Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e8f7de4-db4c-48d4-b38b-387a8380d716.roa
File: 0e8f7de4-db4c-48d4-b38b-387a8380d716.roa (raw, json)
Hash identifier: RoRKzu7iq2TM1LPowIEQLfabRYSGWC1pTMJyte0/GiE=
Subject key identifier: B1:35:DC:2C:4B:2F:F5:87:25:F0:F5:87:B5:04:4A:E6:D4:44:42:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70F3807E51FFA9087693E4E2A71BCA0E14A230E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e8f7de4-db4c-48d4-b38b-387a8380d716.roa
Signing time: Fri 09 Oct 2026 01:20:04 +0000
ROA not before: Fri 09 Oct 2026 01:20:04 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f3:80:7e:51:ff:a9:08:76:93:e4:e2:a7:1b:ca:0e:14:a2:30:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:04 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=18cd1fa3ea93227ab5cc3085e5a425c764b4c23d51eb1905433c8fa2433292ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:cb:14:f1:0d:3a:46:16:8f:5f:4d:65:fe:
02:cb:f7:62:9b:ea:d3:7e:f4:65:f9:16:88:96:35:
0b:bb:87:c2:14:ae:a5:3c:b8:f4:72:3c:15:de:e2:
e8:43:8b:45:70:f7:41:de:d7:41:ba:4c:7b:aa:43:
53:aa:80:f9:0c:1b:35:4f:38:80:5f:06:6e:10:78:
cf:bf:13:e2:3b:9d:9f:80:c6:21:12:02:3b:ad:e2:
13:6a:47:b8:58:64:a8:66:98:d4:7a:a6:f5:dd:98:
04:be:df:64:d5:76:aa:c2:70:2e:ea:c6:14:5c:1d:
52:af:3e:0f:10:57:7d:19:41:a2:a8:4a:d8:f0:d3:
b5:dd:52:ca:30:00:04:6b:fb:56:85:a1:b7:3c:63:
7a:1f:79:e3:4b:d3:a7:a8:16:1e:99:60:3a:95:88:
c2:37:5b:2c:1a:6e:78:be:d1:8b:f5:59:6c:7d:bf:
1c:55:31:ed:32:e6:4b:f1:c2:79:1c:c8:3c:d2:ae:
6d:36:d1:ba:69:ee:61:83:d0:ba:73:7f:76:e8:d6:
e2:6a:36:da:97:5f:d7:a6:64:af:f9:50:85:c1:1d:
a4:e1:ea:1e:ef:6a:eb:49:ef:b8:00:75:90:10:67:
3f:b6:14:e7:db:77:52:7a:e8:b1:1f:fa:7c:57:90:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:35:DC:2C:4B:2F:F5:87:25:F0:F5:87:B5:04:4A:E6:D4:44:42:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e8f7de4-db4c-48d4-b38b-387a8380d716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
c6:e9:35:e9:ed:1a:25:13:2b:ac:14:78:66:56:09:68:8a:a1:
4e:95:64:35:d4:6c:e1:46:0c:a5:39:a3:85:46:18:03:22:6f:
9d:6d:12:f0:55:46:cd:d6:c3:aa:90:f8:c0:b4:73:35:a8:61:
db:ff:54:a1:0a:72:96:34:da:54:ea:7c:65:dc:13:60:65:8d:
7c:d2:62:f5:01:2a:5f:8a:aa:65:c9:d3:ec:46:09:8e:e3:73:
7e:a6:25:96:ac:79:b6:8f:6e:58:48:49:b8:86:94:de:4f:37:
4c:61:7c:b2:d2:59:77:8d:8d:93:97:8f:8f:c4:42:f0:dc:6b:
36:86:1f:b7:35:58:3c:4d:21:60:61:f5:64:25:0f:37:55:af:
d8:4d:ff:9e:88:8f:37:e5:3d:73:47:05:2c:1d:b6:87:b0:2d:
78:76:51:95:66:27:8d:53:b6:70:89:da:2e:07:45:54:b3:af:
5d:94:a4:3c:7f:bb:01:72:79:eb:4b:71:d6:9f:59:5f:06:64:
fd:01:87:86:70:89:61:79:1e:c5:30:03:49:32:bf:9b:da:ad:
48:55:15:46:3b:c1:d8:0d:2d:83:9a:71:a7:1e:33:2f:26:89:
ba:ae:e2:07:f8:dd:81:5d:b7:65:7f:9c:ab:e0:c9:e4:a7:32:
98:78:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:10 2026 by rpki-client