Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ac70b92-5b4a-42a1-b338-18f4c8dab55b.roa
File: 1ac70b92-5b4a-42a1-b338-18f4c8dab55b.roa (raw, json)
Hash identifier: 2CLJqsN2ReqBm0R4U031buMuMizD34aGJWe9o1AOM5I=
Subject key identifier: 9B:90:05:E7:0C:CC:48:27:3C:86:87:A9:CA:2F:58:00:F6:43:78:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4090193602DC9F496DD60855590284D78B2C2BE7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ac70b92-5b4a-42a1-b338-18f4c8dab55b.roa
Signing time: Thu 08 Oct 2026 17:24:39 +0000
ROA not before: Thu 08 Oct 2026 17:24:39 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:90:19:36:02:dc:9f:49:6d:d6:08:55:59:02:84:d7:8b:2c:2b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:39 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=34f751f417e915f13891216045991bd216c65091230985f17b6a068405156cd1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:ed:a1:81:77:d2:19:0d:89:0a:d4:90:bc:
94:10:b6:fc:f7:60:47:1a:b5:08:d1:bd:7b:88:1f:
25:0a:28:7b:b7:a7:01:60:80:76:c0:7a:27:77:de:
3e:1a:bb:ac:06:a7:2c:ee:61:28:49:a5:61:42:61:
b1:09:d8:14:82:8d:54:27:4b:aa:a5:19:42:f9:04:
a1:05:ab:85:13:a2:c3:26:0b:62:6c:fd:58:0c:e7:
29:83:a2:6b:7e:45:a2:1f:15:4a:88:e0:d5:69:55:
68:58:e9:81:fd:59:5e:9c:d2:05:f1:83:1e:1b:af:
39:7b:75:35:29:7c:a1:24:79:9a:60:42:23:81:93:
3e:66:02:c4:04:0e:b7:62:10:cb:2a:86:12:0b:db:
3f:35:ac:c9:34:d8:43:d8:bc:1f:03:ef:e3:2d:b0:
70:1e:1b:90:a3:06:c0:af:44:bf:1e:23:5a:f4:eb:
d6:be:7d:6f:68:6e:ee:34:95:77:2a:9a:58:6f:94:
24:8b:cc:0f:cb:e5:35:3f:ca:02:0c:00:bf:cc:73:
22:be:a4:28:f7:10:00:13:f0:a5:2d:23:14:fb:27:
36:dd:b2:6f:0d:d8:b9:97:e7:a0:32:12:61:e0:72:
3b:ae:d9:9e:2b:79:60:4f:a5:53:1f:db:35:3a:05:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:05:E7:0C:CC:48:27:3C:86:87:A9:CA:2F:58:00:F6:43:78:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ac70b92-5b4a-42a1-b338-18f4c8dab55b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:e000::/40
Signature Algorithm: sha256WithRSAEncryption
45:ea:84:cb:d9:fb:03:8a:0e:18:22:e7:be:e6:80:d0:4f:58:
e2:99:81:cc:24:e5:f2:f4:4f:42:6a:69:fa:a6:75:42:3e:ce:
23:0c:4f:2c:04:f1:7d:ef:df:99:37:a0:e2:59:51:34:3f:66:
a3:f1:48:8f:ad:bc:b7:d9:8c:ce:7f:10:0e:36:35:14:08:86:
64:a8:78:32:01:2d:35:b7:5c:96:0d:c8:82:9e:7d:c5:34:38:
00:35:7c:ec:99:4e:7f:63:29:49:8b:1d:31:88:3a:f6:5b:d3:
6b:3f:47:f1:48:04:79:97:29:97:56:52:b4:63:1e:49:2a:74:
b9:b6:1f:5e:0e:c0:99:b7:38:c2:76:0b:79:62:87:04:17:74:
bf:c4:7d:07:61:cf:f8:90:57:17:f7:4c:72:fd:4f:67:ea:de:
46:88:b4:1a:56:18:44:26:58:d7:8a:c8:d7:fe:a8:24:c7:cb:
a6:8d:e0:1c:c7:95:ad:ef:5c:29:f6:5f:53:7d:d8:ce:87:90:
5d:e7:43:fb:f4:7a:dd:43:f7:d3:04:4e:ae:46:61:8c:d1:db:
30:89:75:be:e5:96:bb:60:fb:36:07:9e:65:92:81:d2:ca:af:
03:5d:ee:14:46:51:90:a3:ec:28:b5:06:38:e4:4e:e9:8c:04:
07:bc:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:32:43 2026 by rpki-client