Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
File: 2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa (raw, json)
Hash identifier: HEuYfb/NMJ6yDckN7uEghYefct2T3wZcoyM/pk3TF4Q=
Subject key identifier: FB:CE:92:69:8A:FF:96:28:05:86:F7:48:83:C5:63:17:BB:D7:C0:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13C7360B2701CC00D11FC9F9F39C097E8EE0640B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
Signing time: Tue 27 Oct 2026 00:02:20 +0000
ROA not before: Tue 27 Oct 2026 00:02:20 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c7:36:0b:27:01:cc:00:d1:1f:c9:f9:f3:9c:09:7e:8e:e0:64:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:20 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=e4508e0f5d7149d69e17789e0c510e18c3614959539a9f750b12ada5e56d61fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:ae:32:2e:a6:11:fb:bd:52:2e:19:f4:7e:
68:34:1a:62:b4:4a:ba:c3:5c:48:c0:8f:b0:19:b1:
71:33:17:25:80:06:b3:39:a1:97:fc:17:ae:ae:b4:
4e:8f:ac:6c:aa:17:7e:7e:c0:cf:0c:27:9e:5c:0d:
1d:09:4b:82:93:22:0b:90:20:41:12:5b:2a:23:3c:
b1:38:be:36:58:ce:de:b6:29:51:a1:9e:7c:b5:a5:
d2:26:e7:df:0d:69:64:d6:96:f7:88:fb:b8:26:69:
f5:ff:bb:55:9c:2a:21:80:17:a6:4f:ff:62:be:eb:
a4:62:79:73:ef:db:b2:e4:cd:0e:b5:aa:9b:79:6a:
31:e8:4c:17:01:35:0f:6d:bf:51:e2:4b:97:d5:ca:
d3:79:59:ce:a3:d1:68:38:15:4e:00:93:9c:ea:03:
a4:46:d2:f0:5e:7f:e4:3a:e2:cb:a2:ee:d6:35:84:
92:cb:1b:2a:5a:19:b9:65:9e:03:af:f3:38:c5:2c:
45:77:af:09:9b:74:bd:26:8b:c3:25:64:d1:d2:ef:
3f:9d:8d:79:a6:ef:7a:b6:75:29:72:31:6b:6a:ca:
86:03:9d:0c:ab:5c:f4:d9:28:07:1e:22:ee:0b:e1:
d6:5f:9a:5e:38:e6:bf:7f:c7:2e:4a:19:3b:d0:a1:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CE:92:69:8A:FF:96:28:05:86:F7:48:83:C5:63:17:BB:D7:C0:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5ba673-6d9a-4ef2-b8a0-11d0ddbf302c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/35
Signature Algorithm: sha256WithRSAEncryption
3e:d5:2e:6e:fa:f8:18:6c:17:0b:32:4a:23:53:80:12:4a:1e:
bc:c9:48:a5:28:95:8a:46:c8:36:a6:1d:14:87:34:73:c4:74:
2c:c0:17:53:46:03:1e:10:16:92:7d:2c:c5:e6:29:05:e2:bb:
62:93:e6:ab:8c:92:db:15:c1:3e:c3:10:9c:bc:f2:ad:0e:39:
be:58:d3:6b:2f:27:e2:22:e7:98:e3:4d:51:76:bb:78:3a:37:
8b:ee:b1:69:2d:32:c9:9a:bc:fe:ea:a6:3c:dd:3a:6a:00:b1:
79:f3:1d:58:08:2e:8c:cb:12:c6:40:68:70:c9:36:dd:03:77:
49:64:9b:06:f7:26:a7:48:8e:49:88:86:0e:7e:46:da:bf:c4:
ab:14:3d:a6:86:c2:d6:40:93:9e:f2:61:79:fd:10:a3:92:b4:
fd:07:ea:98:99:76:d0:1f:58:7c:5a:6b:d2:55:33:41:99:79:
0d:f9:c7:79:53:31:c6:ea:7a:63:59:2a:a5:8c:1e:57:41:08:
7e:b6:86:13:2f:90:d0:00:48:87:af:fd:a0:6e:25:58:16:83:
3b:4c:e5:75:f0:e9:e8:1e:ba:a3:6b:91:fa:f3:ef:37:8d:85:
19:35:c4:eb:19:88:87:ff:ff:51:15:e5:43:fd:a7:48:25:d9:
94:75:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:51 2026 by rpki-client