Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f94e2443-09f1-4cdc-9d9f-a07ac1f9282a.roa
File: f94e2443-09f1-4cdc-9d9f-a07ac1f9282a.roa (raw, json)
Hash identifier: 8hNX3SNmDzvHn4NFhcH9Q+EqtnC4RstWFwGbcjFWPeM=
Subject key identifier: 88:78:90:9E:60:BF:4D:28:FC:25:C4:54:5B:F3:D0:25:D3:F3:93:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F922A1DB361268EE50A5419025171D667920547
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f94e2443-09f1-4cdc-9d9f-a07ac1f9282a.roa
Signing time: Wed 09 Sep 2026 16:13:58 +0000
ROA not before: Wed 09 Sep 2026 16:13:58 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d069:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:92:2a:1d:b3:61:26:8e:e5:0a:54:19:02:51:71:d6:67:92:05:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:13:58 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=51f88ee9cc205d3389fcfe33e5ee683abb635f1390c4cec2f92d7fe895c0b3f7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:c8:a8:a1:7f:bd:73:fb:11:47:45:38:10:
56:77:1c:45:70:0e:49:61:7d:16:aa:3c:cc:f2:70:
7f:26:38:fa:72:c9:ca:47:d5:cd:8c:47:2f:52:f5:
71:3f:68:ba:33:9f:b7:79:ae:cf:36:0f:10:01:8e:
1e:4c:23:6a:4c:18:da:d5:5e:52:6f:e0:12:1b:48:
eb:ae:d4:ff:e9:6e:52:a7:8a:b6:75:f6:8c:6f:d0:
2b:82:a2:f8:4e:78:58:8f:24:7b:f5:b4:00:fa:e0:
40:4f:93:6a:09:05:e0:3e:36:9f:3c:db:b6:a3:d7:
73:eb:74:82:d6:f8:f2:c4:c2:13:ce:8d:65:78:86:
47:2b:96:3e:9d:39:2e:a5:f7:87:62:dd:d5:e4:f9:
88:8d:61:8d:6d:c6:1b:6d:95:84:72:af:fa:19:e4:
e5:69:40:6f:48:a8:54:c4:00:74:1b:6a:0a:9f:93:
c4:e8:b3:39:f6:9d:03:9d:80:31:a5:2e:63:e7:91:
59:b9:38:aa:5e:f5:56:e3:7f:c8:48:ac:80:de:a6:
1d:1e:bd:6c:90:d1:04:d9:67:7b:5d:ed:7d:e2:70:
5f:f1:6c:a9:97:e2:c3:36:69:0d:65:39:98:59:15:
4c:72:0b:60:9e:7a:a4:b2:0b:05:c3:72:61:4a:2a:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:90:9E:60:BF:4D:28:FC:25:C4:54:5B:F3:D0:25:D3:F3:93:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f94e2443-09f1-4cdc-9d9f-a07ac1f9282a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d069:4800::/40
Signature Algorithm: sha256WithRSAEncryption
6e:fa:f2:61:0e:75:63:8f:e6:8f:92:9b:55:22:db:92:f4:c8:
53:46:95:47:31:b0:7a:01:55:a8:19:16:d7:da:a9:24:0f:92:
71:1e:0f:4b:09:9b:3b:fd:22:34:c9:3d:86:30:76:b9:f4:1f:
81:88:0a:39:39:1d:e7:e9:d4:81:e4:7b:32:50:17:74:22:64:
b7:bf:9c:80:1a:bf:45:a9:5c:ec:b1:05:6f:84:f1:37:b3:7a:
02:d1:8d:b9:dd:02:05:82:f1:40:d5:3b:12:33:db:f0:07:2f:
81:87:c6:a7:2a:c5:64:ce:6f:ce:47:92:bf:3d:13:b0:b0:5a:
3d:48:d9:c8:27:24:54:5d:2a:c8:e5:06:44:e9:ef:e0:01:97:
40:12:0a:e9:0f:b2:59:18:2b:c0:b1:1f:7a:6a:6a:18:ff:e5:
70:2a:60:01:c6:9a:1d:34:f7:09:6f:be:b4:9a:6d:94:85:99:
16:65:f2:62:94:ae:9d:76:f9:df:33:3e:52:05:a5:66:98:72:
e5:a1:65:95:15:4a:a9:2d:34:9a:f5:71:83:56:fa:a8:06:eb:
cb:d8:f8:63:0e:07:fc:8e:cb:87:44:4f:a8:31:64:3e:d5:44:
6d:e4:dd:b8:50:48:17:4b:24:bf:e4:d9:a9:00:3d:64:75:b7:
0d:ae:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:21 2026 by rpki-client