Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1977ffde-7d26-418c-800c-ccacd18fe560.roa
File: 1977ffde-7d26-418c-800c-ccacd18fe560.roa (raw, json)
Hash identifier: UO3qIUrT0zdkiHUQMNJX5Z+bFDUh89HmahX5V5hXADg=
Subject key identifier: 7E:31:F6:2D:EA:38:61:35:98:40:A0:F2:7D:15:CA:B0:7D:4B:A2:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25F7CD792578029120EEDC76D7694237B2A029EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1977ffde-7d26-418c-800c-ccacd18fe560.roa
Signing time: Sun 11 Oct 2026 15:10:06 +0000
ROA not before: Sun 11 Oct 2026 15:10:06 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 8987
IP address blocks: 2a05:d040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f7:cd:79:25:78:02:91:20:ee:dc:76:d7:69:42:37:b2:a0:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:06 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=3616a30c894b1e3ba3fbb6bd4b352b042e17ecccbf407aba976f8544511a832f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fe:97:7f:9a:d3:25:8d:25:80:4d:8a:f1:19:
12:b9:03:68:7d:af:c7:1b:58:66:0d:f7:9b:81:ce:
b6:99:14:51:8d:3e:6f:92:83:ad:57:87:91:4d:dc:
ad:f9:5a:43:fc:d4:88:b6:5f:f2:2a:78:70:e2:50:
6a:27:46:9e:8c:7e:09:0b:34:72:d3:a7:3c:b0:6c:
5f:fc:09:20:06:34:fe:a8:2c:01:3a:92:1b:e8:c3:
06:39:c7:ed:85:71:f4:13:3c:c0:6f:d5:2b:80:b1:
98:bc:78:cb:ab:5b:8b:5c:b3:e3:fb:2a:d9:48:4f:
fa:e6:5d:66:7c:19:53:dd:63:91:51:d9:fb:e8:77:
75:f3:19:08:bb:ef:b6:44:89:41:7c:02:b3:52:70:
1a:6e:fc:dd:14:ac:94:9f:12:f6:f4:3c:8f:4e:2c:
9d:69:d8:fd:d4:e6:b3:ec:9e:35:ec:6f:cc:88:d6:
6a:d0:0e:90:bc:95:77:c0:a7:73:44:78:98:d8:58:
32:bf:21:8d:75:7b:31:16:cd:91:40:b9:c3:4e:0c:
7f:bf:5d:e3:2e:71:ea:48:98:22:63:1b:74:69:82:
72:ca:6a:75:80:c8:46:38:a2:a6:1c:57:a7:63:e0:
47:f1:e9:09:89:7b:13:c1:e2:2a:64:57:e3:81:a5:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:F6:2D:EA:38:61:35:98:40:A0:F2:7D:15:CA:B0:7D:4B:A2:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1977ffde-7d26-418c-800c-ccacd18fe560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040::/32
Signature Algorithm: sha256WithRSAEncryption
7f:bf:ae:de:a3:be:43:ea:04:bc:6b:b1:0f:83:28:fa:71:9e:
a6:3f:5d:ad:82:27:f7:7d:80:36:97:29:4d:14:a6:b4:74:7b:
d9:c8:02:bd:45:5c:46:dd:53:ca:01:2f:52:e9:c1:ca:0d:97:
fb:bd:5a:7f:a1:57:4c:22:cc:32:64:94:fe:81:df:80:0f:a7:
48:50:2d:97:cf:4d:ab:5a:87:00:4b:9f:ca:80:b5:ad:83:fc:
9b:57:67:c9:29:c4:69:17:30:07:d7:1b:a6:92:13:37:90:90:
6c:ad:0c:b1:9e:6c:c2:f8:23:8b:38:be:f5:bb:08:a3:a5:f8:
d8:36:99:67:f1:fe:20:b6:e9:4e:e6:bc:0e:17:42:4b:02:1b:
ad:04:e4:3b:5f:e7:e2:08:a9:00:e8:42:3b:b5:c8:ee:52:5f:
76:1a:25:e8:34:52:2f:72:96:e1:cd:59:5b:e8:89:a3:35:34:
21:2e:ce:71:33:39:57:9c:7b:55:58:8b:4c:77:13:69:a8:bd:
c1:85:36:ff:eb:de:8a:a3:8a:17:45:a8:e0:58:04:65:51:70:
54:af:a9:56:2c:5e:1b:ba:52:e5:c7:17:7f:76:dd:52:a1:3f:
0d:c1:ff:eb:2f:10:b8:b2:f7:66:7d:16:43:8d:c0:89:03:b5:
01:13:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:04 2026 by rpki-client