Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa
File: d8bdec55-5207-4e20-a65b-ee864a734245.roa (raw, json)
Hash identifier: igEAS9D3xXi5bxJMxBxcCxy4r5jxth9YrOZ24cHt300=
Subject key identifier: 8C:A0:12:23:D3:DA:25:2E:56:94:60:0C:A5:CE:C8:BA:F6:DF:5C:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55D5C78821095297B1F5834C3974EE407EF4C8D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa
Signing time: Thu 16 Jul 2026 00:40:27 +0000
ROA not before: Thu 16 Jul 2026 00:40:27 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d5:c7:88:21:09:52:97:b1:f5:83:4c:39:74:ee:40:7e:f4:c8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 16 00:40:27 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=6fcf9787963d7cd9e4a473638f0a5b0468a70de8c1e6a0f844b9c9d00aa8c342, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:e4:9c:dd:44:d7:f6:95:32:1c:cf:35:6f:
d9:bd:ba:ce:92:5f:03:7f:b0:25:84:6d:16:04:3c:
c5:e4:5b:2a:12:b2:f5:a7:04:f7:ea:ad:91:44:59:
61:0f:6d:e5:18:da:51:be:99:1b:59:b3:f9:44:86:
a3:17:e0:4f:d1:a6:91:d8:8e:bb:8b:4c:e9:7b:53:
99:29:aa:43:d8:c1:1f:3b:4a:60:26:3b:4c:1d:13:
9d:26:d9:df:d3:ce:89:a7:8d:68:71:23:80:97:ec:
fc:be:a7:70:87:8d:3c:e1:51:17:10:30:c7:46:8b:
dd:32:72:21:04:e5:88:d6:5c:1e:b3:35:bd:7a:2b:
d4:79:af:02:53:88:e8:ed:1b:bc:03:98:89:70:a0:
7e:4f:98:4a:1d:8d:61:60:bd:e2:7c:e0:f9:e2:7a:
db:73:66:97:aa:a9:48:cc:af:b4:e4:ca:ae:5f:29:
a1:3e:0b:a6:3d:cd:47:05:34:2a:df:5e:7e:54:01:
02:d4:e0:9e:ed:77:e2:f3:aa:6d:fd:dd:11:0f:5f:
12:04:40:31:aa:7a:16:5a:92:2f:1f:77:5a:52:97:
0d:b9:04:95:8f:61:00:20:8f:f7:b3:4d:ef:5e:ca:
c8:cb:10:22:46:58:17:b7:6b:21:fc:d3:ba:dc:b7:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:12:23:D3:DA:25:2E:56:94:60:0C:A5:CE:C8:BA:F6:DF:5C:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8080::/46
Signature Algorithm: sha256WithRSAEncryption
c7:ef:a7:37:42:7d:39:37:60:cd:9d:01:b1:48:11:99:28:67:
ec:1a:87:f3:e8:fd:21:87:36:cd:44:45:7a:94:35:9d:d9:8d:
05:90:b0:6f:86:c7:19:0b:d0:9f:63:3b:54:ce:07:32:71:4f:
9c:23:21:83:33:43:a6:b8:2b:d7:46:97:85:8b:ef:1b:44:d2:
a3:3f:25:99:db:a0:a6:7e:29:9f:ff:bf:13:69:05:03:5c:0d:
25:59:14:39:31:d8:96:46:9d:55:c8:f4:5e:69:03:71:56:bf:
f2:d7:9a:a0:8f:41:db:f3:3e:64:07:12:eb:d3:ff:a0:b2:fd:
7e:34:51:c7:2b:62:48:3c:dc:f5:09:19:81:d8:3f:8a:7a:57:
00:ff:a2:14:ca:f1:ae:c5:41:f0:5b:9d:01:57:7d:0d:90:d7:
32:46:7d:b3:81:1b:d1:9e:a7:90:0b:0a:e6:bb:4c:38:89:b2:
5a:99:77:e6:b0:21:b1:b0:b8:0b:a6:c1:66:d9:f8:bc:0b:97:
e5:50:c0:77:18:64:bf:8e:e2:cc:7f:b7:74:45:e1:ba:10:12:
55:de:94:83:44:0a:70:56:14:d0:fc:3c:44:38:b0:e6:25:b9:
23:ac:52:ec:82:9d:d0:b4:0e:5d:23:ab:ad:31:26:fc:9c:06:
0e:b1:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:07:22 2026 by rpki-client