Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
File: 07c3de07-a359-4dee-93cb-30a6dab1215d.roa (raw, json)
Hash identifier: +d+dgsZghRElXjOwS4o7Z0jc5ply+n26mWKIRU9IWDk=
Subject key identifier: FD:11:7C:96:23:4B:D5:81:AC:6B:D0:1F:A7:F1:36:48:04:E1:D6:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5425FB326AAB2B6406607DE281768F573F0AA279
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
Signing time: Sun 11 Oct 2026 15:20:22 +0000
ROA not before: Sun 11 Oct 2026 15:20:22 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:25:fb:32:6a:ab:2b:64:06:60:7d:e2:81:76:8f:57:3f:0a:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:22 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=b323008750abfce2f9c142f25443b6f9fa6756cd66ffdbe41629e673cfeb7d82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:93:54:80:25:62:56:d7:c1:60:aa:55:06:
1e:aa:b5:cf:ce:36:24:f8:95:f8:eb:3f:4c:54:11:
b9:4e:ed:79:c5:ae:cf:59:6d:67:d9:20:42:00:65:
cf:7b:7b:f5:e4:6a:dd:83:d6:d9:54:25:3a:8d:2e:
e1:10:6e:de:3c:23:57:1f:da:ff:33:7d:31:52:86:
ff:2f:fd:c2:c9:28:e5:fc:54:87:fb:48:8f:1c:35:
b3:6a:d9:7f:9d:2b:3b:84:d4:25:30:b2:53:bf:1a:
ae:ab:97:1d:99:19:84:1c:96:fc:21:8e:a1:7e:f6:
ee:3e:82:8a:24:91:ac:66:d1:5e:cc:e1:c2:ee:08:
58:76:60:3d:24:05:2a:92:ec:75:60:8d:10:a4:7c:
d8:0c:17:e9:27:ae:3b:27:cd:70:a0:c0:69:8a:46:
c4:8e:fc:ca:46:e5:c5:4c:1b:3a:5e:0b:07:fd:e3:
06:ab:fd:8d:8f:e0:3e:1e:ea:df:26:f2:71:0d:e2:
d4:36:44:84:f0:b0:df:e9:2c:45:80:72:51:20:1a:
c5:ce:71:d5:97:a0:6f:e8:a4:f1:44:60:8e:a9:75:
d6:b3:20:9d:00:2a:08:f5:82:ea:c3:8c:1f:6b:be:
3e:ce:0d:a2:2a:1b:ea:07:41:4b:c7:d9:23:2d:d2:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:11:7C:96:23:4B:D5:81:AC:6B:D0:1F:A7:F1:36:48:04:E1:D6:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
83:ae:23:9b:89:c0:4a:e5:eb:30:94:58:43:62:4f:d6:95:96:
09:75:ed:28:cd:d8:ea:bb:80:34:5c:aa:1d:3f:03:00:d0:6e:
21:b1:05:94:9d:b0:8c:10:95:d0:96:fe:66:0b:91:f8:80:db:
46:03:e5:e7:74:bd:92:c7:79:17:08:47:4d:56:82:45:a5:80:
17:c8:7e:37:11:0a:ee:85:af:54:06:c1:14:64:a1:11:e1:fa:
91:05:db:9a:c3:48:ad:2d:ec:8d:9d:34:a4:fa:57:da:8a:4a:
90:d0:8c:8b:3b:82:6d:20:7e:e9:28:33:61:fe:0a:c6:b2:72:
9d:7b:70:14:c5:6b:1e:9f:71:f5:9c:34:91:2e:84:e0:96:5f:
92:73:2a:d1:12:96:52:34:5f:b5:61:fb:bb:5c:6c:2b:9d:3c:
59:be:06:c5:f6:a3:0c:51:18:23:99:04:d1:59:0d:d4:12:65:
54:ac:58:66:d8:d3:5c:c4:73:b0:c3:bf:14:09:9d:63:c0:35:
7d:a3:9b:fd:49:5f:36:a8:f3:49:23:e3:b3:49:e2:0e:9e:7f:
77:01:fb:5e:cd:40:10:f9:fb:1d:4f:cb:f6:56:a6:6d:49:e8:
3d:c4:04:3d:51:d1:f5:47:7c:fb:03:5b:a4:32:6d:23:a8:67:
b2:9f:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:48 2026 by rpki-client