Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa
File: ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa (raw, json)
Hash identifier: +Qn1bZeCZ2BrYTWYi8yKNiwKXUFDMQScnMw18gabB94=
Subject key identifier: 9A:E3:FD:96:EC:73:96:3E:11:68:5D:5B:2D:FC:BA:F8:82:11:72:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B20C978CCA40620B5BCF6E728A3751FC1E1DCA2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa
Signing time: Thu 23 Jul 2026 15:20:53 +0000
ROA not before: Thu 23 Jul 2026 15:20:53 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:20:c9:78:cc:a4:06:20:b5:bc:f6:e7:28:a3:75:1f:c1:e1:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:53 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=319df4eef30b453aef3891ead0b4dbf003a351c5d374c953b281a42272ad0878, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b3:26:8c:54:04:0b:86:19:d1:0c:48:44:0c:
1c:7e:70:88:af:7e:9a:70:a6:b8:85:02:c0:18:29:
21:2a:12:68:5c:ad:de:fb:2a:c7:f9:f6:3d:f7:09:
53:50:27:7c:c0:41:c2:e1:fe:9f:d6:13:b3:a3:b5:
1e:94:38:90:2f:2c:ed:26:80:05:b2:89:29:59:29:
a0:55:ec:6f:41:ed:5b:35:1f:3f:2a:41:84:1e:bd:
2a:4a:5c:28:cc:b2:17:18:95:36:79:2f:95:69:62:
60:e1:0f:44:f6:ad:64:44:97:5c:c7:c0:d6:87:e5:
b9:f4:09:01:8f:5b:b4:13:1e:c1:7a:a6:66:cc:06:
e9:c8:ee:6f:2c:b2:bb:1c:5f:c6:43:1b:cb:41:36:
67:a5:2c:8f:bc:13:78:c4:4d:6a:c7:05:ef:d7:c4:
0a:f6:8e:b3:4e:71:c1:29:c6:a1:9a:cd:92:5a:4e:
c3:c5:17:17:ba:00:99:6e:7b:d1:f4:4f:4b:c1:56:
87:db:60:ea:b8:aa:93:2e:27:bb:4a:32:09:ce:0f:
ca:ab:89:f4:21:20:59:68:8c:5f:10:01:47:90:65:
89:40:07:65:2e:f0:8b:d1:6d:a5:58:60:8d:28:48:
20:20:df:a2:e7:0b:c6:10:bd:27:dd:4d:2b:26:ab:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:FD:96:EC:73:96:3E:11:68:5D:5B:2D:FC:BA:F8:82:11:72:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ede5200e-55c8-4a89-9ccf-cf465c6ddb50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b6:58:35:3e:b8:23:9f:4f:d1:b1:60:31:31:09:02:ec:9e:49:
a5:bc:4d:ac:53:05:59:c8:e6:67:18:1e:73:5c:e7:95:ea:0c:
c2:fe:d3:73:92:72:a7:72:49:f7:25:95:bf:44:4b:0e:3f:52:
35:88:3d:ae:5d:dc:a6:3f:fa:4c:01:e4:d1:bc:06:01:49:21:
80:f0:f6:46:56:24:5a:61:fd:00:c2:36:00:1c:4c:7e:10:b3:
a3:be:a1:40:c5:18:af:7a:c2:dd:24:fc:c0:80:35:44:ee:df:
3d:27:9b:be:0b:d1:d6:be:c4:db:fa:49:b7:42:dd:e2:8f:7d:
7b:33:c7:03:cf:b8:dd:c6:55:45:a6:20:f3:ff:2b:a4:41:52:
84:2c:b2:81:79:e4:81:60:6f:20:3a:29:c2:f3:93:83:81:f2:
f5:8e:46:08:4f:c3:ed:dc:b0:54:93:eb:51:3b:db:5a:42:64:
96:39:93:b0:9d:c2:dc:87:cd:74:b6:35:20:77:56:ed:16:43:
0e:12:31:7d:d3:fd:d6:3c:13:51:53:53:68:65:7c:3c:7f:02:
49:d5:11:6e:33:d0:95:f2:f7:19:40:aa:31:b9:75:82:c8:7d:
ff:7e:5d:41:ca:e9:ef:ca:84:98:f0:9e:13:45:4e:17:81:8f:
da:ec:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:07:32 2026 by rpki-client