Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
File: 119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json)
Hash identifier: J7vHrZDC7g0K10BjpSIb9OKEMfv0yUmZK7HQX28rZfI=
Subject key identifier: 7E:1A:11:42:E2:84:D7:7F:86:1B:2B:33:5F:F7:8E:2E:90:99:04:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50B1EC4E7A562EF0BD8FF36D9F86FFE90295FFC5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
Signing time: Sun 11 Oct 2026 15:20:19 +0000
ROA not before: Sun 11 Oct 2026 15:20:19 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b1:ec:4e:7a:56:2e:f0:bd:8f:f3:6d:9f:86:ff:e9:02:95:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:19 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=56e847e1a8e932bcd8641cb20dbdea6a9ab4fd010fea0da6dd37f7e2263ee63f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:ef:00:d5:e6:1b:a0:b1:f6:cc:d7:d7:88:
17:14:55:4d:18:d9:f6:93:1a:fd:b3:51:e0:c5:b4:
be:16:30:d1:fb:57:e9:b9:85:10:ce:3e:90:c1:97:
9e:2a:63:e4:ea:65:37:da:bd:28:51:14:74:ad:e1:
ee:20:80:1c:d8:cf:69:1e:0f:4f:1b:e6:d6:4b:a5:
39:d5:9c:fe:21:93:b0:a7:7e:a3:fe:20:66:89:df:
ca:e3:90:bb:ef:15:0a:0e:e5:e5:e6:ee:e4:26:4c:
61:4e:0b:e5:2d:2e:53:83:e0:bc:e9:82:5f:17:7c:
f9:28:f6:4d:d4:1c:3f:a7:e2:91:32:ba:25:51:f7:
e1:1c:cf:25:93:63:02:b4:74:2a:0f:cb:a4:9f:8e:
9a:11:c8:96:51:7d:bf:b1:48:f9:da:8b:89:39:d1:
e5:04:ba:da:b7:e7:fb:97:7f:a9:0d:0d:87:5c:2b:
0e:a5:be:8d:06:0c:9c:ba:94:8a:3e:d6:7b:34:aa:
58:f0:a8:bb:fe:27:cf:fe:77:4d:1e:24:04:37:fd:
6c:b7:1d:f8:df:d7:15:9b:b4:ea:4b:5f:e3:b3:c1:
1c:b6:ac:ae:06:d9:87:28:82:a7:d0:ae:2a:28:73:
26:9b:58:47:ad:16:c3:59:89:90:15:27:44:c2:01:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:11:42:E2:84:D7:7F:86:1B:2B:33:5F:F7:8E:2E:90:99:04:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:31:59:5c:a0:7b:03:dc:70:d2:ca:27:3a:00:28:8a:36:88:
39:7a:2e:88:13:f5:8d:0e:a1:65:bb:7c:15:aa:20:f8:b9:45:
69:3f:01:d8:5f:f2:60:61:af:19:44:3c:b2:cd:93:20:37:c9:
13:bb:b9:a4:17:3a:0b:bf:8b:9e:ba:fb:c8:85:f2:da:b7:11:
d6:60:77:2c:83:92:da:27:ae:a5:6b:66:45:36:62:5f:80:84:
80:6a:7b:57:4e:b0:44:8b:7e:8c:2c:c9:9a:34:39:7d:f8:6d:
9f:a1:20:cb:38:81:90:d8:35:82:eb:13:57:60:b9:67:41:2e:
d1:1a:4f:e9:b7:1c:e1:aa:7a:bd:b9:e7:3e:0f:04:a2:2f:25:
10:bf:67:30:b0:19:2d:05:70:91:44:ba:3c:fd:42:bf:7a:30:
5d:41:52:14:e4:1e:30:11:f5:b0:69:4c:2e:c3:68:0e:62:73:
87:77:7a:bb:dc:bd:61:f6:d2:25:4a:86:32:00:8f:b7:4b:5f:
1d:9d:a9:b6:82:26:98:ae:14:7d:3a:b3:ef:35:77:b6:c0:9a:
a5:d7:3e:53:3a:ce:fe:53:69:2a:c7:e2:d3:a9:99:52:f5:13:
0b:ac:f2:f0:91:7a:6b:84:83:a2:04:8f:b6:7d:33:91:06:c8:
d5:c0:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:30 2026 by rpki-client