Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eec50006-8db0-485b-8dac-3daf21bd5d2c.roa
File: eec50006-8db0-485b-8dac-3daf21bd5d2c.roa (raw, json)
Hash identifier: iNjshLTm9Rh5N4QTzFkkJuGDO6K5Ea1XGN97Pmo5e6k=
Subject key identifier: 7A:22:CB:80:13:AB:7C:8C:05:6C:6C:F3:5D:71:64:68:B1:DD:BF:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3258D74FF99B506B4B4272E374DB76D4FA00237F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eec50006-8db0-485b-8dac-3daf21bd5d2c.roa
Signing time: Wed 09 Sep 2026 16:14:04 +0000
ROA not before: Wed 09 Sep 2026 16:14:04 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:58:d7:4f:f9:9b:50:6b:4b:42:72:e3:74:db:76:d4:fa:00:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:04 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=96946c87d50225f30f5056206b70d1a8981022a99b60cc45762fd1704adfe47f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:88:2a:7d:c0:80:cd:81:95:1d:56:1b:43:
a9:df:9b:04:0d:d8:13:5d:8a:9c:36:fa:86:5a:2f:
92:45:fa:e0:29:89:32:45:bb:46:d1:ed:e0:23:f6:
d6:84:19:6e:c6:7b:ef:2b:46:ef:fe:57:9c:75:08:
48:a9:aa:55:ff:e6:c8:01:a9:c1:e4:dc:10:9a:9f:
86:6b:f8:d0:b6:6a:52:d0:1b:2f:c4:c7:8b:c8:fd:
a8:44:12:e5:cd:37:f8:09:81:6e:f9:49:65:ae:95:
0f:ce:17:27:65:a9:8d:7b:8e:8b:b0:61:75:6f:d8:
1a:8d:f8:ff:05:bc:71:4a:bf:a4:c0:31:8b:bb:82:
d5:a6:cc:cf:1e:e2:1f:81:f5:15:8e:7e:d2:f4:98:
ef:ce:d0:4f:9a:32:83:b4:1c:40:12:4c:58:70:2e:
fe:56:a7:a9:ad:f2:14:53:c1:6b:a7:a0:ee:7c:9a:
f9:05:2d:bb:ca:48:4f:c1:93:df:eb:fd:da:47:ce:
43:3b:48:c4:26:a7:f9:77:cf:f8:3b:aa:04:a6:f6:
cf:39:b8:70:a6:a8:c0:b6:79:68:e2:44:44:f2:1f:
95:87:3e:92:81:9c:18:99:12:75:82:f5:91:48:6d:
ff:4d:3a:cd:66:e8:fb:f7:af:3f:8b:b2:62:d3:65:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:CB:80:13:AB:7C:8C:05:6C:6C:F3:5D:71:64:68:B1:DD:BF:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eec50006-8db0-485b-8dac-3daf21bd5d2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4800::/40
Signature Algorithm: sha256WithRSAEncryption
c9:a2:2d:f9:3e:05:89:34:0c:84:52:b5:1f:21:e6:53:4f:ee:
58:67:61:3a:9b:34:31:27:c6:03:db:55:46:17:96:3b:5a:4f:
d5:c0:64:54:6d:3c:ac:97:df:46:3f:71:59:1b:3a:9d:8e:df:
21:90:90:03:29:77:25:45:c1:e1:47:d8:ec:8e:76:f8:d3:00:
a3:a3:09:e6:42:44:5d:69:7c:2e:22:92:b2:ae:d5:9d:41:1e:
40:d8:b2:fc:1f:a1:97:e2:3b:6c:fd:11:65:9b:0b:a4:4a:40:
d1:a0:fa:1c:a3:34:15:08:05:32:17:98:6f:9c:60:fb:fa:1e:
f6:fc:97:16:9e:db:f9:07:3e:61:09:5c:fe:e2:a1:d9:6e:b7:
f5:bc:7a:b0:39:d4:92:dc:bf:7c:6b:c4:d6:4a:d9:49:e8:e9:
26:e1:09:27:a5:9b:21:49:62:35:43:83:51:92:01:c8:be:32:
fd:16:b4:7b:b8:93:72:87:a3:63:3d:75:e7:3e:ae:4d:98:dc:
54:74:6e:14:cf:e7:a1:c8:f8:cc:57:14:81:dd:5a:a9:60:cc:
3a:7f:67:dc:12:b7:65:e8:e0:09:5e:81:aa:9e:71:08:e5:bd:
16:c8:d0:17:6b:0c:e5:90:54:9d:b5:84:f3:df:de:cb:f7:89:
fb:44:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:18 2026 by rpki-client