Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
File: 2e678418-1e4d-4843-bded-3c28c17eebf8.roa (raw, json)
Hash identifier: jZse87krFH5+7taD2JpBJoV2xA9h3TyeY8B3WKKK9X8=
Subject key identifier: 44:A6:4A:37:F7:C0:0E:E6:D0:89:25:21:83:2B:23:C1:A7:36:BC:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7589507AFE2A0C3F087620CCFF5BFC052D47637A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
Signing time: Thu 15 Oct 2026 03:20:11 +0000
ROA not before: Thu 15 Oct 2026 03:20:11 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:89:50:7a:fe:2a:0c:3f:08:76:20:cc:ff:5b:fc:05:2d:47:63:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:11 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=b4fec1f93f66f87e1e1ebf7167f67c3dd1947f163caab42df5394bf6f019bb35, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:7a:63:2f:d6:2d:bd:de:f0:5f:a9:a0:78:
86:e6:05:27:9c:f1:83:26:5f:22:34:00:4a:91:ae:
8a:ae:36:68:fd:25:da:a1:81:8e:02:a5:db:d5:d5:
98:6e:73:1d:8e:8a:8a:e2:46:aa:ee:83:1a:80:60:
25:00:d9:48:09:82:4f:1b:c7:34:81:b6:1f:81:fb:
95:ca:39:35:ba:b1:8c:80:8d:0b:3c:ab:4e:f4:45:
aa:c3:ff:86:c0:fd:8f:dc:a2:f3:63:63:4c:d6:03:
99:03:ec:2a:6a:97:c3:58:2d:eb:72:0c:fa:b3:42:
99:5f:a8:3e:3a:22:2c:82:25:5a:f1:3f:13:85:e1:
b6:53:ac:3d:35:bf:3e:54:d0:8b:97:80:d4:24:0c:
fa:5c:57:69:15:36:51:67:59:80:a8:d1:0e:40:1e:
7d:d0:6d:ec:a9:ae:c3:eb:47:9d:2f:44:f7:10:36:
ee:2b:1a:46:79:fe:bf:4d:b5:1f:2a:6c:45:74:9e:
b5:b2:e6:a6:30:36:c1:55:ee:16:e4:ea:64:46:0a:
a8:4f:a6:a3:9e:0f:3e:4f:31:4b:3a:2f:71:1b:e6:
0c:3b:77:5e:d8:26:98:74:a4:be:bd:de:18:ab:51:
1b:ca:31:07:40:96:3a:38:11:cd:54:a1:bb:ae:0b:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:4A:37:F7:C0:0E:E6:D0:89:25:21:83:2B:23:C1:A7:36:BC:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:29:d6:94:aa:28:db:f2:1a:7d:e6:29:e7:9c:e3:2a:18:7e:
98:fb:7d:ec:54:e7:12:de:70:bf:ab:14:cd:ec:d2:5c:ba:77:
16:a9:52:73:66:bf:a8:f7:f7:e2:b7:c4:6d:f2:9b:c3:0a:5b:
94:86:b7:92:bb:ea:fd:48:3c:bd:6d:9b:44:c9:82:5a:05:21:
f2:21:c9:ac:cc:bd:43:b1:e5:e8:a0:0a:38:ab:3d:aa:8c:d3:
a6:b7:59:06:86:84:d6:0a:6a:a6:27:83:29:55:4e:ef:a2:0b:
fb:14:c0:e0:80:f5:ef:24:ec:68:61:e6:7b:7b:0c:0b:6f:d2:
0f:02:61:3e:5c:68:ce:cf:5d:6a:ce:92:7e:68:43:43:14:26:
c0:74:26:d6:c2:90:99:ed:cb:f5:db:a3:b4:42:64:5d:a6:4f:
83:f4:64:81:5c:80:78:09:b2:af:b9:95:ff:b9:d1:0c:5b:ac:
ac:e6:fe:a4:94:08:9c:d0:06:66:8e:13:dc:00:74:f2:db:a8:
bd:50:b0:18:a0:78:45:cb:da:f5:98:00:ad:1d:a5:09:5e:32:
11:dc:fc:3e:68:ef:5d:e4:c0:bd:a7:99:f9:19:0d:2a:36:21:
34:9a:1e:d8:0a:88:d9:2b:b6:74:20:56:08:a3:b1:1b:16:f2:
1b:bf:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:28 2026 by rpki-client