Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
File: fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa (raw, json)
Hash identifier: zLIzMvs4GHVCgAK6cIdAx2cTOKVwmb9p6+312wPXR1o=
Subject key identifier: B2:21:A4:2B:57:30:F8:74:A8:9B:38:39:C8:2E:3E:45:BA:1F:1E:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 43489C4521BF13FD45E3641B326514673A936BF8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
Signing time: Fri 07 Aug 2026 05:10:10 +0000
ROA not before: Fri 07 Aug 2026 05:10:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:48:9c:45:21:bf:13:fd:45:e3:64:1b:32:65:14:67:3a:93:6b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4e700e60029ca93f5c280333071dc8b9e1d7d2334867128e85006d350c51a5a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:d5:c8:5a:70:29:99:aa:89:85:da:ff:fa:
1f:5d:01:70:e6:97:8c:53:1d:03:3a:a8:be:13:e6:
8f:1e:65:22:6e:de:89:6c:ba:f4:7a:13:2e:e6:a9:
cc:2c:af:ac:9b:13:b4:b2:37:49:70:41:2c:0d:15:
33:17:7f:42:d1:33:1d:8d:80:7d:5f:a1:86:50:35:
99:b8:91:e5:cb:e3:08:31:1f:74:ae:14:74:93:b5:
f3:7d:a0:f1:4c:74:18:b5:e7:10:95:c7:8c:71:73:
04:60:ea:53:f4:c8:7b:8f:90:9a:fb:31:24:15:3f:
d3:06:1a:80:07:31:66:5a:8d:00:f5:a2:cd:79:29:
c6:15:ec:28:29:f7:8a:2b:ca:19:83:10:ac:de:ff:
ec:e2:ab:4e:df:b1:52:7a:8e:5a:ff:2b:65:fd:41:
ed:42:20:06:d5:83:67:2d:c3:1b:9c:5f:34:f6:ce:
24:20:98:07:be:fe:66:c1:9b:87:be:93:08:46:a8:
48:3c:18:11:fd:14:17:49:b4:74:31:46:92:96:96:
a8:66:c2:f6:4d:87:9d:13:dc:fd:44:12:f2:38:9b:
d7:ce:cc:ee:d2:99:a7:e0:46:61:56:ec:8c:53:90:
5f:44:f2:77:ea:22:08:50:99:3d:18:a8:41:58:9e:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:A4:2B:57:30:F8:74:A8:9B:38:39:C8:2E:3E:45:BA:1F:1E:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8000::/40
Signature Algorithm: sha256WithRSAEncryption
50:00:60:7f:03:6c:a4:f7:68:43:79:59:4b:f1:a7:e3:a8:0f:
00:61:c6:84:38:65:5a:ca:0e:5d:bf:f1:97:14:64:9c:9c:8a:
12:7c:59:a7:b7:f5:73:98:ea:f6:7f:8f:14:5c:bb:aa:57:03:
e8:57:f2:67:e4:e6:19:ec:4d:aa:9c:b5:34:75:7a:96:b0:f0:
1b:3f:b5:64:cb:d6:55:b0:63:41:be:40:bd:f0:fd:61:bc:e7:
a7:f0:dd:9f:13:b8:f2:8d:a7:cd:75:0c:97:e0:a7:a1:cd:b6:
5b:55:d2:55:e7:d8:e2:41:13:61:0e:7e:e9:cd:17:df:dc:a6:
07:45:39:2f:87:d0:18:24:6d:17:46:77:67:ea:ca:87:1e:ba:
7d:fd:cf:f4:52:26:ea:6f:c1:26:5d:53:7e:be:e8:e5:ae:97:
a4:a7:de:38:1f:d3:17:f5:5c:c5:0c:c8:3d:8a:5c:9e:21:52:
ee:92:7e:bf:e6:10:0b:01:ad:b3:4c:07:4e:65:73:87:3c:27:
c3:8f:5f:c9:c9:26:52:8d:34:cb:6b:60:a9:34:88:92:13:82:
c2:33:af:46:28:5c:57:60:8d:bc:27:0e:94:17:96:48:d1:3a:
5f:9a:3c:27:bf:36:b9:0f:74:d0:ba:9e:8e:a2:cf:6b:df:2e:
8d:6d:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:01 2026 by rpki-client