Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84396c6e-e708-44f8-a96f-a86110fe17e7.roa
File: 84396c6e-e708-44f8-a96f-a86110fe17e7.roa (raw, json)
Hash identifier: Qd76NkbXmp+O0JsaNjMUlwnTtEnEOVEE3CqAG3OLsrQ=
Subject key identifier: EF:63:A8:9A:76:C7:95:45:75:DF:53:1A:4E:DA:AE:84:69:2F:E8:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F87190293FCF1EB8B00A6A7A963EB1BA67EBC48
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84396c6e-e708-44f8-a96f-a86110fe17e7.roa
Signing time: Fri 19 Jun 2026 18:32:16 +0000
ROA not before: Fri 19 Jun 2026 18:32:16 +0000
ROA not after: Thu 17 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:87:19:02:93:fc:f1:eb:8b:00:a6:a7:a9:63:eb:1b:a6:7e:bc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 19 18:32:16 2026 GMT
Not After : Sep 17 23:59:59 2026 GMT
Subject: serialNumber=276873dd9e717edadd002e300386195f916351ac4782190bf50ffa65b3370f96, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:c5:78:87:4a:3f:1a:06:c8:49:9d:61:12:
64:cc:cf:23:f6:40:9a:b1:21:b3:75:95:84:de:59:
e3:dd:fc:be:85:15:f2:eb:d2:47:b8:2d:c0:52:24:
0d:9f:6b:01:b0:07:46:13:9e:48:8a:9e:68:b8:76:
90:3f:1a:08:46:4a:1e:28:ad:d4:23:55:f5:49:cc:
f0:e9:34:41:f3:d9:3a:6b:33:9a:a6:7b:d2:53:8b:
a3:e4:44:c7:90:23:a7:46:34:a4:0e:9f:fd:fc:94:
b4:f3:f4:ba:e9:98:11:3e:ae:a1:80:12:94:f2:bd:
e5:4f:7b:09:d9:e3:e2:e0:e1:85:c0:8d:8d:e1:6e:
50:f6:ff:db:7b:1f:6b:79:4f:9a:41:72:ff:1c:75:
b5:87:03:67:4a:71:6a:b1:0b:6f:58:21:79:43:6d:
ef:a7:d0:dc:f6:7a:61:6f:b4:27:ad:84:2a:db:af:
07:49:91:d5:fe:5d:f6:50:dc:ad:f1:17:b6:ae:72:
a3:bc:27:d4:5b:1f:34:0b:88:e5:5b:30:6d:3a:04:
d6:1f:f0:88:34:f3:a3:14:73:73:74:2b:27:e2:1b:
bb:c3:37:62:7e:5d:77:cd:9f:00:c2:4c:a5:f4:d7:
41:8c:5d:f3:bd:91:be:ee:97:a1:0a:62:ff:a8:6c:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:A8:9A:76:C7:95:45:75:DF:53:1A:4E:DA:AE:84:69:2F:E8:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84396c6e-e708-44f8-a96f-a86110fe17e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8800::/40
Signature Algorithm: sha256WithRSAEncryption
c7:b6:31:ca:d4:1f:3f:27:6b:96:9f:d8:17:3e:5f:9a:e1:10:
c6:37:59:02:99:42:21:30:64:ea:3a:ba:6c:8d:48:69:b9:ae:
1d:7d:13:8d:20:20:bb:aa:1c:11:4d:a8:74:09:b8:81:2c:12:
c3:bd:9e:7a:7c:bb:71:c6:82:d3:2d:62:85:66:cc:cb:6c:f2:
e6:05:1d:d3:95:93:86:10:96:34:e5:a6:a2:fc:a4:82:ce:ca:
68:cb:fd:58:a0:77:2b:f5:d2:59:0d:f6:42:db:e6:c8:70:21:
b7:63:f4:af:f1:a4:33:2a:b2:f6:e0:2b:60:a7:61:10:c5:ed:
bf:37:47:37:41:43:88:3f:ae:62:06:64:63:54:90:81:59:9e:
0c:74:75:65:d2:09:9a:92:11:7e:ac:01:cc:e4:b3:15:10:fc:
c5:98:82:47:97:25:8c:25:ec:b4:dc:b0:c4:44:8a:64:cc:35:
38:a5:7b:93:39:2a:2a:5f:38:fc:c9:69:65:e1:26:52:6f:51:
5c:9f:3e:72:78:f2:05:12:48:d3:d4:6b:d6:2e:06:2a:f8:3a:
08:e6:b5:15:70:eb:b9:9e:9f:d0:9b:2b:ec:0c:35:4f:c7:d6:
44:db:86:2e:7e:a2:31:15:92:07:7d:e2:3c:8f:d6:4d:70:b8:
56:3d:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:54 2026 by rpki-client