Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
File: f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa (raw, json)
Hash identifier: 3hPmCJauS6crvKGj4UnT+pe6r7jFbRrtDWJMVm0AU7s=
Subject key identifier: 07:6C:8D:5B:F1:64:67:72:2E:05:EB:79:64:91:E2:7F:17:30:E6:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B94A16D7F05969673153419E9FFE3D865903ACF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
Signing time: Fri 07 Aug 2026 04:40:28 +0000
ROA not before: Fri 07 Aug 2026 04:40:28 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:94:a1:6d:7f:05:96:96:73:15:34:19:e9:ff:e3:d8:65:90:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:28 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7d98381ad8741a07020c4f6c9d14c003bc73065f4775bb37481a320e56947c74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:15:b9:42:e9:83:fc:44:0d:f1:4b:1e:75:
3c:07:9f:c5:fe:8c:fc:6a:af:e4:c4:0f:a4:2a:11:
17:a1:b6:01:bc:be:91:52:8b:b6:a3:29:b8:cf:8e:
d7:fa:e5:2d:7f:9c:7c:f2:16:36:e5:41:20:6d:49:
b4:05:a8:52:b4:19:6f:3e:d8:8c:04:14:45:42:15:
92:c8:d1:ca:87:a2:1d:f8:d5:dd:4e:7e:e3:28:f6:
87:2e:2e:08:4a:90:b6:6d:82:8e:36:da:43:aa:28:
0d:6b:4d:ae:7c:b9:45:4d:d4:bc:0d:87:c5:23:c1:
e1:4d:a3:a6:45:89:0f:3c:fa:92:3d:14:54:45:f8:
98:9d:bf:67:60:6b:17:0d:5c:c5:af:7c:75:21:3c:
cf:a7:83:fb:24:e6:eb:3c:13:17:34:0e:c4:34:bf:
18:fa:8d:88:d1:3e:9a:13:05:36:00:65:8f:f4:3b:
f7:9d:30:61:ad:10:63:67:45:68:a4:58:38:e2:41:
19:a6:c6:66:45:45:24:6c:0a:b5:8e:6c:c4:1b:55:
0c:93:fd:f0:b2:ed:85:56:be:ec:95:da:2f:1b:22:
06:23:7f:d1:a0:e3:88:2b:72:d0:f6:06:c8:24:18:
87:58:4c:14:43:c4:f5:f9:fd:30:f6:45:1c:2b:00:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:8D:5B:F1:64:67:72:2E:05:EB:79:64:91:E2:7F:17:30:E6:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
54:56:46:50:58:76:37:62:a5:29:4f:35:36:1e:24:ff:a9:cb:
10:ee:dd:24:cf:b9:fb:3b:99:47:57:56:b1:c5:7d:0d:4f:ac:
87:14:fb:c1:45:a2:9b:a1:77:0e:04:45:e4:e3:44:8d:aa:ee:
6f:2c:7d:03:b7:85:4f:b7:27:bf:7d:a4:20:c1:cb:c8:5f:93:
36:d9:a8:81:e6:30:38:3d:29:14:fa:dc:fd:84:f5:fb:a6:d9:
46:fe:58:b5:3d:b4:bf:67:1d:d6:00:71:4d:d1:7e:73:6e:7a:
94:b0:a4:98:e3:29:e1:3c:d4:0f:36:44:5a:86:17:57:99:8d:
b9:d9:d3:85:44:d1:a0:0f:39:91:01:38:8e:c3:bf:e3:20:9e:
f9:a2:a1:e7:d5:8b:84:85:f0:3b:56:9e:3d:f6:d4:8b:5e:5f:
75:ee:95:a4:99:90:9a:28:6b:4c:4f:55:c1:4c:8a:02:9b:44:
bb:63:06:a4:29:b6:d1:cf:50:88:06:31:ab:7c:9d:39:29:ed:
f4:1e:ff:6d:29:d4:53:5c:4b:71:e9:2b:52:72:2d:49:47:d6:
26:65:10:90:08:a0:e6:4a:7f:2c:61:a4:38:28:3b:81:c9:db:
40:f2:5b:26:09:db:da:56:65:83:7d:5e:cc:d2:bd:5c:0a:1f:
bb:bd:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:01 2026 by rpki-client