Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa
File: 1bb27900-3531-4083-aef8-cc7656dba027.roa (raw, json)
Hash identifier: CYGKRE4hbhdU1ed2IRbjXvY1EhvhRlGig6T9wkSsGWA=
Subject key identifier: BB:80:64:A2:56:57:78:0B:72:D3:20:78:15:F8:59:5B:08:59:2C:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73CE90C6CD4CD82B26A59696759396CCCD1925CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa
Signing time: Thu 23 Jul 2026 15:20:28 +0000
ROA not before: Thu 23 Jul 2026 15:20:28 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ce:90:c6:cd:4c:d8:2b:26:a5:96:96:75:93:96:cc:cd:19:25:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:28 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=1b46f197edbd5475260516072bc4c87d1f29144b439ab6bb3b59b07758a634d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:b1:29:5d:c8:c3:30:ea:1b:e0:f1:d0:33:
a8:02:bb:eb:27:35:e1:b5:e2:d3:ca:4f:b8:bf:26:
14:80:2f:85:ea:24:48:af:69:e8:07:f2:27:82:76:
d5:47:4c:c2:3e:cc:ae:dd:02:82:9f:b7:ad:16:d2:
f9:a1:77:c3:98:01:9f:aa:c7:6f:a1:dd:43:a0:c9:
94:46:0c:38:a9:7d:a3:76:da:10:d7:a8:90:30:dd:
88:f5:c3:ec:9c:f3:9e:e7:d8:af:98:9a:bf:2c:7e:
d4:fe:75:e4:60:76:44:8b:09:ee:91:26:e9:98:08:
91:15:87:93:d3:ec:a1:29:f9:0d:1a:44:28:a9:e9:
3f:13:db:0a:b0:9d:90:d6:c2:91:33:83:a2:98:ca:
fc:75:40:06:03:16:45:87:2f:2d:6e:38:91:8c:d5:
10:74:fe:54:80:08:6a:8b:86:a3:9b:ad:8b:cd:61:
f5:b8:52:54:63:c8:a0:d1:a0:7d:ea:0d:64:52:26:
32:08:47:e3:ab:68:49:5c:5c:17:38:99:e8:45:15:
30:fc:ad:50:6e:58:2d:5b:da:0f:0e:f0:2f:04:e5:
23:36:a4:0b:9c:96:52:80:eb:a3:71:3d:7c:54:06:
4d:31:12:92:0c:3a:25:ea:c8:3a:f8:b8:2b:f4:1e:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:64:A2:56:57:78:0B:72:D3:20:78:15:F8:59:5B:08:59:2C:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b000::/40
Signature Algorithm: sha256WithRSAEncryption
41:83:50:85:9d:75:c6:ef:d1:1a:61:c4:86:77:b1:3a:36:5a:
d7:c3:28:8e:87:ce:55:3b:69:bf:c0:59:a8:33:5a:5b:80:0c:
07:80:56:f7:3b:b8:5d:d3:34:eb:33:22:1c:30:a3:3a:09:c1:
35:ea:05:fa:43:e4:ca:05:41:fc:83:40:e6:d7:c6:d7:bc:77:
c9:e6:53:aa:04:7f:66:86:df:3d:d3:8c:3b:40:ea:f5:53:97:
16:93:96:41:05:32:3d:fa:e9:22:2e:36:94:6d:d7:5b:fe:4d:
db:4f:03:b1:dd:83:c5:2c:7e:a2:99:e7:30:d2:13:ba:c7:d3:
ad:a3:c6:49:cc:12:28:24:21:cc:29:6f:12:1e:ed:f8:df:99:
2c:2b:86:82:17:c2:fe:f2:72:b9:f2:c2:e3:35:a4:0e:11:f3:
f7:28:95:89:93:ac:bd:a9:b1:8f:ab:2a:e8:69:b9:77:ab:d2:
22:32:5f:fc:c6:42:69:01:3d:7e:bc:14:dd:f3:7a:5d:9a:74:
bd:97:14:8a:aa:2e:f8:ff:97:ab:c3:af:18:d0:3d:03:d4:c4:
19:cb:3c:39:3c:4b:43:b0:8d:58:00:0c:fc:35:d8:47:84:e1:
70:12:fc:51:9a:b3:67:77:d9:20:3e:a3:c8:4c:ce:bc:b5:dd:
8f:ec:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:25:26 2026 by rpki-client