Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd75b960-96a2-4735-8f78-a99099ccb684.roa
File: bd75b960-96a2-4735-8f78-a99099ccb684.roa (raw, json)
Hash identifier: BtROMCnurHLbokhOk6q++U2mu9B8ZsSNUwVk+myhosg=
Subject key identifier: EE:28:3F:5C:BB:94:89:FF:C9:EC:F2:F0:F0:49:73:B6:2D:35:C3:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3392A4CB18EE53FC50506B01C974151CF736F3B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd75b960-96a2-4735-8f78-a99099ccb684.roa
Signing time: Thu 23 Jul 2026 15:21:08 +0000
ROA not before: Thu 23 Jul 2026 15:21:08 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:92:a4:cb:18:ee:53:fc:50:50:6b:01:c9:74:15:1c:f7:36:f3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:21:08 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=1d606b1bceb00ddb90139078755912b340daa2624846e506aba587280311a628, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:fa:cd:ea:fd:6a:e7:af:bf:fb:f0:07:73:
fd:61:91:a5:6b:c6:a3:b5:ae:3e:aa:f4:5f:87:9b:
1a:1e:04:9a:1c:fa:9a:bc:7b:30:05:95:ad:6f:da:
38:b3:29:55:94:75:1c:f1:b5:5b:e9:90:e7:ba:02:
fe:cd:5d:bd:5e:d9:10:40:bd:86:99:58:f2:e0:08:
f2:8c:09:82:5c:a1:6d:8e:a1:a1:ac:a3:0f:0b:54:
98:e3:e6:ea:8f:4b:72:4f:d4:20:66:39:44:31:cd:
cf:b6:14:a1:d3:a2:ba:90:86:ef:64:2a:db:76:0a:
37:95:ee:87:26:49:be:ca:e8:4f:7a:fc:b4:fd:00:
24:8e:fb:98:ee:14:53:b0:6f:e6:1c:11:40:92:89:
2a:e5:c1:3f:53:df:91:77:90:f4:1e:1f:a4:d2:68:
ba:b6:e6:cb:cb:dc:f7:cd:54:4b:47:ab:1f:fe:77:
68:08:31:83:2c:79:e5:cc:dc:d9:ef:e9:73:3b:7a:
c8:06:31:61:c4:5d:4c:b7:61:8e:33:62:aa:bb:b1:
45:52:64:c0:03:d5:dd:cc:3a:6b:39:9b:2a:0c:da:
13:4c:b9:5e:e3:ff:e1:39:a9:f4:90:19:de:f9:23:
94:35:ae:fb:6a:3d:dd:ea:aa:a7:86:d0:90:11:4d:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:3F:5C:BB:94:89:FF:C9:EC:F2:F0:F0:49:73:B6:2D:35:C3:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd75b960-96a2-4735-8f78-a99099ccb684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:1000::/40
Signature Algorithm: sha256WithRSAEncryption
54:25:19:d1:22:14:77:8c:8d:a9:b1:8d:bd:a5:ad:f0:c9:be:
26:44:d3:35:4c:98:0a:13:c0:ca:22:d1:ea:8a:4f:fd:b1:8f:
dd:4c:cb:58:ab:47:12:89:95:7a:29:7b:5b:0d:ea:92:f7:5d:
ee:33:eb:1e:ec:21:9b:ff:3e:99:45:ac:a6:ab:a3:16:b7:f7:
2b:d0:6f:31:e3:20:d7:1b:43:f5:80:b4:8f:2c:f1:62:ae:d2:
38:92:ae:80:1a:7a:21:16:ea:1c:7f:68:e7:c1:03:4d:8c:57:
65:82:ca:50:52:28:61:df:70:01:a5:bb:41:f9:45:d7:5e:af:
4f:7d:1a:4e:c9:ca:b4:96:ba:97:42:05:30:1d:06:dc:0a:12:
00:7d:67:4a:f6:1b:0f:86:72:50:ba:0f:13:5f:ee:ce:86:49:
cd:08:fe:94:32:3f:1f:6a:24:39:e8:c8:f8:24:1f:25:22:ec:
78:3b:e2:15:e6:9d:84:64:b1:9e:48:8d:22:f4:ab:87:a6:3e:
6c:4c:33:46:92:02:1c:77:5b:1b:ec:fd:0b:b8:1a:cf:a5:f8:
a7:04:ec:a5:c4:60:94:cd:db:56:c6:6a:27:9f:5e:68:c6:55:
06:04:4c:12:c4:f0:ad:1c:96:45:d4:65:6a:d4:b4:14:f9:d8:
08:c9:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:41 2026 by rpki-client