Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7109e934-b803-4bd3-8dfc-cfe0c2222824.roa
File: 7109e934-b803-4bd3-8dfc-cfe0c2222824.roa (raw, json)
Hash identifier: hvZx5cMqUOXgmDIgeDMstT2+cwbi2pkLw57EBvUxbjY=
Subject key identifier: 8D:B0:20:E4:72:91:FB:5F:43:76:5A:65:38:83:8A:26:59:3F:8B:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 048D3B0859E9633FCE2747937C186F7E18ABC230
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7109e934-b803-4bd3-8dfc-cfe0c2222824.roa
Signing time: Thu 23 Jul 2026 15:20:09 +0000
ROA not before: Thu 23 Jul 2026 15:20:09 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8d:3b:08:59:e9:63:3f:ce:27:47:93:7c:18:6f:7e:18:ab:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:09 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=8a6af4b6044a5fa0fe2d0c5a48ba42a816e0888dcd06b69849eaa59adb2d1539, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:b2:19:8e:79:bf:e6:7a:97:42:1a:d6:97:
7b:6b:bf:3c:50:f8:f6:3b:28:13:fa:03:a7:da:ee:
c8:ed:7a:6a:05:33:1c:03:2b:e7:ea:27:b4:2e:db:
1a:ee:96:ce:14:f8:68:2f:34:ab:56:79:cd:5d:67:
e9:52:99:fc:a7:8a:0e:8c:63:f6:ac:ed:dc:8b:93:
23:0f:86:e5:38:2a:bb:87:3a:c5:00:76:d6:cf:d3:
4c:01:6f:46:cc:13:19:a2:9e:53:ec:52:aa:c8:2f:
e2:5c:47:f3:9f:e4:cf:9d:91:ce:59:b5:f1:6b:cc:
04:d4:69:bf:bb:aa:23:63:f3:25:39:60:d5:e3:d8:
23:6f:f9:ad:63:da:a3:77:01:ed:8c:44:12:bb:a8:
01:07:4a:5c:93:d3:8e:d8:ba:68:d2:eb:2d:dd:37:
88:94:78:c2:e5:a5:5f:3b:44:44:f4:46:cd:5e:bd:
c4:66:9a:f5:82:87:c3:01:57:35:40:a7:54:63:c1:
1f:c7:ad:9e:92:98:69:60:00:bd:74:f8:cf:cf:6e:
05:e0:e5:d9:1c:e2:3c:a9:c4:9b:8a:fa:94:5f:fe:
8b:e5:28:9d:37:7f:c3:dc:40:f9:4a:d0:0b:63:6a:
21:9e:ca:e9:8f:75:d8:98:13:d3:1c:f8:be:c0:0f:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:20:E4:72:91:FB:5F:43:76:5A:65:38:83:8A:26:59:3F:8B:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7109e934-b803-4bd3-8dfc-cfe0c2222824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5040::/46
Signature Algorithm: sha256WithRSAEncryption
92:0f:19:5e:45:76:be:6b:8f:4c:7f:f3:e2:09:04:c4:16:de:
7b:82:bd:d7:19:fe:23:dc:5f:e1:14:af:00:f0:83:04:dd:af:
3b:37:c3:0b:a9:0b:09:68:85:05:75:0d:3f:b8:0a:4e:21:c3:
65:e0:23:89:6c:af:a6:7e:00:bd:73:95:ae:77:67:39:07:c4:
63:a4:56:7e:1d:f0:5b:d8:b7:e6:76:dd:d6:14:76:b4:e6:40:
2a:57:b4:6b:c4:53:e3:11:e2:ca:e2:c7:e6:1f:70:a0:2f:9d:
b3:d8:70:06:44:68:af:53:34:8c:a7:5e:14:38:17:54:d9:19:
c7:58:8c:50:b9:3f:24:d1:44:b1:e2:89:30:0c:a8:ce:9f:b6:
73:7d:7b:ea:06:1f:41:82:9b:a9:6e:5d:78:a1:3a:ac:0d:5d:
19:6a:ab:36:8f:58:ca:c3:99:67:d0:c9:3f:c6:87:e3:44:ec:
91:0a:08:40:7f:38:19:24:53:16:cf:0e:9f:ca:55:20:22:57:
dc:39:59:37:6d:a9:e4:5c:8e:50:aa:33:94:e9:c8:fc:87:e1:
e2:4a:14:ae:ed:67:c3:64:c0:ec:ca:71:32:df:44:83:76:b8:
35:3c:4c:9d:86:5b:36:a8:0a:7f:52:df:86:66:69:46:13:e5:
41:ae:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:18:46 2026 by rpki-client