Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
File: 07c3de07-a359-4dee-93cb-30a6dab1215d.roa (raw, json)
Hash identifier: tN3aXPbNvs+a9UpxpSClRrGY/lY6Jid5Fm+TyHQNxtE=
Subject key identifier: 01:E6:B9:5C:BD:DF:75:7F:4C:12:4E:8A:80:57:4D:20:4B:6A:65:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7181ECA2AC134162D0E5A1D5B366100C30E1DBC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
Signing time: Thu 23 Jul 2026 15:20:31 +0000
ROA not before: Thu 23 Jul 2026 15:20:31 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:81:ec:a2:ac:13:41:62:d0:e5:a1:d5:b3:66:10:0c:30:e1:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:31 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=8f28d85540993af49d113d14b4776f25880532c461b8f9396d21b87f09057410, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c1:5e:88:a9:be:75:b8:bf:cb:32:a1:10:31:
79:5d:d5:75:68:51:c1:79:d5:40:49:47:84:96:2b:
b9:17:ed:5e:57:85:5d:d7:dd:00:c8:85:e5:f5:43:
e5:e6:44:98:f1:b8:49:39:84:dd:b8:91:cf:eb:16:
73:40:a6:6f:32:c4:05:84:8d:38:68:95:c7:9c:0e:
c0:52:26:65:66:37:c6:6a:60:b9:ca:5a:58:fe:41:
f9:e8:64:b6:5b:c1:7a:d8:3e:36:7e:25:0a:0e:df:
55:12:5d:d0:50:43:c0:38:de:f2:04:29:65:cc:c9:
d6:c7:83:ab:98:42:92:dd:e4:eb:0d:53:fd:4c:66:
7e:06:57:36:e0:c1:d9:08:5a:42:da:36:58:03:ee:
0b:41:ae:b2:ed:ff:cb:cb:3b:b7:f4:67:dc:17:8d:
bb:c3:69:66:2e:a1:cb:6e:ff:5c:b3:64:45:d0:e9:
9f:69:df:c9:d8:1a:e7:ff:9e:7d:9a:be:97:91:d8:
e1:e3:b3:c5:b7:0e:c0:27:0c:63:11:9f:fc:81:07:
ce:dc:70:f6:50:6b:34:40:e7:5c:9e:3e:0d:6b:aa:
26:a6:62:70:be:4a:3e:a3:cb:a3:03:5a:8b:5c:cb:
bf:b2:e6:b1:22:e4:2b:79:02:72:b6:2f:b0:89:01:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:B9:5C:BD:DF:75:7F:4C:12:4E:8A:80:57:4D:20:4B:6A:65:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
b6:fe:d3:5a:1b:02:b7:01:3c:ae:90:7e:25:d8:56:4b:d6:36:
d7:99:e4:b5:34:e4:9d:b6:eb:96:2f:46:9c:20:80:d7:b0:0b:
ed:85:94:b5:20:77:b3:17:22:7b:68:49:a1:1d:18:dc:59:10:
70:44:34:3d:ba:d7:bc:1c:e1:75:b9:ed:76:4e:a3:c2:a5:85:
aa:f2:8c:f3:82:9d:9b:bd:b1:63:43:4f:97:0c:4c:53:55:04:
e4:b8:44:a0:f1:0c:ee:64:34:d9:6e:7c:89:eb:04:f8:d3:93:
2b:c9:aa:73:67:da:fa:bd:26:c7:9c:69:9e:82:d2:4a:e9:90:
13:0c:b3:5d:3e:ee:cf:e7:fa:ac:39:fc:19:11:27:98:60:aa:
25:fc:f0:40:2c:70:aa:01:ae:d5:23:e7:d7:57:a1:10:82:5e:
d2:8a:27:ef:81:85:4f:c0:d5:8c:9e:c3:fc:c6:e3:bb:41:df:
60:3a:c8:08:b8:c2:8c:da:86:be:d3:4c:20:ab:08:3b:8b:80:
b2:d3:92:61:8f:b1:48:fb:71:3d:45:d2:a6:65:b6:8f:b5:83:
a5:09:e7:c1:67:f1:c9:e5:67:43:a4:4a:4c:35:3b:fb:58:aa:
3f:9a:e3:e3:d1:2f:68:21:7c:ec:10:60:8a:50:70:9c:54:19:
54:19:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:04:44 2026 by rpki-client