Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
File: ed0f44c7-c286-45c9-9156-5644f580ab41.roa (raw, json)
Hash identifier: Jbefg+7p5Cxqk9WSIHHMj+AsjvyLsmv4og6N+kpDf7A=
Subject key identifier: EE:BF:24:F3:DB:42:63:95:8C:B5:DA:01:34:9B:75:8F:90:A5:A4:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10BE934C0B9D75996AB38AD97E1B9AA5F0BCFDEB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
Signing time: Fri 07 Aug 2026 05:10:07 +0000
ROA not before: Fri 07 Aug 2026 05:10:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:be:93:4c:0b:9d:75:99:6a:b3:8a:d9:7e:1b:9a:a5:f0:bc:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=2a70d11922ca263e804bd8099ee249533dbf0e4959707777989f9b2b361f54f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:7a:bc:e2:b7:6d:6c:ec:db:da:e3:3f:a6:
bd:cc:09:6a:6f:45:25:e2:ba:09:45:0f:7d:20:d8:
52:57:d7:5b:54:94:62:d2:7b:3c:f1:14:a7:de:4e:
ea:ac:fc:f6:0f:1a:be:1c:33:c2:1d:6e:11:35:bc:
66:ba:71:c8:31:af:f9:33:c5:81:5b:b4:d9:0f:d0:
b6:6a:34:0d:2d:fc:d5:89:05:0c:9d:27:fb:be:f4:
2a:2b:cd:fa:cc:98:09:37:aa:af:d0:bc:71:e1:b2:
d5:a0:0a:3b:f8:16:8e:41:20:9a:45:1b:f7:d0:86:
b6:ff:70:6e:0f:fd:20:0c:7b:17:df:10:78:31:12:
4e:b6:ef:2b:79:90:fb:e0:9a:12:e2:2e:9f:19:f2:
df:58:f6:88:31:df:ff:c1:f2:11:60:55:11:5e:61:
ae:29:d5:ec:ef:58:60:6b:ce:0b:66:b6:f4:c7:45:
6b:0a:0f:96:e4:16:0b:b9:17:25:87:46:ba:76:20:
b8:b5:7a:8a:35:c2:a2:fa:07:47:ba:15:04:da:e7:
4d:ac:da:16:e5:d1:27:6f:62:fe:4c:da:3a:58:fa:
d7:d5:01:04:1d:28:5c:04:a8:5e:12:6a:8b:b9:01:
9b:f8:d9:99:76:30:aa:39:5d:0d:47:d9:28:b3:74:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:24:F3:DB:42:63:95:8C:B5:DA:01:34:9B:75:8F:90:A5:A4:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:b000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:41:0d:0e:e0:93:60:da:8d:52:06:2e:13:dd:88:c2:f5:e7:
24:07:79:c7:d3:1a:f1:ae:19:9c:8c:6b:dd:a4:59:0e:d4:d0:
f8:23:3b:51:d1:d9:d6:7c:71:4d:02:ce:e2:32:c3:93:2f:19:
11:5f:84:90:e0:d3:36:d1:64:fa:29:0a:28:a4:6a:84:64:cc:
79:45:60:0b:08:77:ca:2e:5e:f2:7d:1a:1c:37:f5:e9:8b:23:
3a:25:30:4a:4c:02:96:63:67:b0:23:ed:cc:1f:ad:b6:bb:84:
03:8b:f7:44:aa:8c:56:e6:29:5a:e3:4d:bd:82:90:3a:5c:3a:
91:3e:aa:d9:c5:cb:6b:d3:36:9c:7f:95:5d:9b:15:89:9c:86:
7d:08:22:cd:53:1f:1a:78:77:a7:7c:6c:3d:89:de:7b:53:90:
46:48:ce:36:8d:87:87:e4:ff:ac:28:8b:5e:91:40:b1:fa:47:
2a:c6:5d:14:dd:f2:07:47:4d:bf:d7:6e:b5:45:b7:d4:20:3a:
53:db:a0:56:74:31:90:4f:e2:5d:74:bd:1a:0a:f1:7c:76:44:
f8:83:17:e0:bf:0f:e4:69:a9:6d:5b:cb:94:ea:07:cb:09:c9:
75:fa:6f:87:d5:d1:f8:d9:04:7b:49:18:bb:90:5b:4b:8c:ad:
15:31:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:23 2026 by rpki-client