Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e35b9df-6c8b-4e80-a79b-6dcd0efcceae.roa
File: 2e35b9df-6c8b-4e80-a79b-6dcd0efcceae.roa (raw, json)
Hash identifier: nulNEvxqNn6wMdIYoCzscjBUjQyxYZ71IGB7xFBujHM=
Subject key identifier: E8:59:FF:F3:49:E4:49:29:60:E9:A2:AA:C1:08:28:8A:F2:62:3E:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 238495CC455357CA296743089623D49B0DA9C318
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e35b9df-6c8b-4e80-a79b-6dcd0efcceae.roa
Signing time: Thu 08 Oct 2026 17:24:35 +0000
ROA not before: Thu 08 Oct 2026 17:24:35 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:84:95:cc:45:53:57:ca:29:67:43:08:96:23:d4:9b:0d:a9:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:35 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=5105ae4fd72fa4b9513cd4b4ec777cd393099fa2c7112883c62b5b6cfd13e8fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:61:75:85:83:4e:40:59:19:f2:df:5c:83:
dc:1b:f8:9a:16:aa:dd:b0:9e:74:ef:72:3e:03:e3:
bc:c9:5b:44:5c:df:d5:c2:a0:13:4a:c4:82:7b:ea:
dc:91:63:56:f8:b4:46:97:17:3e:55:73:12:72:b8:
37:01:9f:f0:fc:06:9c:bc:0a:c9:ef:bf:18:d8:80:
ae:4b:48:48:af:9d:71:42:db:92:1e:9c:60:78:4b:
8f:cc:95:45:de:83:14:59:3f:fd:17:ab:4e:69:4a:
e5:f2:79:4c:4c:38:5c:fd:e6:67:a8:90:82:f5:4b:
4e:5e:4d:2d:5f:05:6f:99:a8:90:ed:60:58:37:ff:
45:8f:4e:95:24:b5:dc:43:e3:66:e8:f5:e1:1e:6c:
a9:29:4f:d8:dd:ab:37:51:b3:84:02:b4:95:88:fc:
d5:8f:73:6b:0e:41:02:78:5c:60:fa:f8:c7:64:6c:
1b:2a:0e:e3:d0:aa:04:a4:52:e0:11:7e:8e:41:e4:
5b:e9:30:b2:de:1c:2f:5f:f5:9f:0a:3a:fc:5b:3b:
b0:1a:73:39:9f:7d:7a:5f:57:7e:5d:df:72:ae:f7:
bf:6d:4d:1d:ab:60:a9:ed:4b:b1:7f:13:5d:bb:43:
cb:59:5c:83:ba:97:68:92:55:46:02:1b:40:80:a4:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:FF:F3:49:E4:49:29:60:E9:A2:AA:C1:08:28:8A:F2:62:3E:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e35b9df-6c8b-4e80-a79b-6dcd0efcceae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:4800::/40
Signature Algorithm: sha256WithRSAEncryption
97:6d:aa:f3:30:3d:4a:49:0f:a1:f4:fc:71:33:fe:0c:99:01:
98:bf:0f:be:11:35:55:00:a0:4c:75:72:27:1c:91:53:2c:36:
40:f9:fa:7b:0d:84:41:a7:f6:f3:2d:83:2b:5b:6c:f3:27:14:
70:db:d9:20:22:01:ce:e1:ce:f4:c0:92:bd:aa:e3:6c:3a:07:
5d:00:cf:ef:f2:c1:83:b5:3a:38:dc:7a:7a:43:71:21:49:81:
4b:87:5c:47:c8:93:33:32:49:1c:4a:9c:d0:21:d5:f9:3e:11:
c2:5c:aa:3c:00:3d:3f:f8:d6:e1:f8:0e:da:79:90:b7:ee:3d:
b0:e8:50:16:1b:47:0c:b4:7f:36:3f:9c:a5:bd:f7:3f:32:ed:
32:2f:b4:73:fc:79:ce:1d:86:b1:b3:6a:9d:2f:47:92:0f:f1:
77:80:00:02:e1:b0:f3:c4:da:8b:bb:9e:e5:fc:97:00:0c:97:
bc:12:ca:69:49:13:80:ff:0d:09:db:d2:0b:84:35:28:68:56:
d1:05:09:b3:9a:21:e0:2e:22:72:98:da:06:ed:67:53:a3:71:
bc:8e:74:aa:0e:33:0b:53:76:24:b5:ca:83:84:92:6c:5b:47:
24:81:86:7a:d7:92:7d:27:90:a6:41:cc:84:03:d6:c3:34:f2:
91:f4:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 23:02:13 2026 by rpki-client