Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97700b94-3ec6-472c-97f5-b54fb1f56f76.roa
File: 97700b94-3ec6-472c-97f5-b54fb1f56f76.roa (raw, json)
Hash identifier: LpLkVhNirk53+XY1hGTpVljWV7DbwDQlGE89ztwfRCY=
Subject key identifier: 25:A7:5C:6D:93:D1:EC:EF:28:48:C5:4D:B1:C7:62:8A:5E:56:06:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4533D5E34BF5BFB2EC610DDAA1CCA498F701A446
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97700b94-3ec6-472c-97f5-b54fb1f56f76.roa
Signing time: Thu 23 Jul 2026 15:30:12 +0000
ROA not before: Thu 23 Jul 2026 15:30:12 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:33:d5:e3:4b:f5:bf:b2:ec:61:0d:da:a1:cc:a4:98:f7:01:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:30:12 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=ca33b56416ae9f4af12aa2a33d4902803cdc998325bcccce1923dd53fb0c63a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:f4:42:c3:d3:90:3d:9a:49:8f:63:91:3c:
67:43:d1:f1:fb:be:46:01:a2:26:c4:70:82:97:b8:
a9:a2:2d:e9:55:63:d7:e2:6e:82:1f:3c:91:42:5b:
32:6f:36:89:c2:4a:85:c5:80:9d:f3:58:ba:95:ce:
bf:3f:b0:63:04:fc:f0:8e:b8:27:3e:87:90:83:8d:
20:ad:b4:b2:3b:6e:f5:db:d0:9c:9f:22:4f:47:57:
10:bb:98:8d:0c:2c:65:67:fe:07:d2:80:7b:96:75:
81:f5:50:94:24:26:8c:f0:47:92:39:ff:d5:2f:ef:
c8:a5:5a:18:b9:c7:56:ec:0c:71:68:da:8d:0a:1a:
7c:cf:76:37:17:be:3a:0c:19:ef:e7:46:a8:47:5d:
1f:7f:8c:90:52:c5:27:3a:7b:39:a8:95:0c:dd:0a:
da:0d:97:4f:bf:72:19:da:b2:54:b8:fc:b9:09:81:
c1:42:20:7a:1b:39:27:07:53:26:47:e8:f1:32:1b:
6d:7e:d4:9b:38:67:11:8b:71:0a:79:8c:61:25:99:
d3:ae:22:8a:0f:aa:bc:d7:d0:f8:1c:41:52:3b:cf:
83:8a:d7:21:3e:aa:e5:e0:34:c8:1f:e7:e2:1f:a0:
eb:c8:3a:77:b7:39:e7:0f:1e:df:25:43:cf:1b:e0:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A7:5C:6D:93:D1:EC:EF:28:48:C5:4D:B1:C7:62:8A:5E:56:06:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97700b94-3ec6-472c-97f5-b54fb1f56f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2040::/46
Signature Algorithm: sha256WithRSAEncryption
5c:5c:07:6a:f7:a3:e1:8c:c2:80:af:a8:38:09:d5:76:e2:23:
c9:1d:76:fe:43:90:cd:cf:ca:c9:9d:25:c4:a5:2a:2a:84:27:
0e:99:a2:20:c9:99:a7:a0:c5:8f:56:08:86:50:95:88:7c:2b:
7d:c5:b5:a0:fe:25:fd:6b:a3:fa:7d:72:c9:6f:5d:9e:0e:c8:
60:f9:b6:d8:41:84:30:5d:3a:e7:46:19:68:07:c0:01:ce:8f:
3b:0d:d0:15:78:d6:47:19:f4:31:40:22:c8:c2:b4:d8:ae:bf:
5f:d6:8e:94:d6:bd:cc:35:86:4f:77:85:d3:5a:59:d7:76:56:
79:0b:33:48:bd:63:be:88:e0:23:f7:46:65:a2:ee:79:03:36:
61:30:8b:a2:a1:c6:6f:b9:3f:e6:32:03:dd:76:62:fe:63:c5:
90:db:4b:44:07:e5:42:f4:a6:c2:a7:6a:67:0b:53:87:5a:e8:
fd:fd:b4:b2:bc:f0:f2:cb:28:2b:0f:65:e1:02:f6:13:0c:01:
8d:e6:af:94:90:ba:bf:42:90:32:35:0a:9d:2a:fa:0a:71:6b:
96:b6:7a:52:39:9e:0c:90:e3:de:9f:d4:ce:fe:86:b1:29:b0:
7a:2e:ec:84:06:9e:a1:f2:74:b8:99:75:15:37:26:1c:9d:93:
4c:ff:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:17 2026 by rpki-client