Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa
File: 3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa (raw, json)
Hash identifier: UP3cCh7dOlSfh6CqlMuK303T1HAQRWIdS/J+oNV9JwI=
Subject key identifier: 35:D3:E0:14:16:9F:70:61:8F:D9:1E:BC:B0:73:7D:2B:EB:F5:B1:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AB2C2C88E8AAA19358183BA99793830C357B0D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa
Signing time: Sun 04 Oct 2026 00:30:44 +0000
ROA not before: Sun 04 Oct 2026 00:30:44 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d020::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b2:c2:c8:8e:8a:aa:19:35:81:83:ba:99:79:38:30:c3:57:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:44 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=786f9f4c4fe262f64756f59c81584ff043dec6e02587459a53ec63a3b5872b9e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:ca:4a:c9:98:ab:9c:05:77:99:56:c7:69:
0b:40:da:e1:12:37:9a:44:3d:eb:51:c5:6c:df:dc:
06:77:98:54:c3:5e:eb:2e:a0:cc:28:8a:b8:1a:06:
d9:34:d0:b8:7d:d4:2e:55:4f:cd:c9:39:2d:99:ab:
43:e5:83:eb:70:f3:5a:b2:23:ce:ad:30:ac:3e:a3:
08:cc:10:83:c7:a6:da:4c:28:bb:cc:fa:ea:a1:44:
8c:e6:29:d9:39:8d:35:01:28:bd:a6:14:45:0b:21:
c0:32:2e:93:df:0f:5c:09:e3:95:8e:24:35:2c:2d:
64:40:aa:ed:1f:a4:32:32:77:bd:9c:a5:16:ae:f5:
c4:fe:13:5b:88:e0:f9:34:46:80:a2:5e:ca:df:9d:
aa:82:22:6e:d7:fa:93:a3:1c:b5:31:eb:1a:7a:28:
6e:3f:24:b4:07:5c:49:0a:87:80:15:e0:e4:3f:dd:
9b:52:51:eb:15:5d:11:44:29:63:c5:30:94:fe:f2:
46:7d:11:f0:41:84:11:ce:f3:17:04:64:c1:c4:59:
b9:97:f1:7e:84:f4:ce:df:9b:63:ea:8d:63:fb:01:
f8:37:8f:8f:7f:c6:f1:f6:4a:0a:8c:cb:b4:91:f9:
6c:28:fb:67:d2:85:13:3d:ee:02:f9:f6:8e:e1:ab:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:E0:14:16:9F:70:61:8F:D9:1E:BC:B0:73:7D:2B:EB:F5:B1:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3136a322-f9d4-4c77-b48b-3a4a5b2d3d55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d020::/28
Signature Algorithm: sha256WithRSAEncryption
91:be:ee:dd:bb:c5:00:58:dc:eb:0f:dc:03:2f:a7:d7:28:ae:
2e:15:65:1b:3a:70:aa:6a:da:80:4c:49:a0:fc:11:29:2e:09:
62:d4:0a:d1:a0:0e:26:44:29:cb:90:47:31:86:53:e3:f8:bb:
cd:27:5f:24:39:dd:aa:71:76:78:d0:69:03:7a:06:c2:43:17:
1a:1e:72:4a:fe:d1:50:93:c0:4b:aa:45:f6:7f:17:d1:9c:9c:
5c:83:6b:ce:e4:fa:55:e0:8a:a6:bc:c6:1f:be:19:e6:7c:a0:
38:8b:95:75:ef:f6:5f:26:f8:8e:07:94:79:61:fa:c1:66:c5:
f3:29:5e:02:e8:f3:9b:51:98:56:2d:68:77:f3:83:c6:2e:b7:
5c:35:2f:ef:e6:f9:2e:ea:23:70:ab:90:74:0f:00:00:a4:c6:
d8:36:2d:88:3b:d5:f7:95:65:da:63:db:c9:ae:0f:fd:6e:e5:
0c:c3:7d:eb:63:56:b5:37:c7:58:63:3b:e6:37:e5:65:5c:15:
e9:fb:f2:34:d6:60:9c:9f:d5:5a:42:37:bb:c4:32:57:f7:f0:
12:cc:8f:89:e5:b5:ac:ee:3a:ac:10:0a:2e:ef:d0:f1:0b:60:
5d:0e:42:ad:c8:d8:60:02:da:52:a4:b8:cf:0d:b2:84:16:6d:
01:64:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:54 2026 by rpki-client