Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
File: 3401cced-770c-4585-9f39-cb17444bbb38.roa (raw, json)
Hash identifier: FKIhSjLOmPolD82h+eAAUXvSUwPI7ws/BWuhwZqvTIs=
Subject key identifier: 6B:4A:DA:94:C9:E0:2D:30:37:E5:23:C5:D0:DC:BA:A2:9D:D2:68:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27E1A650FDB87A96600A4027A6FC5F2B966B5804
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
Signing time: Sun 11 Oct 2026 15:10:06 +0000
ROA not before: Sun 11 Oct 2026 15:10:06 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e1:a6:50:fd:b8:7a:96:60:0a:40:27:a6:fc:5f:2b:96:6b:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:06 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=2b1a95c5309d8f484894694bad804c5dbdfddc7f72a5c149c4ee10ba545e6638, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:75:ca:6e:22:ba:0f:ee:ce:ed:3e:1a:b1:
2b:f0:a8:ae:15:51:b8:eb:12:28:3a:0e:34:3f:12:
b1:f2:43:5b:60:68:38:d9:ab:dd:52:5d:5b:66:fc:
b9:86:4a:c9:03:5f:ef:91:82:fd:8b:46:27:52:dd:
ef:df:60:79:69:99:31:91:50:9d:01:2e:3d:87:63:
0f:c5:e9:02:43:9f:15:2f:16:0c:64:d1:fe:d9:66:
3b:38:cb:ec:78:02:c8:9d:06:c5:36:49:34:0f:69:
b3:b1:3d:ba:82:ec:5e:7a:9f:3b:df:ab:17:fd:33:
17:90:a5:22:6b:5c:42:45:38:39:bf:b2:03:a0:26:
c5:7e:30:03:64:9b:35:62:08:f1:e8:a7:43:e4:aa:
61:db:ee:78:7a:85:0d:28:21:d3:81:9e:05:1b:b0:
b6:0d:13:61:66:84:37:61:d9:af:38:b2:2c:5f:9a:
be:85:a7:b4:b5:bb:f4:ba:db:8d:0d:a6:1a:f1:7a:
ca:d6:7a:13:e9:60:82:98:c6:45:4a:a3:e6:8b:41:
90:fc:11:de:89:0c:1e:0d:b8:9e:13:e0:33:44:32:
dc:1a:9f:7c:46:46:e7:b5:c8:e6:c5:20:57:18:73:
0e:f4:ed:5c:e4:db:ca:ad:2e:5d:70:f9:e4:65:a5:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:DA:94:C9:E0:2D:30:37:E5:23:C5:D0:DC:BA:A2:9D:D2:68:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032::/32
Signature Algorithm: sha256WithRSAEncryption
85:81:41:87:df:c4:a8:9c:f9:8b:a0:a4:2a:f4:92:9d:e7:95:
d9:51:58:25:a4:52:d8:ab:8b:62:e8:d0:4f:ff:dc:4d:b3:3d:
b3:4a:41:70:7a:bd:e9:0f:85:36:4d:72:16:f4:c5:ed:d8:61:
2c:2c:71:b4:8e:11:d8:9a:e5:a7:4f:2c:9c:a7:7a:02:9a:83:
5b:0a:e5:04:6f:60:9b:f3:55:54:04:a7:d0:81:15:9d:06:df:
c3:07:ac:90:4c:1d:15:23:e6:97:8a:3c:30:9b:7e:be:b2:fb:
52:c4:3c:90:89:ce:f6:5b:05:c6:0e:6e:6f:8e:5f:e6:ee:3f:
f8:32:03:e1:dd:6f:f0:9d:02:ea:00:71:1d:fd:20:2e:b7:3b:
21:6d:38:19:fb:57:0f:c8:9a:6a:8a:86:ef:86:12:14:60:62:
25:86:c3:8a:ef:b1:b6:25:3d:57:e8:24:50:12:dc:4e:03:23:
0d:0a:f0:e4:bc:d6:86:d3:19:f1:46:2b:d8:d7:5f:f2:93:90:
ab:5d:30:06:77:e5:3f:a9:8f:ef:c5:bf:3c:62:a6:be:ad:fa:
8e:8d:e3:fc:f4:05:a1:2c:a5:52:f2:62:2b:a8:3b:d5:89:fd:
a5:21:51:6c:d6:f8:39:e0:0d:ab:e8:95:70:b4:e6:00:b7:55:
d8:bc:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:43 2026 by rpki-client