Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21e2f5c8-e012-44d0-a6f2-c4a065b3b954.roa
File: 21e2f5c8-e012-44d0-a6f2-c4a065b3b954.roa (raw, json)
Hash identifier: UQMhmi5qf4yzGNjO6HWHaYZfkoiu1VAGqw29DWkUvLA=
Subject key identifier: FA:CE:0D:5A:DB:C8:53:AC:6D:D8:69:FA:67:D7:62:D2:C6:6A:FF:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D02A39DE63BFF65E1F7F306E17CA5DF4078162B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21e2f5c8-e012-44d0-a6f2-c4a065b3b954.roa
Signing time: Mon 26 Oct 2026 05:10:19 +0000
ROA not before: Mon 26 Oct 2026 05:10:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:02:a3:9d:e6:3b:ff:65:e1:f7:f3:06:e1:7c:a5:df:40:78:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=84d9980b53f569d59f4f20e6c93768664af74cfed7dfdba52b5b12de64addea6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:55:ca:2e:37:98:cc:d7:b8:8f:7c:89:50:
dc:8a:c0:c3:e7:74:f7:5b:5a:63:10:8f:bc:55:6b:
be:d4:a2:50:96:3a:e5:5b:6c:52:ac:45:af:ae:9c:
9a:c7:80:a7:32:93:19:b8:d9:7b:e9:57:f1:aa:53:
14:62:83:43:1a:f4:0f:ba:8e:f6:15:08:dd:89:8f:
14:91:ce:2c:5a:92:1f:0e:99:1f:c5:b6:de:af:36:
55:c9:1a:c5:d8:86:e2:9f:b6:91:2b:7b:77:e1:58:
a3:97:75:39:b2:7c:71:34:df:ba:00:9e:94:c1:6f:
80:a7:84:6a:54:4f:29:04:77:76:ec:da:31:d1:3c:
33:71:7f:c9:4d:d1:30:ae:de:7e:63:a1:2c:25:01:
e9:a3:72:8b:be:ad:f8:a8:82:2a:81:02:03:87:63:
01:aa:22:3a:f6:d2:43:b9:33:d0:86:db:30:62:d3:
3c:cb:23:98:d5:af:ea:b4:e1:ce:00:d9:73:2d:0a:
7e:dc:58:79:43:62:8a:c2:04:99:11:a7:d2:ed:b0:
43:7e:1e:bd:4a:38:ed:b2:ce:51:1b:a9:22:d4:8b:
b9:e5:0b:9d:ac:e5:41:7b:a3:eb:df:2b:59:7d:18:
26:b7:b3:d2:90:4b:26:87:3c:16:4e:d0:05:24:cf:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:0D:5A:DB:C8:53:AC:6D:D8:69:FA:67:D7:62:D2:C6:6A:FF:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21e2f5c8-e012-44d0-a6f2-c4a065b3b954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:4000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:e3:ca:9d:9d:b6:1c:b6:96:9b:90:e9:38:28:d9:48:99:75:
d2:b9:2b:a6:bf:3a:86:95:f5:44:ad:9b:ca:a6:85:48:f6:2c:
d9:b6:6f:fd:9a:45:b7:1f:00:e0:28:96:03:9b:af:f8:c9:15:
6e:06:8d:9a:ee:bc:70:ca:18:51:25:2c:a7:b4:4f:5b:28:a0:
d2:58:28:91:27:d4:97:26:53:c5:6f:c5:68:fa:68:88:6e:84:
4b:84:35:2f:50:dd:cf:47:86:6f:e7:c2:9c:48:da:31:8c:5d:
f0:4e:50:6c:c8:fa:24:20:73:97:92:18:6f:20:01:41:b9:c5:
8f:ab:56:08:cc:b7:6a:13:a7:ab:24:90:fb:d6:21:0d:53:c1:
ec:7d:c7:7e:a4:4b:62:8e:c0:11:be:76:c1:e9:fd:df:ea:90:
aa:0b:86:7c:50:d9:2a:fa:fc:a7:ec:d8:fa:ca:7e:89:67:d2:
05:80:6f:da:05:f7:2d:52:6f:f4:ff:4f:d2:7e:76:a5:7d:3c:
21:88:93:8e:1b:7e:62:41:a1:ef:67:74:74:66:85:86:62:e0:
b7:d0:ed:d5:79:6f:3a:7e:40:1c:ed:d3:62:c9:5d:e8:3d:3b:
d0:6e:47:46:bf:de:ea:fe:02:35:13:95:9a:39:c4:b6:6e:be:
7f:e2:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 16:08:20 2026 by rpki-client