Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
File: 002c315b-3412-464e-b865-645f657f136d.roa (raw, json)
Hash identifier: qW7JHLlaYQPh/UNnLJH2ooHCWVoN1eu4MlBTq0Y2hb0=
Subject key identifier: B9:EE:AC:8A:2F:E2:3C:6A:BA:6F:C5:79:B8:2F:14:4A:6A:0F:77:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08E7D421715ACEAD6F780D2E74B04952E14D9610
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
Signing time: Sun 18 Oct 2026 01:20:26 +0000
ROA not before: Sun 18 Oct 2026 01:20:26 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e7:d4:21:71:5a:ce:ad:6f:78:0d:2e:74:b0:49:52:e1:4d:96:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:26 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=34117fcd1234daf51d4cad56b0c095fbe0fbd42e18eb06a4abb0d9215bd7b3d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:a4:33:23:11:89:80:34:18:cf:3e:3f:b1:
84:43:b0:d6:76:3e:89:0b:86:cf:1c:c1:94:49:4d:
f5:e0:aa:d0:b6:96:7f:3e:92:77:a0:50:82:7f:5f:
f5:3f:6c:6b:99:a6:96:79:ce:16:3e:31:32:15:71:
77:70:19:d5:d9:31:02:c9:70:ea:f4:e3:aa:6e:3f:
94:d2:91:ac:ff:c5:5f:bf:72:fb:3e:dd:d2:77:80:
12:f8:ac:80:c7:8a:38:ff:e2:96:eb:69:38:a8:f9:
ad:37:5f:5f:fc:62:1e:45:21:94:4d:f1:4f:d6:ac:
98:1d:1f:75:c0:c3:a8:fd:4c:a5:18:8c:62:54:a3:
c3:ed:14:d4:b8:83:49:f9:db:6b:ef:24:8a:6e:74:
ce:c7:d3:40:03:86:40:ab:d3:32:11:ad:c5:04:26:
62:1e:ae:7c:95:09:36:1e:a1:66:47:06:6a:93:fa:
b7:73:2e:d0:3e:72:26:7e:76:06:4a:06:88:dc:9c:
11:54:d1:f3:d2:f9:10:51:6e:b9:2e:0a:44:3f:ef:
6c:6d:c5:11:bf:22:88:1b:8c:98:13:24:2e:09:cd:
7a:a0:78:90:04:01:fe:ae:38:f8:d8:f3:a7:7b:04:
2f:b6:e3:73:99:a1:aa:ab:5b:d0:95:2b:8e:e3:60:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:AC:8A:2F:E2:3C:6A:BA:6F:C5:79:B8:2F:14:4A:6A:0F:77:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079::/32
Signature Algorithm: sha256WithRSAEncryption
c4:4a:63:70:d0:0f:d5:75:17:db:1b:1b:66:0b:e8:97:e0:f7:
13:f5:ca:4e:ba:bc:6d:84:56:0b:53:a6:a3:b0:b0:46:aa:57:
ff:88:c7:63:ce:df:11:c7:83:b6:84:76:41:14:eb:c3:05:80:
cb:ba:2f:10:06:43:7f:52:ea:71:19:3e:44:ac:d4:f8:74:57:
2c:89:6b:0e:a3:c0:c8:c3:88:79:96:c4:57:98:eb:17:ed:70:
1b:61:1d:1e:69:c3:a4:bf:c3:43:1f:d0:2d:75:72:e9:c6:31:
6a:f7:06:5c:0d:83:bd:75:ec:a0:8f:a5:39:01:37:54:1b:a8:
49:e8:c9:33:3a:29:c7:8f:ac:99:11:be:f4:d2:db:39:99:08:
61:59:60:e4:85:2d:1e:dd:14:38:00:de:b4:a1:1e:f3:f4:cc:
e5:c5:55:b1:c4:6c:2b:f1:45:b4:40:96:67:f1:17:59:af:13:
10:57:57:a2:c7:18:cb:1b:48:67:d1:cc:3e:26:34:8a:9d:eb:
22:d4:48:6a:5b:bd:90:43:a2:3f:72:f8:0d:f3:44:31:0e:fd:
5c:5e:17:8e:91:a4:5d:bb:9c:34:19:89:8f:60:b8:5f:89:53:
26:d5:0d:4c:26:21:f8:e0:6d:03:73:46:f3:58:7a:0e:b6:55:
05:e7:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:47 2026 by rpki-client