Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa
File: 9cdec629-851f-4419-9f9b-59607b65b13a.roa (raw, json)
Hash identifier: KhIEofyGxRnqDVO/UPJm2VmlIAQzAAB8nenfM0U+ILE=
Subject key identifier: EE:A7:10:41:CC:4D:26:E0:AB:5F:C0:7F:4E:EC:5D:DE:47:D2:FC:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A33F813CDE7C52474BB2F41E9BDD18F6B90E06C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa
Signing time: Mon 22 Jun 2026 02:40:27 +0000
ROA not before: Mon 22 Jun 2026 02:40:27 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:33:f8:13:cd:e7:c5:24:74:bb:2f:41:e9:bd:d1:8f:6b:90:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:40:27 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=12826dc254c76e27ddd235f7c56b2767576bf9c2321b0e65eb47b85e39f8ea66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:02:4f:fc:41:cf:47:9c:a9:25:1a:0e:5a:
07:87:2e:1b:7a:c2:45:9c:b6:02:bf:df:e6:e2:e0:
2f:76:10:c8:72:0b:45:d7:08:f6:fd:a4:7c:0e:09:
11:f8:cd:ff:68:6a:a1:4d:7c:2b:c8:87:b1:07:33:
85:8f:ab:59:b7:82:15:20:47:c0:a0:2f:b1:4d:69:
f5:cb:f7:22:0a:4f:8a:5f:5f:88:8b:eb:31:f1:e2:
89:4f:bf:75:ce:99:89:de:0a:66:d8:b8:1a:26:64:
18:ae:df:ba:3f:7c:e8:d2:6f:99:81:5a:fe:cd:17:
ab:ac:0b:a7:38:77:42:7a:30:c7:04:3f:4f:8b:7b:
dd:71:fa:5b:d2:b8:06:1a:c8:bd:7d:a8:d6:57:d7:
c4:00:15:36:19:ac:9b:23:53:77:9d:46:86:0c:91:
ae:aa:3b:af:be:8c:3c:b2:2b:94:b5:76:b5:c0:84:
e3:9e:51:64:9c:a0:a4:21:46:cd:f9:ae:29:0f:39:
08:0c:d6:be:1c:ff:1c:df:07:e7:0d:29:ac:d7:cf:
93:63:09:b4:17:84:38:a1:a1:e7:04:5a:aa:f9:0f:
c4:5b:45:1e:0b:1d:44:7c:71:77:f2:95:64:26:9e:
45:83:7f:57:4d:99:31:a1:c4:4e:ad:d3:d2:a3:b8:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:10:41:CC:4D:26:E0:AB:5F:C0:7F:4E:EC:5D:DE:47:D2:FC:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8000::/40
Signature Algorithm: sha256WithRSAEncryption
3e:87:34:e2:a3:09:98:97:bf:48:53:74:a8:0f:2c:82:b6:c2:
96:23:b4:1a:ba:4c:1a:70:51:81:21:ed:07:fb:c5:07:be:cf:
8a:ab:8c:ef:5c:37:eb:38:09:8c:b4:c9:4e:c2:48:02:12:e5:
12:43:76:28:ed:8c:ed:07:96:cb:51:e1:db:ee:a8:9c:63:22:
e0:78:6e:06:7b:52:5e:9d:ad:71:85:90:18:ff:5a:91:2b:9d:
c7:10:3f:12:37:55:e8:af:74:7d:cb:9c:d2:6f:2b:f9:fc:42:
66:f2:ce:cb:1e:a3:a1:da:c3:fb:6e:63:9d:de:1e:3c:fb:76:
ad:61:2c:17:b2:af:07:fe:af:74:15:75:90:32:0f:5b:a3:13:
78:6c:6a:34:86:76:48:19:56:73:96:75:1f:b5:a9:aa:03:20:
5c:79:9f:63:01:79:61:d0:86:ea:b1:ed:17:2b:a4:0a:7b:cf:
21:22:8a:65:fa:32:fb:0e:ce:fe:06:0f:40:92:0f:dd:c7:75:
ab:63:47:d2:0a:ce:0a:b5:f6:f9:30:c8:10:53:cc:9e:97:4a:
53:13:c1:25:0f:79:f5:d3:ae:ce:0b:a7:3f:a2:50:3a:9b:78:
79:2f:b2:5f:b4:5f:0a:ea:b7:ec:17:5e:ca:99:07:d0:08:9b:
2b:ff:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:41 2026 by rpki-client