Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca11d15-d37b-4319-9b90-152e667f85ef.roa
File: 0ca11d15-d37b-4319-9b90-152e667f85ef.roa (raw, json)
Hash identifier: WvjwQ9wOvU2SDInahWXGfLUl+lMv3PQMEl3ZHc3N6/w=
Subject key identifier: FC:B3:A5:69:95:BB:CD:A9:E3:68:10:A7:73:60:5A:EF:9C:D9:87:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10E45771E20BC81E166594B45887CC9708B5BBFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca11d15-d37b-4319-9b90-152e667f85ef.roa
Signing time: Sun 04 Oct 2026 00:30:17 +0000
ROA not before: Sun 04 Oct 2026 00:30:17 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:57:71:e2:0b:c8:1e:16:65:94:b4:58:87:cc:97:08:b5:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:17 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=219128d8cde8b97560b2586fd1f51dbffe346e186d69f507c7fc23f60d322a2c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:5f:5b:93:4d:a0:cf:d1:82:6f:f4:c2:0c:
0c:1d:ad:6e:dd:58:7a:97:2e:b4:ca:27:c2:ce:13:
45:e6:02:2c:e9:41:42:bc:84:04:62:bb:cb:58:aa:
73:9f:6c:6e:e2:ab:c1:59:ba:a9:aa:fe:a9:5e:b5:
d0:00:ce:2a:dd:0e:4d:6f:7c:2e:40:3a:32:f1:a0:
f4:b9:15:7c:3f:51:d9:e4:8c:6a:a8:f7:39:48:b1:
14:51:7c:95:98:41:45:3f:47:37:4a:fa:27:18:a7:
3f:c7:07:6a:e0:50:d0:8c:1d:46:c6:6b:7a:fa:3a:
dd:d0:b7:68:e8:fe:8f:6a:29:84:f7:aa:51:a7:66:
b3:dc:f5:27:3f:0e:31:14:2c:77:c9:94:31:06:f0:
03:d1:b6:2e:66:68:30:6a:b8:25:f0:ae:32:df:41:
d7:36:9e:c9:ae:f1:7b:e7:c4:17:9a:ff:65:b7:a8:
14:48:f5:4a:11:26:a5:02:a1:c8:3d:85:a2:ab:fe:
e7:64:7d:2a:94:9d:45:54:c5:e6:69:ee:2b:89:bf:
dc:b4:54:45:65:60:5e:77:49:2e:51:a5:33:d8:d4:
5e:28:94:5d:41:0a:6a:8d:cf:51:dc:9a:34:c6:6d:
a5:99:99:54:19:af:97:10:e0:2f:15:de:e0:df:61:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:A5:69:95:BB:CD:A9:E3:68:10:A7:73:60:5A:EF:9C:D9:87:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca11d15-d37b-4319-9b90-152e667f85ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:6000::/40
Signature Algorithm: sha256WithRSAEncryption
be:9f:5a:19:04:22:09:72:0e:fc:d1:5d:62:e9:13:14:93:6c:
bc:b9:b1:e2:9d:8c:f6:51:04:8d:a3:8f:f1:02:85:32:39:d3:
19:20:4e:aa:13:f8:25:49:93:e9:37:cc:d6:c4:10:f6:c8:ce:
7d:e9:93:12:81:5f:2c:7a:65:10:47:f4:aa:87:5c:af:a6:d7:
fa:ea:b1:71:34:a3:4f:7b:3c:f2:84:87:fa:f5:45:34:87:35:
5d:09:a2:0d:67:8f:96:c7:39:4a:5e:7f:2e:90:7f:30:0b:97:
eb:72:76:2b:6f:a6:ba:42:e9:a1:70:d1:e2:a0:eb:3a:8a:e5:
af:0c:e9:5a:b6:1f:fc:79:2e:6a:5f:64:cf:aa:f9:f5:6c:93:
57:97:57:af:89:5e:1d:35:2d:11:a0:f5:de:28:c9:a7:d5:cd:
28:4a:53:4b:c4:3f:df:e2:cf:d9:b0:80:4a:6c:42:4a:c4:d4:
af:00:0a:9d:67:26:88:85:ea:89:b5:39:8e:7e:71:7b:dd:67:
f3:69:6f:7e:2c:f7:12:ec:d8:18:d9:17:00:cb:f1:c0:c0:90:
fa:dc:45:a4:94:37:75:9e:da:53:e7:88:d4:7d:3e:a8:08:d6:
7d:43:26:a4:40:61:6a:79:98:0e:bb:01:ca:a9:07:33:6d:d2:
b4:08:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 15:27:47 2026 by rpki-client