Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
File: 2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa (raw, json)
Hash identifier: evZSV0HzB6O+hBddPrt3SJyKbqdBs6K92eazmCZ46Bg=
Subject key identifier: BE:D0:F1:CB:74:D0:B3:67:3C:96:DC:D2:45:4D:5E:5F:15:6C:33:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FCC41C32D55F86F889CDAD57925DAEF9F41F47A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
Signing time: Mon 26 Oct 2026 04:50:39 +0000
ROA not before: Mon 26 Oct 2026 04:50:39 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cc:41:c3:2d:55:f8:6f:88:9c:da:d5:79:25:da:ef:9f:41:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:39 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2b7fd6a91550e00c276280ce98cdc667821ec9aa9251be05c3ecdb5471ac9992, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:71:30:a4:9e:82:77:1b:d7:f6:8a:5e:29:
95:c4:8d:b6:4e:95:88:01:36:7d:06:a1:99:87:84:
3f:27:8e:30:7f:1f:ec:4c:fd:96:9d:42:b7:d7:a5:
92:5d:5e:a2:dd:a4:53:cc:c9:76:42:58:79:cb:4e:
34:4d:15:d4:c2:54:d5:89:d9:67:9a:a9:35:fc:b2:
30:d8:32:c3:2a:86:9b:0f:07:36:b2:4a:53:e8:70:
cb:d2:5f:49:cd:8b:17:dc:e7:d4:af:c4:bb:40:39:
8e:61:36:1f:50:7c:dd:05:a3:96:e3:0f:44:0d:87:
b8:15:d6:9f:39:e1:50:90:bf:92:bc:6c:7e:fe:af:
a9:e8:50:17:ef:e9:c8:30:69:f8:99:20:7e:50:56:
70:68:c8:9d:ad:02:ee:09:de:5e:22:9f:c3:0f:88:
3c:97:a2:ee:30:ec:fc:25:b3:35:bd:d5:5e:58:b3:
8c:25:78:86:6d:c0:8b:5b:8a:13:10:ec:8f:6e:7b:
c0:06:42:76:97:00:9e:81:c5:27:35:d4:d8:51:01:
30:4d:37:52:ef:6d:ba:bd:91:ad:1e:6f:33:93:ef:
df:a6:e8:00:0c:b9:2e:ad:d5:cf:35:f3:86:2f:a1:
75:07:24:0e:14:9b:48:a9:a0:02:ea:27:cf:b0:e4:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:F1:CB:74:D0:B3:67:3C:96:DC:D2:45:4D:5E:5F:15:6C:33:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c6:36:03:48:f8:fe:cd:a7:8c:cd:e6:20:da:a0:d1:0d:55:24:
1e:e4:43:0f:5b:fc:8f:06:9c:cb:64:53:26:3d:e3:99:b0:20:
0a:b1:67:fe:ec:42:40:ad:f6:0a:df:5e:45:f9:81:4f:81:6a:
9f:ff:f5:74:8a:1d:dc:80:5b:19:a1:2b:61:29:6f:1e:9f:00:
29:ed:5e:93:d4:68:82:04:84:5d:0f:e9:4d:d0:62:15:26:31:
45:a4:27:89:8b:01:51:4a:80:3b:31:f3:74:5e:f1:71:b1:c7:
39:b6:d7:be:c4:a4:8b:66:2c:f4:49:dd:e6:98:74:c9:3a:13:
12:87:d5:79:3d:55:d1:ad:68:c2:a3:e3:a7:7b:93:18:a3:c6:
3e:cf:5c:16:38:a8:eb:50:8a:05:bc:26:86:d8:f7:b2:33:95:
a7:77:9a:bc:b6:34:2a:05:a2:af:68:b8:73:ec:61:6d:75:15:
a4:7a:88:43:4a:dc:6b:8a:65:f8:d1:cb:09:bf:af:d3:e2:57:
f2:12:05:82:e2:95:15:59:d1:6d:45:65:95:67:a1:9e:2c:af:
c0:51:f1:26:b2:7a:45:46:37:b1:7d:24:f6:6f:29:5e:28:7f:
1f:0a:32:fa:1e:20:5d:7e:3c:d6:f9:9c:94:61:9c:7c:8a:ae:
4e:bb:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:10 2026 by rpki-client