Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
File: 04593af5-4653-4d6a-8bb5-65270db84a4f.roa (raw, json)
Hash identifier: fKwD5n1JrKxh2MF5s0mUxklvMFg8YtzquofrVHrFU1c=
Subject key identifier: D4:D6:C8:89:D4:77:06:AC:8F:36:A2:D2:5D:8B:C9:55:22:4E:AE:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A5C31D49F4153E172EA09D6031F53FF924B7DC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
Signing time: Mon 26 Oct 2026 05:20:59 +0000
ROA not before: Mon 26 Oct 2026 05:20:59 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02d::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5c:31:d4:9f:41:53:e1:72:ea:09:d6:03:1f:53:ff:92:4b:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:59 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9d1178867bd44586e883ba43e63384897e3f494a6512422a0310fbe55fffb1fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:33:37:1c:7f:93:85:26:3c:70:1f:e1:f8:
4c:b3:2f:3f:a1:3f:5f:34:9d:f7:00:e8:99:01:64:
d3:17:b8:9a:6d:51:2a:1a:5c:4e:8f:4f:1b:16:fb:
6e:5e:4c:6d:3b:6a:b7:01:7d:33:03:b4:ad:15:80:
7a:99:a2:3a:a2:f3:e9:b8:ca:ed:4f:cc:e7:95:86:
4b:93:67:b7:fa:75:3e:a8:69:db:a8:c3:cc:d8:1a:
36:26:fe:d8:75:05:0c:f0:f5:83:f9:46:a0:40:5d:
b5:07:a7:5c:b6:22:80:b2:65:b6:c1:9d:47:10:70:
cd:ea:88:0f:87:92:de:84:1f:5f:a9:67:fa:c8:e8:
d3:d5:3b:ed:70:42:31:6d:c3:4c:21:95:c3:49:06:
ce:3a:93:fa:ec:18:bd:f7:7c:e2:a2:23:27:20:6b:
ca:84:6f:69:60:b7:f5:df:c1:7c:a0:35:b3:57:c8:
4c:92:ec:58:86:e4:ae:3d:62:2e:bd:57:ae:7b:62:
fb:27:39:64:17:80:63:1a:46:dc:86:b1:6c:25:9e:
f7:0e:46:cd:4c:06:05:31:29:ea:5c:93:38:79:f7:
db:fc:20:3f:c3:c5:b9:ac:58:ba:a8:1c:88:f5:00:
ad:3f:15:e3:79:24:85:1b:b0:2b:a8:df:cb:3d:56:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:C8:89:D4:77:06:AC:8F:36:A2:D2:5D:8B:C9:55:22:4E:AE:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02d::/36
Signature Algorithm: sha256WithRSAEncryption
22:7b:07:aa:d1:0c:46:8c:14:60:e5:36:56:43:5f:92:03:25:
10:78:30:f2:c7:7d:2c:0a:60:9d:7f:8d:88:c6:9f:97:1d:22:
a3:c2:69:01:c9:67:e4:76:e7:3f:65:7e:e5:a4:f7:47:08:2b:
c1:09:1a:26:a6:24:8e:25:de:f5:9b:6f:9a:e0:2e:32:b4:88:
e0:9b:07:fd:98:4f:33:76:a3:55:e1:16:04:36:ee:44:2b:cb:
13:e5:ec:32:b8:ab:32:b7:ff:01:28:f4:3f:42:1c:75:3f:b1:
1c:e5:14:df:66:fc:2e:6d:b3:af:5e:c9:ed:da:a3:10:b7:4a:
ab:6e:2a:d5:65:72:44:48:7a:68:9b:4c:d1:50:90:ae:fb:23:
01:15:64:08:cb:56:fe:69:6a:6d:2d:39:ae:bc:05:50:53:23:
58:3c:f5:ee:35:1b:82:e0:1f:df:cc:57:09:41:84:b9:ec:25:
5d:fc:03:74:e6:93:0f:cb:98:dd:ba:66:b5:d2:cd:4a:f9:4d:
b4:98:eb:d4:1a:1d:a7:31:f2:03:49:0e:9f:f6:99:c9:0d:2a:
6b:1a:65:46:08:97:99:b8:03:31:0d:6d:73:f2:54:6c:82:f0:
4c:d1:e3:e2:48:31:59:6d:a6:2e:d3:45:a6:4b:28:7a:45:a5:
5f:cb:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:44 2026 by rpki-client