Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa
File: f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa (raw, json)
Hash identifier: cbszzoSwvjj7i70MFGFRxKreGrtpNv31tmRLv11u+rA=
Subject key identifier: DB:72:6E:2F:E7:7D:9F:90:1F:B9:70:3A:80:A7:C0:DA:88:DF:89:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A7C01583F99E91A9A9EB40B8A665ABCD5F2A157
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa
Signing time: Mon 10 Aug 2026 01:00:51 +0000
ROA not before: Mon 10 Aug 2026 01:00:51 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7c:01:58:3f:99:e9:1a:9a:9e:b4:0b:8a:66:5a:bc:d5:f2:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:51 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=3aae00a8695f68ee4f4672e355ee88100e279b42d3b4ab520ff7e99a8011bfcd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:50:03:0f:2e:08:fd:5b:96:d1:ac:e2:d5:
92:33:51:5d:16:a9:fb:ba:c5:32:87:af:2e:91:bd:
53:21:77:80:c8:9b:6c:aa:22:9f:82:ce:97:e5:bd:
03:b4:6d:c5:2a:4c:47:d0:bf:ba:c4:2b:a5:db:c3:
82:0e:8c:08:de:09:ac:f6:d7:d8:00:1e:47:d8:81:
de:22:c6:e3:57:4a:45:bf:65:c5:e8:51:e8:f9:bd:
41:07:fe:db:8b:a4:dc:9b:1d:f4:55:cf:98:f9:ab:
fb:31:fa:82:b3:da:4a:2d:59:71:7c:dc:18:66:88:
51:6b:f5:35:ee:23:f3:f0:71:cc:bd:0e:35:61:a7:
0f:58:70:0e:ff:72:01:f4:fd:c2:aa:ed:e1:1e:a3:
99:1f:15:65:e5:a6:f1:31:a5:2a:d8:50:e2:a9:26:
58:8e:2b:6d:75:73:5e:c0:83:ee:0c:45:77:b7:be:
b0:64:87:d0:31:20:c6:0a:78:3e:f7:00:a7:e9:5c:
81:bf:be:2e:3a:0d:a2:b5:82:d5:42:d3:2e:68:9f:
e5:94:b8:4f:14:d9:d8:47:da:b5:52:72:04:52:0a:
3d:08:f3:27:1e:ae:76:c3:49:11:55:b6:49:4f:be:
8f:dc:13:a9:b8:b7:dd:7d:89:98:6e:2a:20:03:63:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:6E:2F:E7:7D:9F:90:1F:B9:70:3A:80:A7:C0:DA:88:DF:89:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f26e1db9-451f-4dc4-8fe5-380c89c182ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
c0:d1:88:1b:ed:44:5b:8b:55:1a:a7:bf:29:77:44:93:90:63:
69:8e:9c:81:cc:33:8f:c2:74:c5:0f:b8:2b:ee:0c:7a:0b:a5:
6f:a6:e2:ec:fe:b5:a1:37:3a:d4:61:03:48:e6:20:ea:1a:37:
93:17:a9:0b:dd:47:ad:4a:a6:c3:64:25:c0:e1:84:e9:8e:6a:
a3:eb:64:07:69:d4:70:72:37:0b:4a:6c:ce:ac:e1:72:7a:b1:
ad:97:df:75:8e:6c:0e:ff:ff:08:cc:10:7d:9b:28:cf:85:47:
5b:2d:69:4b:9a:dc:9a:31:49:b8:09:77:85:7b:3c:cd:0f:d7:
28:74:cd:5d:fe:0c:73:0a:0b:b8:43:f4:e6:4f:eb:55:c5:32:
b7:3c:8d:d8:2a:5a:fe:95:47:5d:a1:f7:94:c1:ce:16:fa:f1:
33:85:56:ec:cd:99:d2:15:e6:1e:93:f8:0c:98:6a:cc:95:d4:
c8:54:99:35:9c:64:cc:3d:9d:40:b5:df:5a:c1:b2:28:9e:a7:
39:85:0e:95:d7:51:9f:96:43:0b:28:2b:a7:21:88:0d:0d:a5:
19:f5:5c:d4:89:66:8e:1c:7f:fa:ed:f0:4b:7b:d9:d0:d6:75:
a3:18:a1:cb:ed:82:f4:00:f9:68:b7:d3:d7:01:49:76:bb:59:
bb:8c:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:49 2026 by rpki-client