Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a082d12-70e1-4005-8dd1-52b78c0c75af.roa
File: 6a082d12-70e1-4005-8dd1-52b78c0c75af.roa (raw, json)
Hash identifier: U+cECrBlF91nZWJwz84kXvO/iU/2nYDzonHUEn029Bk=
Subject key identifier: 2A:1A:12:52:C5:0D:DE:F2:97:E4:F6:02:04:D2:30:9D:70:36:7E:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C07B4F7FDB71D7EA32F23DDA6AD84576BF73B18
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a082d12-70e1-4005-8dd1-52b78c0c75af.roa
Signing time: Thu 23 Jul 2026 15:20:22 +0000
ROA not before: Thu 23 Jul 2026 15:20:22 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:07:b4:f7:fd:b7:1d:7e:a3:2f:23:dd:a6:ad:84:57:6b:f7:3b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:22 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=b5b7dedd51764b6941e5461e09324fe5b4284a5102fa1158ed0b636f8495222b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:53:9a:87:f1:34:18:51:2e:e8:58:dc:e1:
ee:3e:5a:3a:42:6e:5d:0f:f9:f3:c4:a0:2f:76:1b:
ca:a9:f7:d7:27:61:75:d9:02:4e:ca:b0:dd:13:bb:
30:ba:4a:87:da:1b:ff:75:d5:b6:33:96:32:bb:26:
2e:50:04:44:aa:9c:21:9d:39:b3:ec:d7:ce:e6:0a:
a2:54:19:81:fb:82:23:bb:d2:1e:07:60:48:64:e5:
99:57:09:4c:f1:8e:f8:60:61:bb:0f:8b:15:25:50:
ab:aa:67:1f:01:2c:4e:d3:3f:2b:30:7f:94:b7:a4:
d7:cc:fc:bf:dd:35:90:96:36:e2:42:fc:d8:82:9c:
d3:89:21:5c:38:04:0c:05:25:c1:ef:13:2f:3a:0b:
a6:6c:70:53:eb:77:78:96:a9:15:3e:fc:78:3c:b7:
f9:13:43:db:c0:6d:0f:14:6d:b1:68:9c:c7:3c:e1:
21:ab:c3:e4:dc:7c:de:e8:d1:f3:2f:15:5a:87:4f:
a1:a4:e4:f4:8d:5c:8d:86:0c:f6:49:a9:1a:be:bb:
89:15:eb:a7:27:35:c1:dd:54:43:56:87:77:31:12:
8b:16:46:4c:ef:43:ff:bd:56:b1:f2:93:11:e8:f2:
0d:63:dc:8e:30:15:1f:60:cf:17:fb:0e:fb:b0:c7:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:12:52:C5:0D:DE:F2:97:E4:F6:02:04:D2:30:9D:70:36:7E:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a082d12-70e1-4005-8dd1-52b78c0c75af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a080::/46
Signature Algorithm: sha256WithRSAEncryption
b6:7e:88:a2:19:0b:a7:18:f2:10:9d:85:05:3c:7f:93:fe:8b:
ac:d8:47:3c:33:f5:da:a5:98:07:3e:37:af:1c:37:dd:a6:ba:
47:79:c4:58:8f:fe:d2:d7:1e:ed:e3:13:3f:c3:fd:fd:d8:e9:
c4:10:32:5e:a5:3c:2a:5c:0f:d9:77:65:a8:22:38:84:5f:3a:
50:9f:30:a0:84:00:7d:5c:cb:64:29:16:31:47:dd:c6:2c:33:
5e:4d:77:ca:ea:ad:b9:18:cf:9c:c8:d0:bf:29:d7:1e:08:72:
7d:e4:77:2f:88:79:89:1b:ac:de:55:c8:a0:dc:e3:86:10:5a:
ec:7b:76:f8:30:e4:f7:79:91:2e:68:1e:09:c6:d1:ec:f2:d4:
65:1e:b8:89:e7:29:f4:9b:34:f0:8c:d3:40:c2:a2:84:24:9d:
32:3e:dc:c1:76:bc:e9:d4:60:d5:07:ad:69:99:f9:fb:75:55:
64:00:4f:37:d6:c9:f2:23:ad:1e:64:90:ea:f5:f0:fb:d4:f5:
7a:2f:89:0a:84:f0:3c:46:97:c3:b0:0d:db:46:7b:75:75:6d:
c5:ed:ec:6e:fc:72:74:07:40:12:94:6c:3c:80:10:c1:1c:d6:
ac:11:6a:46:d3:05:a1:3f:ae:25:99:8e:97:bb:50:6e:b8:83:
7e:4e:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:42 2026 by rpki-client