Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e13f54c5-7648-40e1-af1b-03435f49f445.roa
File: e13f54c5-7648-40e1-af1b-03435f49f445.roa (raw, json)
Hash identifier: r9frEb4d08HB4mL8cXU9HUim7+Rxx9KaoAVmo5N67JM=
Subject key identifier: AA:5E:C3:BA:D4:97:3B:76:BB:4B:9D:77:20:80:2E:8D:27:CD:D7:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2671532DE80DD07DD9EEDD187CED60560FD0C017
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e13f54c5-7648-40e1-af1b-03435f49f445.roa
Signing time: Tue 21 Jul 2026 01:30:24 +0000
ROA not before: Tue 21 Jul 2026 01:30:24 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:71:53:2d:e8:0d:d0:7d:d9:ee:dd:18:7c:ed:60:56:0f:d0:c0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 01:30:24 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=ff28d3b639183a9eeb0c8da987989d79bd9555ee0e6f479bbc61685f71fe8edd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:9f:c7:63:a4:ab:8e:4f:87:e2:71:84:26:
6e:43:ab:13:7b:20:a6:b6:6f:eb:30:28:d3:50:ae:
5a:91:22:25:7b:dd:65:1b:bc:5b:25:06:aa:ab:94:
d5:45:8d:e0:14:94:2f:be:a8:39:98:3b:fa:33:fa:
7e:a1:d5:bd:be:7c:2b:aa:24:c1:f5:a6:b4:10:50:
b9:6a:8b:b1:27:3c:d1:2e:6a:67:24:45:a7:6a:66:
68:c1:84:9c:ec:a8:bd:2f:68:7c:fd:5a:00:56:20:
a9:dd:5c:e7:cd:a9:d6:d4:1f:cf:3c:90:08:63:0e:
00:67:12:b8:7e:f6:86:2c:07:d7:d6:36:98:2c:5c:
6e:10:41:67:4e:fe:ad:bc:a6:9c:a3:94:b8:25:25:
9d:1d:3e:a7:02:86:4c:40:b1:db:f3:94:a2:ce:fa:
e2:3b:11:e5:08:f0:55:e7:b8:c7:ba:55:82:d0:2d:
d8:a0:6e:dd:7c:db:f4:ab:62:bc:72:1e:7a:88:3e:
9c:4e:d4:d4:8b:9b:f7:44:9c:05:3f:c9:39:99:65:
26:02:96:58:55:5b:e0:08:35:fb:b2:38:05:83:8a:
64:75:57:40:be:76:b1:56:ac:ba:99:ea:24:e5:93:
9d:42:cf:94:d9:76:d0:82:d0:f7:e0:64:30:31:82:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:C3:BA:D4:97:3B:76:BB:4B:9D:77:20:80:2E:8D:27:CD:D7:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e13f54c5-7648-40e1-af1b-03435f49f445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:1000::/40
Signature Algorithm: sha256WithRSAEncryption
5b:bd:11:3f:2a:27:c3:8f:92:6f:94:cb:17:e5:56:1a:f1:60:
1d:fb:be:32:14:ef:c4:05:10:4c:fa:c6:7c:ce:d7:34:4d:3d:
9d:70:c3:c4:00:5b:9a:34:5f:b0:aa:25:18:a0:97:96:31:9d:
8e:62:d1:e0:68:d5:96:09:82:39:93:f9:62:fa:36:5b:92:5e:
e3:df:b4:1a:a7:46:af:38:25:16:80:ce:6d:2a:8a:9c:e5:71:
c0:19:16:52:12:69:af:18:cb:18:92:ed:8c:b2:5a:82:93:4f:
a4:1d:be:45:06:ad:67:bc:8e:f5:9c:6c:69:23:83:6f:fd:0e:
68:21:c5:e3:be:f2:f7:b1:3a:8f:df:75:ed:48:46:fb:cb:36:
9a:7b:cc:43:05:b7:ec:35:4a:22:80:0f:7d:f8:ec:e2:40:30:
06:af:dc:ca:09:1a:bf:ff:cf:b0:08:ce:3d:c6:07:0d:97:99:
af:a0:14:76:df:56:76:56:da:27:0c:4b:df:4b:e3:a3:11:a0:
bd:d0:13:dd:13:05:3c:82:fc:56:ae:ed:cd:22:4f:85:28:81:
5f:32:19:59:8a:78:1f:33:49:a9:cc:ba:77:03:64:dc:b2:a8:
b7:c4:f5:f3:ab:d2:90:41:cf:00:6f:a3:31:bb:90:e9:2a:07:
7f:17:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:52 2026 by rpki-client