Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
File: abbee85f-272a-4ae4-8329-48f63bc24277.roa (raw, json)
Hash identifier: tsM2T78xAFS0/BkE4ePk4vU+UJBqnh3m2MAXW7QmL1s=
Subject key identifier: E2:41:36:7F:0F:DD:3A:0C:0E:75:43:47:5F:0E:B4:F3:47:0E:1F:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5755CE3B4168A5A06B5174C93DFF74981DE0F4A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
Signing time: Tue 21 Jul 2026 01:30:22 +0000
ROA not before: Tue 21 Jul 2026 01:30:22 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:55:ce:3b:41:68:a5:a0:6b:51:74:c9:3d:ff:74:98:1d:e0:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:30:22 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=5be7f9b9163ae159cfff3f120b048ca3058f8078ec29599413c327d519bf811b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:10:94:83:14:a7:09:3d:c5:38:55:31:3b:
7d:8f:c0:ed:2a:80:22:21:79:3a:72:5a:16:b9:a9:
b8:0b:19:9b:65:dc:2e:2e:bb:8e:c3:58:0c:4a:0a:
15:a2:16:e8:99:12:00:cc:6b:a4:54:b0:19:eb:b5:
a4:a2:ea:df:06:34:e2:da:d8:35:3c:69:3d:67:ac:
42:21:01:d4:7a:bc:c1:f9:06:9c:42:b1:56:0a:95:
0d:f2:de:df:8e:0a:e9:5b:c4:15:a3:ae:76:be:0f:
aa:ba:89:03:89:69:01:5d:05:9d:fd:a0:c9:82:9e:
24:39:92:7a:47:7d:0e:b0:56:c7:cc:7d:17:20:3e:
f3:78:08:33:e1:58:a3:60:90:17:52:8e:ec:ca:26:
ca:78:11:8a:69:99:5e:13:09:0b:45:4b:ff:d0:a1:
cb:49:0b:d5:0a:0a:44:6b:41:7f:55:54:9c:31:bd:
66:72:a3:b8:c7:2f:0d:f3:d2:92:3a:5d:7e:2f:0e:
c9:82:72:38:4a:65:68:7a:92:30:50:cc:81:f4:e6:
e6:80:27:4a:ac:5c:76:55:05:b5:71:86:55:b9:dc:
89:47:05:9c:45:23:21:65:6d:b5:6e:9b:76:fc:1e:
ea:3e:73:81:f1:82:26:0a:f6:2d:9d:77:66:83:23:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:36:7F:0F:DD:3A:0C:0E:75:43:47:5F:0E:B4:F3:47:0E:1F:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a080::/48
Signature Algorithm: sha256WithRSAEncryption
5a:11:89:77:b9:f7:be:f5:b7:2f:63:09:78:4a:39:0f:f9:1e:
d3:55:69:aa:62:21:76:e8:df:11:ed:61:c0:1f:05:a1:dc:e2:
8a:f8:f5:54:2f:4d:c2:7e:7b:98:81:15:08:2b:fb:9e:32:ba:
38:90:fd:a4:36:97:4a:06:1a:f2:15:9d:77:a3:4f:c4:79:b0:
c9:b5:20:49:d1:7c:4d:e9:0e:df:84:36:80:06:95:3e:80:31:
81:02:56:af:34:6b:00:ad:c0:5e:49:7f:a7:c7:83:03:0b:56:
b5:d1:41:b7:aa:14:49:15:3e:4f:22:b6:14:1a:c0:0e:10:81:
31:6a:49:70:15:ab:68:0e:58:f7:07:90:fd:4e:7f:f7:01:0e:
66:cc:b6:5d:e2:22:c5:0c:67:b9:c1:0f:6b:37:14:a1:0c:1a:
dc:e7:86:b0:89:87:26:49:d9:5d:3b:4a:da:5b:9a:82:64:ff:
40:89:30:dc:95:b7:9d:32:80:29:4c:2b:cf:17:6b:f7:a8:a8:
03:8f:b9:68:dc:8f:4c:7a:19:99:f9:94:aa:10:86:3c:3e:9a:
15:e2:68:95:59:23:0d:60:ee:17:38:af:a7:ac:d6:fc:27:5d:
a1:7f:77:23:6c:ec:4f:ec:51:e7:39:1f:17:ef:e1:72:c4:48:
08:ea:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:52 2026 by rpki-client