Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e6878ab-55a6-4771-8954-3306e598be04.roa
File: 8e6878ab-55a6-4771-8954-3306e598be04.roa (raw, json)
Hash identifier: qs89APnA5DBksJnOe1yxS/5lrqGa5Bo9B7LbGYlZoPM=
Subject key identifier: 71:C8:4C:D7:D8:64:86:D3:D9:A8:65:E7:74:CF:13:03:BB:8C:19:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 155A164AEEC4AAB8A7A7B93E40981E190DB13A2E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e6878ab-55a6-4771-8954-3306e598be04.roa
Signing time: Tue 21 Jul 2026 01:20:09 +0000
ROA not before: Tue 21 Jul 2026 01:20:09 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5a:16:4a:ee:c4:aa:b8:a7:a7:b9:3e:40:98:1e:19:0d:b1:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:20:09 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=047c73ef7a545b0f19fc4723af55c656c09b1094cb058c2350fc4f52f7e238a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:c8:f3:c1:ff:e7:b1:4e:cf:55:aa:62:0e:
bd:1a:69:ac:1c:1e:c9:bb:aa:d2:c7:2e:15:44:78:
4b:2f:48:8b:b1:3c:b7:f3:e8:66:ea:d5:66:55:a6:
ef:b6:a1:5f:b3:d4:8c:9c:90:ae:c2:73:80:2e:f9:
63:69:ff:67:fb:6a:17:05:1c:06:cc:f8:33:5e:05:
39:a7:49:4c:5c:9c:56:12:15:b4:3e:ce:a3:3d:f4:
db:cb:24:80:b9:6e:37:1f:16:98:a3:61:3b:58:ff:
07:0e:bd:23:64:4e:1a:b3:80:29:47:1d:c2:ec:37:
02:4f:06:4d:1e:26:0c:e1:5e:14:9c:1a:54:35:91:
a2:3b:73:e2:7d:b2:64:ff:96:f8:ee:5e:53:69:b1:
3e:b8:8d:4a:0c:5f:63:c9:f6:5b:6e:68:c7:c1:b4:
4a:31:e0:18:3c:7f:53:54:2b:9c:01:aa:6a:e3:20:
7d:af:89:d0:2f:39:29:21:41:3a:68:8c:14:c2:68:
8b:51:75:b9:6b:68:ea:92:2d:a9:17:27:cd:1e:20:
6b:90:16:53:89:9f:f1:92:e0:2d:d9:f9:31:7d:f3:
44:64:ef:ba:49:5b:80:fc:37:e4:cd:0e:44:08:86:
b8:5d:1c:20:1b:d9:3f:20:20:ff:8b:dc:4b:1f:06:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:4C:D7:D8:64:86:D3:D9:A8:65:E7:74:CF:13:03:BB:8C:19:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e6878ab-55a6-4771-8954-3306e598be04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:800::/40
Signature Algorithm: sha256WithRSAEncryption
66:24:10:a1:f0:a8:5b:a7:16:7e:78:89:60:ec:ad:2a:c5:95:
9e:7a:66:31:90:50:c4:67:ca:55:3e:61:cd:f9:f4:00:bc:b0:
9b:e5:ec:a9:ec:12:52:42:40:8f:66:31:59:2d:a5:a1:b1:8a:
8b:e8:bc:35:0d:0a:d7:d0:5e:d9:e3:d3:57:3d:5c:b1:5a:6f:
fa:43:6f:e8:02:cc:b8:be:4f:74:8d:a8:63:05:43:6e:54:d3:
b5:95:fe:85:5a:43:95:25:af:5d:51:9f:fa:cd:c2:95:0c:65:
d7:30:42:04:06:4c:70:88:dc:61:fb:f6:54:cc:be:27:ff:89:
f6:97:13:55:6b:d7:81:cd:e2:39:d4:7a:3e:0c:62:19:4d:61:
d6:77:07:f7:15:88:37:79:76:b2:b7:37:46:b5:46:68:97:ca:
54:46:c0:31:cb:92:6e:a4:1c:4b:69:ce:a6:1f:df:59:1f:0d:
3b:a6:b3:a4:e2:65:1e:06:cd:af:b3:cb:47:f7:c3:8e:fd:53:
47:f1:fb:fe:18:33:f7:50:5a:d7:61:d1:61:77:34:39:1a:48:
81:66:24:f9:09:24:4f:cb:85:ed:61:31:b2:3c:00:f5:13:68:
9f:a0:bc:bf:f3:a6:21:71:f2:0c:80:7a:a6:9b:0b:93:e4:9a:
67:71:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:37 2026 by rpki-client