Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11f67075-d744-49be-809b-fca0d72c41e0.roa
File: 11f67075-d744-49be-809b-fca0d72c41e0.roa (raw, json)
Hash identifier: flhHfFezdmlzLlELy8Wtl2TjmSfwgyNkIQWHDqNx9o4=
Subject key identifier: 65:26:1A:91:1D:8A:7D:56:0E:6A:DE:3D:12:EB:BC:3D:04:B4:82:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D722DC7701505ABCF48BDAD14E5683B2EA4B9DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11f67075-d744-49be-809b-fca0d72c41e0.roa
Signing time: Mon 26 Oct 2026 04:40:54 +0000
ROA not before: Mon 26 Oct 2026 04:40:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:72:2d:c7:70:15:05:ab:cf:48:bd:ad:14:e5:68:3b:2e:a4:b9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1e925bab4e1d16a769e4df685c2042fbe5caf6069555034237c7bbc5856e45e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:92:b3:25:ba:88:15:e8:94:8f:2d:de:7c:
40:25:4e:4b:f4:48:eb:35:05:3e:48:e3:7d:b4:96:
34:6a:72:3e:56:2e:56:37:b0:43:86:a3:5f:fa:1a:
73:10:7b:4b:00:80:04:81:c9:e0:06:91:8c:9f:e0:
58:dd:9b:57:f7:32:0f:c4:18:3b:7d:d7:88:db:59:
42:ec:e7:5c:ae:f1:d1:d4:12:4f:63:39:e9:a5:d5:
75:97:c1:d9:fe:29:6f:24:d6:b8:c7:bb:9b:79:b3:
66:86:08:03:1f:8c:c9:1c:1c:57:74:6b:59:df:71:
f4:2b:57:78:39:3f:ba:18:9f:38:21:3d:f0:e0:b0:
15:e6:99:3b:9d:be:51:84:b4:f4:8f:b4:0b:34:bc:
da:07:c6:4f:1d:ce:98:8d:6b:13:cc:64:bd:2a:33:
c2:ec:cd:c9:ef:51:cc:fc:96:54:1a:2f:ab:a2:20:
83:c4:48:7f:b0:03:64:c6:a2:dd:69:3d:7a:62:ed:
d5:3a:12:94:27:fb:0d:ce:c0:07:da:73:22:c6:c8:
02:c3:37:bf:2c:11:a7:0d:85:90:b1:3f:47:4a:62:
92:0c:17:85:fa:8d:51:9d:71:a6:96:b0:11:77:dc:
f0:ab:38:13:bc:ba:e6:af:02:db:3e:75:8f:8a:17:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:1A:91:1D:8A:7D:56:0E:6A:DE:3D:12:EB:BC:3D:04:B4:82:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11f67075-d744-49be-809b-fca0d72c41e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:2000::/40
Signature Algorithm: sha256WithRSAEncryption
99:f3:33:ef:a4:43:6c:44:14:e3:9b:1e:68:64:d7:b4:1c:f2:
36:87:72:93:f2:6f:ae:3e:e4:2d:df:b4:91:00:05:35:41:1a:
ce:9b:1a:f1:70:cc:bf:df:d7:de:a3:d5:d0:7b:d3:b2:78:9a:
56:5d:c7:ac:e6:55:67:8c:f9:44:0b:18:80:f5:f3:8b:6b:bc:
19:64:3b:d2:a2:5b:96:3d:d2:1a:1c:e1:54:fd:b3:97:4b:a3:
e2:61:00:13:3e:80:0e:e5:cc:e3:0c:2a:dd:b7:a2:a8:98:1c:
a4:75:c8:99:27:df:54:6b:dc:4a:02:f1:d6:aa:75:f6:4d:75:
b4:3d:d2:f5:c7:d5:b9:7d:68:61:b8:cf:4c:c7:82:15:0e:ac:
54:db:16:25:16:c3:07:c2:d0:5d:2b:65:2e:06:32:86:a6:de:
92:af:1e:80:91:aa:35:00:ff:5e:ce:e5:d1:90:2c:e9:95:4d:
b7:53:6f:51:6c:74:b0:2b:9f:b2:96:d0:5a:bf:a6:59:7d:85:
10:9f:35:a8:17:3c:58:81:a7:07:c1:43:39:3a:b3:59:a6:33:
af:ec:32:e7:62:44:95:c4:33:1f:2e:c1:fa:b3:a1:a8:73:d1:
ec:51:b8:ee:0c:65:1c:46:ec:76:01:ed:46:5d:4a:5a:1d:02:
52:9a:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:47:58 2026 by rpki-client