Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
File: 6fa185be-42e8-4c62-ba43-464d0598c2ee.roa (raw, json)
Hash identifier: 6VS8krOl+XTNBV0QuclnDNlYaM+5Ftmn6LDTzj8Umoc=
Subject key identifier: 66:77:08:8B:80:E9:BB:02:8D:43:3E:C4:2E:37:F6:48:7F:C2:A6:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E83136A1B42EECCAC65ADB5AAE9858CE44BA5C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
Signing time: Thu 23 Jul 2026 15:20:14 +0000
ROA not before: Thu 23 Jul 2026 15:20:14 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:83:13:6a:1b:42:ee:cc:ac:65:ad:b5:aa:e9:85:8c:e4:4b:a5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:14 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=56371e93309fd676d4c2b6b682a8973d83718fdbc24a2971b0d82b7a1bc85ea9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:04:a0:49:87:9e:81:83:83:e4:88:6a:c3:
eb:2e:8d:37:99:c5:7f:af:1c:2e:d0:03:0e:ea:64:
5a:c7:f4:07:71:3f:a6:d4:21:12:67:b5:61:fe:fd:
bb:4d:cf:be:69:af:62:4e:b2:80:e8:21:8a:dc:37:
53:9b:52:b1:bc:6c:de:3d:6e:36:94:71:99:76:bb:
31:c3:63:67:f5:cc:2a:b8:3e:66:66:af:08:21:c0:
cf:0d:96:90:df:9c:3d:bd:8f:80:de:b0:23:b7:72:
bd:36:d6:0e:76:3d:73:96:b0:3c:19:bf:01:49:4a:
81:10:3a:db:80:fd:11:ab:e3:24:3a:ca:cc:71:fe:
e6:23:5a:32:88:25:2c:4f:0e:37:af:07:a3:06:17:
25:e5:b1:e1:d7:b5:a0:cd:8a:5c:84:66:55:22:be:
d5:c6:23:c6:5d:2e:8c:ae:4b:b7:e8:d1:b7:0a:b7:
d9:fb:b7:c0:e9:95:22:d3:d5:8a:05:41:29:d1:95:
4e:08:fe:61:0e:72:73:85:6b:44:91:b8:d9:94:36:
61:b7:51:c4:78:a9:88:52:b2:73:e8:e4:51:15:82:
8d:f6:b5:d1:37:4b:3a:71:2f:56:d1:fd:f4:3d:36:
70:3a:1d:e1:72:5b:da:8b:be:89:28:da:ad:4a:8c:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:08:8B:80:E9:BB:02:8D:43:3E:C4:2E:37:F6:48:7F:C2:A6:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b080::/46
Signature Algorithm: sha256WithRSAEncryption
35:b4:df:c3:84:b6:44:be:1a:0d:bf:15:1e:23:ff:60:ab:fe:
21:0b:ba:ba:b5:5b:d7:20:cc:a5:fd:ec:20:04:2d:5a:4c:69:
b5:0b:d2:69:66:79:08:61:74:84:4c:16:b0:d6:ac:31:40:2f:
75:09:f3:b4:52:31:62:2d:a2:ce:ba:db:37:fc:de:26:be:75:
e4:a2:f3:20:08:1b:7b:a5:ad:64:3c:32:bb:f8:73:22:a3:b7:
a4:67:fd:b1:08:33:99:ff:43:b0:97:62:e3:96:5e:8d:f6:e4:
e0:44:18:7e:28:aa:d3:dd:44:2d:49:1c:8a:9d:f1:e7:9c:18:
4a:4a:c5:ed:1d:d5:42:bb:4c:3c:96:c1:41:87:d5:4d:8f:c6:
b2:e7:87:76:6f:e2:eb:8f:87:6d:02:91:dd:29:e0:13:f4:e6:
64:be:8d:66:e7:9b:06:24:ed:07:fd:60:9c:94:22:ba:1a:80:
9a:e0:ca:17:3a:a7:2e:dd:10:27:f6:89:67:5b:81:3e:fa:5a:
60:09:f9:54:58:32:ee:89:02:05:04:78:1c:bf:d4:f0:47:ce:
3e:46:ae:4c:bc:4d:35:30:e9:5f:81:c7:35:de:16:8c:6c:0e:
2b:7c:54:3c:2b:7c:4f:71:59:97:df:8f:f5:62:a1:f6:c7:32:
e1:ff:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:32:54 2026 by rpki-client