Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
File: 03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa (raw, json)
Hash identifier: ib08GrZ0RuGy1GHLaiSr3GsbfJAhsHU9wwIhY1g97BE=
Subject key identifier: AD:5F:50:50:B4:3F:1C:F7:BC:C6:87:44:5E:D7:4E:C4:36:E9:90:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A4A2F4885C1C1ED965B17D5AB17BE585DAFF415
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
Signing time: Mon 26 Oct 2026 05:20:43 +0000
ROA not before: Mon 26 Oct 2026 05:20:43 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4a:2f:48:85:c1:c1:ed:96:5b:17:d5:ab:17:be:58:5d:af:f4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:43 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=788b0c57b1e50bde9a8eb166f1285f15cae57f816bb99fe6b25d49c13b5f8dd3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:11:5d:22:54:f5:11:1c:09:f1:c3:77:0d:
2a:56:e0:0b:2c:37:36:80:e6:fa:d2:ba:a0:2d:58:
5d:db:73:d9:ac:06:49:48:2e:06:48:6d:9c:36:bd:
a4:ab:ea:c4:ba:4a:8a:46:b1:9b:da:09:48:38:8a:
19:ed:fa:d3:d2:0c:f8:a8:6e:c9:c5:74:f3:4c:e9:
6c:ae:dc:b7:fb:38:f4:eb:d6:60:42:b6:b0:a0:4b:
6c:25:d8:bf:83:e3:40:9d:19:fa:c7:d5:03:7d:3e:
24:e9:ae:ff:b7:e9:2d:13:f2:5f:d2:69:ef:69:70:
7a:d4:27:42:c6:d5:8a:f4:83:f1:d5:57:19:c0:f2:
1c:cf:60:33:67:48:ce:f4:0d:fd:1b:3c:bd:4c:34:
e9:5c:34:c8:ec:ed:4a:95:b2:93:d1:d0:94:41:59:
a2:db:0a:5d:89:40:2d:52:8e:1d:03:41:a5:0c:67:
40:31:7e:5e:56:38:de:ca:2a:77:59:93:2b:ba:04:
61:9c:1e:8f:1d:85:f8:19:a0:bd:06:02:5e:b8:8b:
cd:53:b5:98:3a:88:a7:9f:f3:6b:b6:2c:67:26:0a:
f4:05:2c:32:1b:35:aa:63:b4:ba:19:09:d0:2d:c3:
d8:b1:b4:17:15:e2:2c:bf:29:94:79:9a:ea:e3:84:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:50:50:B4:3F:1C:F7:BC:C6:87:44:5E:D7:4E:C4:36:E9:90:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8040::/48
Signature Algorithm: sha256WithRSAEncryption
71:6a:55:ff:f1:e0:6b:79:c8:fa:b6:a1:cf:e0:85:53:b0:9d:
0d:4a:25:36:49:ea:80:b4:b6:f0:6c:1b:e5:57:2a:21:2f:2e:
19:1f:5c:4e:e1:1d:6f:20:59:9e:34:e9:1f:10:95:02:8b:de:
48:9d:a8:dc:a6:2e:5a:d5:8d:54:6d:61:34:c1:2e:af:17:4b:
16:d3:b1:eb:dd:31:a1:0b:83:8c:ef:6a:b8:3c:ec:46:d8:d2:
7c:9f:62:00:66:e3:06:f7:15:a6:8c:c8:b3:76:5e:d7:22:1f:
dc:04:c6:fb:6c:24:a4:7c:a8:5e:0d:8c:47:da:58:b1:09:01:
b1:82:30:5d:ff:d0:2e:b2:1b:fb:a8:14:70:a6:9f:be:73:eb:
ee:00:8e:1b:04:08:39:1a:a7:e6:ed:f8:ba:f0:91:8c:36:b5:
a3:c3:ae:a8:3c:64:22:72:b3:72:93:9a:65:ea:b5:08:87:6b:
2c:b7:a6:3e:36:61:39:26:50:50:88:df:6e:b2:41:c7:10:4a:
46:e3:95:08:7c:45:87:c1:f6:30:32:d4:b2:af:75:1d:f3:bf:
ca:de:7d:cd:d0:fc:8a:a8:1e:03:61:bd:f4:38:dc:a5:b1:cb:
fc:b5:db:d9:ab:95:e6:b5:03:1d:7d:43:40:bd:74:5a:ae:bd:
ac:33:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:37 2026 by rpki-client