Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ef3372e-f216-40b8-b019-7230e30b3283.roa
File: 1ef3372e-f216-40b8-b019-7230e30b3283.roa (raw, json)
Hash identifier: S5+FPrgqlJgWjVorCLXew8qzlWby258XU/H+gYb4DZQ=
Subject key identifier: 69:F3:91:31:77:53:78:B0:EF:14:84:59:C0:07:0A:9A:A2:0B:38:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76D4DC60A6B10110817259A443068A3D34C79C1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ef3372e-f216-40b8-b019-7230e30b3283.roa
Signing time: Fri 09 Oct 2026 01:30:34 +0000
ROA not before: Fri 09 Oct 2026 01:30:34 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d4:dc:60:a6:b1:01:10:81:72:59:a4:43:06:8a:3d:34:c7:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:34 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=f4a3bf6ea41ff5f93f7b375d6990f91c09f0dfa723ab26fd8c9770a36240f246, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:39:ca:60:61:ec:5d:d8:57:12:ce:b1:6a:
18:a1:92:c2:7e:8f:39:f7:df:45:14:93:2c:98:78:
a5:6a:bc:ab:ba:6d:9a:36:95:89:54:ff:76:93:7a:
7a:2f:60:3f:aa:b6:9a:f3:7e:22:67:11:8d:b1:67:
cc:d8:2f:78:ed:0c:58:1b:a8:94:c7:04:72:88:ea:
e7:38:7f:be:7c:30:7b:a8:e6:14:3d:ef:96:44:fb:
55:06:19:27:a4:bc:98:6e:86:aa:15:ab:9f:86:47:
75:06:bd:72:fe:d8:e8:df:32:a9:3e:69:ab:e1:3a:
4f:65:da:03:98:9c:3e:4f:17:79:a0:f6:c3:81:4e:
c3:ce:90:1d:ab:33:b8:a6:e3:8e:76:32:6d:45:35:
b0:aa:24:15:33:e8:c7:fb:a3:eb:8b:8a:61:93:d7:
12:8a:95:63:13:7f:95:7b:fb:a4:36:5a:4c:b5:f0:
53:08:5c:96:c5:2b:85:c2:9e:a3:08:0f:0b:cc:10:
df:bf:fa:be:49:d9:05:81:b8:ad:04:80:1f:c4:a0:
06:0a:12:6b:84:39:73:e4:3b:c5:ca:f4:1b:0a:c5:
74:cd:97:4b:69:fe:61:e4:a9:b7:a6:76:1d:1b:b7:
b2:a7:a2:1b:85:2b:d0:3e:7b:ef:b3:c1:44:42:40:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:91:31:77:53:78:B0:EF:14:84:59:C0:07:0A:9A:A2:0B:38:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ef3372e-f216-40b8-b019-7230e30b3283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:2b:b4:b6:11:01:fd:83:ab:7d:1e:bf:1c:e1:f2:8e:5a:23:
57:fd:8f:d1:bf:ee:ff:7c:ff:a9:da:9e:15:0a:3e:bb:3c:67:
b4:23:38:95:0e:48:c0:f7:7b:8c:a4:a7:8b:4e:74:c4:eb:e2:
66:aa:56:c8:f4:5b:ca:c6:90:1b:71:26:7a:7d:81:bd:ca:1e:
ae:56:b2:ac:ee:7b:f6:d4:25:e1:8f:13:5e:83:03:67:40:e1:
d1:d6:4f:18:7a:94:70:ff:8c:8f:01:0a:43:9d:52:98:a0:ee:
31:59:2d:10:a5:01:df:57:9e:89:18:7b:75:d1:cf:5f:f7:46:
80:5f:fe:26:30:ef:69:14:55:45:d5:15:a8:68:2c:ee:98:c5:
68:b4:7e:f5:bc:b9:95:ca:04:a9:ae:45:9d:e1:d8:9d:cc:70:
75:1d:ed:63:fc:1c:99:0b:5d:01:c1:92:fa:85:63:72:3b:d2:
08:91:47:b4:f8:ba:8f:b7:80:31:d3:7a:f0:58:a7:b1:8b:4b:
96:83:6b:8c:ac:61:7e:0a:86:64:3f:68:a6:ec:84:95:b5:7b:
0e:45:a5:4b:1c:99:63:eb:c3:1f:d7:d1:26:8c:4a:bc:88:f5:
00:53:1e:00:18:ec:1c:92:29:a5:63:3a:8e:ac:1d:34:13:05:
85:9f:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:48:23 2026 by rpki-client