Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11b6f817-9b7c-4713-a998-67a8a2a5a379.roa
File: 11b6f817-9b7c-4713-a998-67a8a2a5a379.roa (raw, json)
Hash identifier: mQi5GAqNcTDQXn20YGnbOQ329nOuA0aPQ0mhh/QF1Ks=
Subject key identifier: CC:35:38:6A:68:E6:C7:75:F2:A7:AD:34:1D:DE:EF:73:3A:70:A7:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A9721C457A1AE8DDF38187542F54017B132F95E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11b6f817-9b7c-4713-a998-67a8a2a5a379.roa
Signing time: Fri 09 Oct 2026 01:30:35 +0000
ROA not before: Fri 09 Oct 2026 01:30:35 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:97:21:c4:57:a1:ae:8d:df:38:18:75:42:f5:40:17:b1:32:f9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:35 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=ff78533901ba17ec969737d31dbb26c2f982d496d712ab16a01a86c6618f56d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:9a:c3:1a:f2:64:bb:07:cc:52:fb:91:96:
d9:88:88:b0:d4:f5:fa:72:e6:5a:f1:15:c1:f9:2d:
39:dd:6f:2e:50:7d:2f:f3:77:13:36:5b:5b:7e:89:
99:c7:c6:ee:c6:9d:02:c9:da:f1:3b:dc:b0:6b:11:
75:49:00:10:90:b1:f2:ae:54:ef:a1:ec:4d:a6:00:
64:ec:1e:68:bf:42:18:18:a2:2e:7c:ea:8c:a5:31:
4b:a9:43:91:6e:cc:f1:ed:88:43:7a:c7:2e:5b:ea:
cc:95:99:cd:e5:fb:1c:7a:2b:64:c5:1c:b8:33:d2:
93:a8:b7:ab:4d:53:20:46:2d:dc:36:2d:58:4a:42:
91:4c:a0:fd:ee:cf:17:6a:e0:15:d1:5b:85:ec:7f:
de:06:74:36:e9:62:80:73:8d:e8:d6:29:c1:84:7d:
6d:24:40:c9:3a:60:60:5d:31:89:a9:8f:74:0f:ec:
9e:a8:49:50:84:16:85:fc:e1:3a:9c:f8:aa:e2:3a:
93:33:87:21:11:60:96:df:28:50:27:9e:bc:62:53:
4d:ed:9d:ce:44:25:5b:2e:37:cd:2e:8a:2a:ca:1f:
dc:43:2d:6a:73:a8:de:01:84:9a:c2:16:47:69:93:
2b:f7:d9:e6:ef:c2:74:71:44:9d:b6:51:13:8b:06:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:35:38:6A:68:E6:C7:75:F2:A7:AD:34:1D:DE:EF:73:3A:70:A7:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11b6f817-9b7c-4713-a998-67a8a2a5a379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
30:2e:b4:ae:b1:3c:50:4c:67:5a:8c:da:af:88:5d:91:81:e8:
5f:ad:6e:be:07:a2:e7:80:32:ce:05:c9:ce:a2:bd:d9:fc:da:
0f:25:d1:6f:76:09:d7:68:b2:91:d7:e5:9c:30:1f:a9:7d:10:
0e:6c:f7:62:ab:b8:b5:f8:9a:97:6b:5d:f6:cb:e0:79:6f:7f:
af:0c:5c:01:bc:4e:71:b6:51:5a:09:39:7f:a6:8a:91:4b:79:
f5:1d:0c:9d:cd:cd:42:f5:39:c7:03:09:b2:00:68:d6:a8:e8:
f2:85:38:5f:02:fe:af:c6:9b:77:42:04:25:e2:22:19:47:41:
19:dc:c1:e4:d6:c6:e0:c3:0a:d5:c6:d6:3b:0c:64:d5:2a:f6:
b3:3f:bc:a8:88:e8:07:16:4f:a3:28:1e:63:14:02:81:ae:22:
38:aa:e3:17:ba:3b:3b:4d:7b:62:39:9b:6b:63:08:bf:6b:a7:
9d:0f:7d:13:c7:f1:38:59:9b:32:6b:40:e2:ff:c9:6f:4e:52:
db:42:6c:dd:24:56:f5:ae:0d:09:ba:44:82:7f:69:aa:7a:ac:
ea:93:f4:58:30:52:b4:2f:de:a6:47:5b:1f:94:0b:09:18:99:
3a:8e:ce:cc:f9:1d:96:1f:d4:00:05:2d:92:77:bb:5f:c4:ba:
40:87:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:24 2026 by rpki-client