Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190fac14-20fd-4ff6-be84-3674c0f597a9.roa
File: 190fac14-20fd-4ff6-be84-3674c0f597a9.roa (raw, json)
Hash identifier: KiOciVlCoEf24p8m2PGBkHPkWPpQwQq5mW0EgyQLtAk=
Subject key identifier: EA:3D:07:B9:5E:D4:32:A9:81:C4:04:2E:8D:FB:78:D7:B1:2A:F1:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B44412BFC3BDD732C82961B016A3ACFC12CB3A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190fac14-20fd-4ff6-be84-3674c0f597a9.roa
Signing time: Thu 29 Oct 2026 01:02:50 +0000
ROA not before: Thu 29 Oct 2026 01:02:50 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:44:41:2b:fc:3b:dd:73:2c:82:96:1b:01:6a:3a:cf:c1:2c:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:50 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=52e6ee142290a89295aaf6f808523eee6caaf73e8e82341ef6f8630df8729ac8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:71:ff:09:df:3c:3c:3c:23:45:17:30:34:
7d:49:55:b0:54:c3:44:bb:60:b6:cb:0f:43:d7:ba:
10:b9:d1:e8:2f:1d:f4:07:d3:42:bf:f9:78:b7:9a:
2c:4e:16:c2:26:d3:bd:fa:63:14:35:55:e9:38:c0:
d2:5f:e6:63:0c:44:e8:bb:61:3c:d6:b5:3c:c4:1b:
75:6a:ef:26:6d:c2:9b:3a:fe:bb:7c:98:e6:b3:1b:
dd:0e:82:cf:56:8b:a5:87:47:51:59:1c:22:e0:17:
83:63:40:fd:3b:7d:c8:d5:15:c6:a9:57:6e:78:21:
ca:99:99:b1:ef:b6:c1:92:c5:1a:4a:a3:bf:ae:ff:
38:9a:f1:e6:58:56:ae:02:10:14:3f:54:c2:31:e2:
c1:b6:4a:5a:dd:22:9e:63:2b:30:3a:37:57:e5:29:
47:89:0b:18:1c:5e:e6:63:89:e1:5b:b6:31:e6:94:
68:6c:8a:65:ee:a2:a9:87:75:72:f3:44:8e:27:a0:
e2:c2:be:44:79:24:95:66:02:72:6e:e5:e8:73:8b:
b5:5d:cb:13:48:a6:56:f3:17:85:66:3c:03:8a:d6:
2f:b9:b1:c2:0f:9c:fc:35:52:28:99:02:4a:ac:28:
2a:8f:2c:94:58:94:e1:6e:87:77:f6:be:b5:8f:3b:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3D:07:B9:5E:D4:32:A9:81:C4:04:2E:8D:FB:78:D7:B1:2A:F1:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/190fac14-20fd-4ff6-be84-3674c0f597a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:6000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:23:82:25:37:51:69:81:cd:31:e5:e1:7d:ea:22:0b:da:1e:
1b:4a:0f:87:b1:13:bb:96:02:4e:bc:aa:34:02:48:66:43:b0:
65:7d:c2:1a:c8:c8:76:bf:4e:df:7f:53:cb:56:07:5d:24:c2:
00:94:9b:b7:aa:93:0e:97:7c:4b:64:a6:da:ab:53:aa:c0:f3:
22:07:f0:58:09:25:c1:ed:1f:20:27:4d:c7:18:54:7a:1b:a4:
67:ac:9e:04:72:23:bf:7b:90:c9:c7:fb:f5:8b:26:77:9f:05:
3e:a3:7d:d9:86:1c:81:8b:10:6a:b3:22:5a:97:2e:9b:7f:7f:
94:dd:f0:a5:20:77:53:c6:51:86:53:3a:57:ce:d8:ee:44:77:
90:de:3f:83:b6:05:9d:5b:14:fe:ac:a7:64:95:f1:c6:04:b5:
9e:93:af:70:90:d0:fb:38:31:a5:d7:e4:65:9e:07:e5:f6:a0:
77:9f:a3:a8:99:77:de:de:c7:5f:f1:ff:1a:e3:69:68:8e:f0:
09:cd:68:86:05:e4:09:51:9c:02:56:e2:eb:15:cd:18:98:06:
de:0d:7d:85:62:6e:db:43:8a:20:d3:56:5b:14:ff:28:bb:aa:
c2:8f:66:7a:2a:23:8c:6b:1e:8a:79:56:cc:01:7c:e4:1b:c2:
2d:f0:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:26 2026 by rpki-client