Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
File: 0b022346-638e-4570-8b19-5cf9b4c378c8.roa (raw, json)
Hash identifier: VX26mZ29b3xkk5DvcBfnEvplyVm3dtorxdTsIaV6k78=
Subject key identifier: 25:5E:0D:34:21:D5:5F:76:A9:88:4D:74:19:52:79:81:70:0A:F0:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2959A0AC7D60DD2D73B60E2F0CD90561B2FEC01B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
Signing time: Mon 26 Oct 2026 05:20:42 +0000
ROA not before: Mon 26 Oct 2026 05:20:42 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:59:a0:ac:7d:60:dd:2d:73:b6:0e:2f:0c:d9:05:61:b2:fe:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:42 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9900b2f4561df90ec07cec6c6c144173e34dbdb18fd58a2060d9521266ad7f21, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:9e:8b:88:72:f0:aa:9e:11:a6:c7:ec:63:
a8:eb:ea:a7:d1:b2:4d:f5:86:78:de:c5:31:17:5e:
3e:e2:ae:d4:e0:dd:8b:12:2c:2c:3d:68:e7:0c:ef:
02:e1:16:f3:3b:82:db:e8:38:97:63:30:b4:8d:45:
55:16:7b:14:c1:39:04:0c:f1:30:69:7f:3f:46:51:
3f:e9:b4:9a:6f:50:c2:12:3f:39:8f:69:55:79:52:
01:d5:5c:d0:13:18:6a:85:ef:bd:f6:c9:98:4b:a1:
3d:3d:8f:f6:7d:db:c9:e6:63:4f:ee:6a:0e:56:be:
bc:24:45:7d:cc:1c:fb:5d:45:cc:8d:78:68:01:38:
29:32:59:1d:52:61:e9:6d:70:42:2e:a6:27:b4:a4:
e5:ab:46:76:a2:51:f2:f8:1f:c3:ba:a3:90:da:ec:
62:a4:71:d4:d5:0d:93:76:f9:2a:9d:7a:7a:80:d2:
c3:a5:f6:97:f8:9d:74:4d:07:ff:04:6b:d0:7d:7b:
8d:f9:bc:27:b2:4f:79:c2:6f:b1:c8:73:68:d6:6d:
36:5c:9a:63:05:79:5e:0a:e5:67:c7:7e:1a:73:02:
9c:1c:b2:95:05:a8:a7:25:b6:cb:9f:8f:3f:0c:fa:
d9:73:63:68:c3:f7:c4:94:4d:df:1e:6c:48:e3:45:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:0D:34:21:D5:5F:76:A9:88:4D:74:19:52:79:81:70:0A:F0:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b022346-638e-4570-8b19-5cf9b4c378c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.96.0/21
Signature Algorithm: sha256WithRSAEncryption
07:88:81:32:2f:04:85:5c:3b:17:cd:54:27:22:03:e4:41:b0:
e4:a8:c2:6b:8e:6e:32:fa:57:46:32:db:f5:f1:19:17:f3:c9:
d2:c7:67:fd:0c:ad:d4:a3:ef:5b:d5:f1:f7:8c:79:be:aa:20:
62:2c:73:0b:ce:a8:0a:56:a1:f9:47:89:07:f0:40:f7:8c:b3:
72:ee:7a:64:1f:d0:26:7f:a6:f9:8b:8e:5e:84:7b:67:e8:92:
82:98:3f:49:e2:37:b4:06:bd:d0:89:71:1b:ce:a4:a6:41:f0:
13:a6:22:ff:53:0e:0a:28:9b:66:d8:05:16:59:80:77:0f:41:
ce:e9:77:ec:28:82:3d:1e:41:aa:d1:7d:fd:83:dd:e5:e8:67:
8a:a9:02:3a:1d:8d:cb:8f:3a:85:e0:0d:88:1d:55:1e:77:70:
c1:62:9f:c8:ee:25:9f:61:50:a5:bd:ff:93:ad:27:b1:50:46:
67:84:d7:5c:aa:fd:7e:c4:fd:bc:10:5f:3b:01:ae:25:48:a5:
c9:93:34:e9:46:97:b6:87:f8:c8:e7:82:5e:d7:22:ec:dd:4d:
02:86:7c:50:ae:bc:af:f6:c0:79:1b:07:18:c6:c2:86:b2:49:
e6:ff:5b:70:cd:c2:2b:11:c7:89:97:3f:5e:8e:dc:b7:99:2a:
37:94:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:57 2026 by rpki-client