Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
File: fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa (raw, json)
Hash identifier: 5x7v5ih/r3Ej/jRJUgebqqlY343y49Iddo2yIysk4sQ=
Subject key identifier: 94:07:08:5E:ED:32:0D:53:E7:C3:F5:FD:C6:6B:AF:3A:6B:8C:AA:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53A7B85FCC5E06560B40F8D66E8FB24B46AD7872
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
Signing time: Fri 07 Aug 2026 05:00:34 +0000
ROA not before: Fri 07 Aug 2026 05:00:34 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a7:b8:5f:cc:5e:06:56:0b:40:f8:d6:6e:8f:b2:4b:46:ad:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:34 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d701613aa8c3244be2599f38ccd3bbf19524d913ec947a935ab4d2c6cac62e34, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:cd:a1:a0:2b:3a:8b:9b:46:ee:34:ee:70:
3d:ca:49:11:6c:a3:20:ec:fd:cd:22:68:2e:c7:d9:
37:1d:0b:21:d3:07:a4:d2:51:c8:9f:23:ba:49:a7:
1c:4c:a9:09:b1:cc:07:10:f3:36:87:d4:46:cb:ac:
fa:3b:5b:f8:09:16:c0:44:80:4d:11:ef:96:92:d7:
4f:db:a4:dc:15:f9:16:27:07:74:60:ec:1d:cf:28:
1b:cb:4c:8c:0b:bd:fd:27:80:2f:de:fb:9d:0a:e5:
08:d0:e4:57:e2:bc:67:f1:a7:70:40:2c:50:e9:2c:
69:a7:6c:37:f3:6d:fb:78:ad:e2:15:6e:c4:b3:cd:
7e:1f:9e:8d:90:c3:b8:bb:9c:2c:46:b4:f7:42:cc:
1f:14:3f:7b:6e:96:27:2d:6b:9a:40:09:86:e0:8c:
95:1f:46:c6:81:44:76:5a:21:7a:b5:55:77:d0:70:
0d:dd:17:44:cd:ce:7e:8e:d3:f9:8d:a9:42:91:3c:
c2:44:31:e7:bc:9a:b2:c1:38:84:0c:0e:9a:6d:59:
26:34:5a:8a:b8:37:3c:20:45:19:fc:6f:8d:b8:0a:
e1:d9:af:07:43:53:83:70:54:c9:75:3e:3c:3b:6e:
a2:7b:16:70:96:f1:f0:f3:29:18:5e:34:aa:c7:30:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:08:5E:ED:32:0D:53:E7:C3:F5:FD:C6:6B:AF:3A:6B:8C:AA:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
08:69:b3:b1:c2:13:ff:a9:42:1b:65:d5:1f:b0:6b:1e:50:89:
a1:47:25:53:06:f1:79:ed:2c:44:91:9b:bb:a9:32:24:3e:94:
9a:8e:fa:91:4b:df:79:fa:1f:46:a3:02:59:fd:97:ea:13:e7:
77:03:d6:7c:7c:3a:52:e5:45:e1:7a:75:da:f9:bb:e9:60:1f:
6c:4a:05:2e:73:5c:51:f0:ee:a0:e8:c6:ec:03:8c:ac:62:ee:
66:df:fe:02:ed:76:71:82:89:3d:40:78:99:f4:6a:06:c6:08:
3a:c5:ee:34:34:20:c2:03:88:aa:d2:51:dc:ea:06:a6:c2:64:
c0:44:81:37:c5:6b:03:85:c5:4d:02:57:49:a8:d8:7e:e8:d9:
66:b2:cb:d6:59:7e:67:bf:c1:91:db:d7:43:cd:6a:a2:f2:97:
8f:34:07:ed:50:0c:d9:bc:55:22:a8:1d:c8:a8:46:ad:7e:3b:
e4:8f:56:bf:51:a5:22:cc:72:b9:d2:bb:7e:3a:b1:45:6c:40:
46:78:8d:dc:77:55:bb:57:af:b6:12:57:ce:2d:61:63:c2:f9:
a0:e3:32:8c:8d:d4:36:df:6b:7e:45:e9:ef:e5:28:e8:e8:1c:
2a:73:b7:4f:15:91:43:63:06:2a:a1:69:fb:84:3c:21:b2:c7:
a7:33:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:47 2026 by rpki-client