Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b5b6cc2-9a0b-4c4a-b5f9-a66b5f980d96.roa
File: 2b5b6cc2-9a0b-4c4a-b5f9-a66b5f980d96.roa (raw, json)
Hash identifier: TFxETKgQfusyq7ETw7HIcW3zYucTx2f8YqktrIGEDkc=
Subject key identifier: 4B:07:C6:94:16:6F:03:57:03:0B:DB:41:4A:FE:CC:A9:77:D1:75:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26665611AD4FB3BF3717A74A5FCC1D2AC474889E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b5b6cc2-9a0b-4c4a-b5f9-a66b5f980d96.roa
Signing time: Sun 18 Oct 2026 01:30:13 +0000
ROA not before: Sun 18 Oct 2026 01:30:13 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d024:8000::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:66:56:11:ad:4f:b3:bf:37:17:a7:4a:5f:cc:1d:2a:c4:74:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:13 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=0d8651b1d7453eeaa9749656f594f5e0a0d1e6659dcdfa86effbdb45775c4ffa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:62:8e:39:5d:e9:bf:ef:0b:d6:ec:fc:62:
71:4a:f1:a0:12:15:99:7a:42:f4:92:39:a1:fc:e2:
1c:74:09:f6:a8:ca:ac:eb:f0:e2:cd:a1:eb:ec:d8:
a3:da:1c:0e:ab:7d:44:a3:09:71:98:3a:d8:af:f0:
59:1d:e6:eb:30:c8:71:32:9d:8a:b4:8f:ac:77:33:
d6:bb:ae:b6:94:fe:bb:c0:44:c6:07:fe:24:6d:56:
16:9f:7f:42:db:19:05:50:f2:49:29:d8:e1:c1:06:
79:5e:d3:be:03:2b:af:dd:dd:97:03:bf:73:d9:0a:
7a:04:07:61:3d:c0:d1:4d:d5:85:5f:ca:5a:c2:6e:
90:1c:ad:ac:68:30:00:27:ef:0a:1a:0a:3d:89:1d:
87:b6:57:f5:81:54:f0:60:c5:46:15:84:ff:15:d8:
44:11:ed:7d:44:84:3c:0f:7b:34:1f:0d:02:7a:5e:
a7:9f:9d:b9:f1:ac:0d:ea:3e:d1:f0:73:91:70:fe:
b7:17:18:1a:8c:7b:20:df:cc:a0:42:70:3e:6b:2c:
f8:cc:5e:2c:7d:74:c6:3f:1a:b1:fe:4a:4b:d4:26:
92:5a:12:a0:2c:b1:0b:63:c8:a6:93:d0:b9:50:3a:
60:9a:7b:0d:df:c0:b0:e9:70:2a:af:fe:7b:e1:5f:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:07:C6:94:16:6F:03:57:03:0B:DB:41:4A:FE:CC:A9:77:D1:75:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b5b6cc2-9a0b-4c4a-b5f9-a66b5f980d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d024:8000::/42
Signature Algorithm: sha256WithRSAEncryption
40:cf:8f:c5:8a:4a:e2:04:86:bd:ce:d3:a5:2b:94:db:05:4f:
d6:47:d0:2f:d5:c2:5f:32:11:dd:f4:ed:a9:d7:e2:be:24:67:
9e:e1:9c:ce:19:ae:24:7c:e6:52:bd:a4:35:f1:9f:d3:b0:36:
86:5f:14:8d:79:52:21:9d:e6:0e:97:c3:79:23:84:9b:6c:44:
b5:d8:13:5a:ce:f7:2d:29:24:f5:f3:08:07:a2:29:16:0f:26:
5c:b0:17:0d:24:45:1e:c3:78:29:d8:a0:2e:9e:74:a5:77:dd:
63:89:d9:7d:cc:0f:3c:09:3e:6c:45:51:3c:9d:63:4e:5a:14:
0e:03:f9:4c:0f:83:14:05:7a:c0:00:22:98:92:b7:70:38:21:
98:ef:5d:fd:b7:04:3f:f2:f6:8e:6a:d2:3d:d1:45:bd:00:4f:
5c:ff:66:53:27:94:8f:ee:d5:d4:6c:4f:50:3a:db:72:50:c5:
f9:1c:89:b0:00:7d:54:52:16:cd:8b:96:00:79:a1:7e:6b:99:
8b:41:de:a8:83:ad:6e:20:1e:65:7c:73:6a:13:d4:e5:6c:b7:
19:7f:89:c1:e3:eb:da:be:97:f3:1d:8a:d9:54:44:37:2d:43:
26:9e:3f:d9:6a:59:17:79:0a:cd:69:13:d1:c1:4b:56:0e:cf:
6f:dd:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:46 2026 by rpki-client