Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
File: 232e4c5b-5853-4200-81cf-438555b951ff.roa (raw, json)
Hash identifier: 1UeLAhKLd8j+IyiTkwdjqypgnrI+3kQt1Dth3sqUL9U=
Subject key identifier: F1:FF:10:DC:07:36:2C:C9:91:94:57:AB:37:2D:B4:B8:DC:EA:DE:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 159AD1966EEC0BEBC12FF3F1E547AE35252EA032
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
Signing time: Thu 16 Jul 2026 00:40:27 +0000
ROA not before: Thu 16 Jul 2026 00:40:27 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9a:d1:96:6e:ec:0b:eb:c1:2f:f3:f1:e5:47:ae:35:25:2e:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:40:27 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=ff7d5712b12d343c359e568d5a24984efa21ed5ea548f5b9e59007e26fcae181, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:98:5f:1d:1b:a2:40:30:aa:65:56:9e:77:
61:2a:f5:86:08:40:4c:29:3b:3d:bb:19:8e:d8:69:
d7:50:a2:35:08:a0:90:19:91:27:9e:89:3f:25:91:
ea:25:e5:ed:ea:46:55:3e:d3:bb:5d:b6:c1:c0:54:
e1:3f:4b:05:00:36:94:f8:7e:6e:a5:80:a9:78:35:
3e:1e:60:f9:ca:18:6b:5a:f6:a0:83:2c:e2:c7:0c:
22:88:0f:d9:87:cb:79:7b:76:c2:31:5c:d5:13:ad:
71:4b:be:ca:31:5d:64:ce:9e:22:ea:bc:35:a3:fd:
4c:c9:5c:44:78:51:e8:84:66:cb:0d:f5:bd:8e:4a:
2f:28:6e:e5:e1:d2:92:51:a1:06:d0:cd:e7:df:eb:
d3:82:60:61:28:4f:7a:27:66:22:d7:7d:7f:2d:f6:
e1:c9:86:d1:6c:e1:9f:5c:8c:a1:22:bf:3c:7e:75:
a0:4f:e8:cb:14:9d:4e:80:6a:cc:45:6f:8b:35:82:
24:6b:00:5f:46:67:f0:24:e6:d4:b8:eb:2a:d1:6e:
75:8c:42:b4:79:37:73:f3:15:21:0c:e7:f0:de:16:
c0:b8:52:c4:8f:8c:3d:a6:d6:ca:12:09:4e:85:67:
e2:05:b8:a5:f3:e5:00:de:59:f8:b4:86:9b:db:6b:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:10:DC:07:36:2C:C9:91:94:57:AB:37:2D:B4:B8:DC:EA:DE:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:95:11:38:90:33:6e:7b:5c:08:75:76:0a:a5:ca:63:cc:8c:
06:58:2f:b1:46:08:81:17:30:c7:9a:c7:e9:a6:37:0e:7a:f7:
c2:c2:f6:7d:ad:11:ae:dd:07:b8:70:c1:34:1f:ff:4c:5e:79:
cc:91:31:38:fe:2a:28:92:c9:a3:03:d5:4c:ed:e2:24:e7:ed:
79:95:84:40:92:4d:99:a3:d1:81:98:0b:dd:dc:9c:94:d7:bf:
83:f5:1e:d4:ea:0f:5e:c9:59:06:54:e1:30:aa:6b:70:4f:64:
9c:de:d8:00:ea:1b:10:4e:f6:a3:c7:e6:f4:6b:d6:e9:78:d2:
d5:c7:d9:a0:d9:7d:35:c8:56:61:f2:ae:1b:01:e1:77:2e:1c:
4f:a8:15:45:8b:2b:63:74:55:5e:cc:37:20:31:70:bd:59:20:
16:5f:8a:7f:e3:81:57:8c:3c:b7:23:b2:a5:ff:d2:22:fe:22:
ff:5d:67:d3:45:ca:a6:65:ee:5f:b0:d4:60:7e:ae:81:d8:e7:
a2:a5:c0:76:4c:69:1f:ea:37:07:c6:da:f9:a5:b7:02:d5:62:
45:d6:5d:19:87:5d:24:26:2c:3c:87:59:44:64:2f:0b:a4:b3:
3e:e1:12:7e:c4:bc:d9:61:6d:18:6d:84:20:9b:ad:67:61:68:
08:78:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:14 2026 by rpki-client