8:c9:fc:f1:cc:94:5e:27:c4:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:81:A3:09:44:F2:34:73:E3:39:48:5D:07:F5:8A:0B:40:4F:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b080::/48
Signature Algorithm: sha256WithRSAEncryption
b4:62:f4:d4:2a:f9:76:0d:8d:05:4c:4a:bf:17:9d:04:0c:75:
0b:7b:aa:64:74:30:d1:e8:82:82:17:58:20:04:da:cc:f1:36:
8c:10:32:e5:43:81:e8:16:38:12:2a:12:88:b3:4d:47:5b:36:
e7:0a:e5:4d:c8:4c:4f:d6:9b:ca:68:a0:c2:6f:6c:71:1a:7b:
76:f4:84:19:91:ca:8c:6f:54:92:f6:55:fb:c7:3c:dc:3d:77:
61:53:7e:51:e0:f9:af:91:a7:8f:8c:88:02:73:61:fe:8b:09:
bb:f9:90:74:55:32:d0:6b:80:8a:cb:90:b3:4e:88:fe:e8:56:
d4:60:a8:df:0c:b8:72:32:a9:70:c7:14:a4:d1:2c:4f:24:4e:
67:5e:3c:17:86:f8:3e:b6:28:f8:a1:28:19:67:32:8d:9d:8d:
bc:3b:5d:b0:9b:7c:04:ea:1e:8f:76:6d:57:9a:4a:2e:6a:a0:
4d:1c:85:df:66:48:cf:b8:09:19:b6:51:15:3a:fb:80:c8:6c:
52:44:24:39:72:35:ab:81:be:98:02:7c:54:9d:55:9c:d7:b2:
09:e3:65:3b:d9:06:e0:b1:62:81:a2:48:f0:b8:e0:34:d8:c2:
88:cb:aa:9c:a4:7a:5d:14:85:e5:f8:72:f8:03:61:13:d7:bb:
c7:61:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:37 2026 by rpki-client