Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
File: 356f05f3-9814-4715-9f58-bf044bf5d10f.roa (raw, json)
Hash identifier: c5IuNLZTSvdwvS7YqW56X/LWau7Zr75ag7Y9qzZ5SyA=
Subject key identifier: 5A:F2:56:76:FC:F6:88:6E:04:B4:CA:91:30:9B:C1:9E:D6:1A:E5:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3EE9C3BED82DA6B76A3D2DE98F90B7F2B44595CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
Signing time: Sun 11 Oct 2026 15:20:06 +0000
ROA not before: Sun 11 Oct 2026 15:20:06 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e9:c3:be:d8:2d:a6:b7:6a:3d:2d:e9:8f:90:b7:f2:b4:45:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:06 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=f036e1eea77d78189a3410762a2e37740cdc0753ccff36a59da6cbae15b33e8a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:aa:8d:2e:23:bc:2d:a3:b3:21:69:59:3a:
e8:ed:1e:d0:12:f3:5f:aa:3d:b9:cf:7d:29:10:94:
63:70:92:f1:a9:ac:bf:cb:4c:13:23:91:c0:e7:da:
fe:3a:bb:03:d7:38:29:4d:9e:ac:63:9d:4a:ac:92:
71:2f:58:b6:24:2b:20:9c:d3:95:d6:24:37:23:7d:
a6:1b:03:e2:3c:68:b7:17:cd:41:89:2d:36:72:71:
ad:64:00:9b:3e:c3:06:b1:8e:02:9a:e5:25:6a:b9:
63:f8:b5:2e:7e:a1:47:b0:a1:7a:d1:4a:fd:72:70:
c3:14:8e:9f:72:0d:88:9f:65:08:b3:ec:01:e8:f8:
e6:2d:d6:5a:70:33:79:6f:cb:cb:95:cd:f3:76:2a:
c1:90:48:fe:37:06:93:4c:ea:a2:5e:06:ca:20:0c:
6c:39:ff:7c:3d:0f:68:f1:7f:5c:46:b9:b2:9f:e9:
85:e4:0d:60:1d:e8:fb:92:c6:79:bb:da:39:88:ea:
5b:19:3a:82:9a:02:c1:2a:6a:f3:b3:e0:fd:58:22:
8a:06:15:58:8d:23:ff:4b:2d:b5:f2:d3:1c:0c:2d:
34:a7:68:9c:50:e2:0d:bc:a5:e6:d7:eb:36:eb:fd:
2e:75:85:78:e6:cf:f0:0f:a3:b5:98:37:28:c8:28:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:56:76:FC:F6:88:6E:04:B4:CA:91:30:9B:C1:9E:D6:1A:E5:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:880::/46
Signature Algorithm: sha256WithRSAEncryption
65:ba:26:40:67:2f:02:76:17:3d:2f:10:c6:b1:d9:e1:9e:7d:
df:4a:d5:23:42:e7:f7:38:de:92:d5:95:53:a1:50:6a:01:40:
9f:9f:f0:07:f1:d5:54:8d:49:85:ce:21:f9:d6:fd:85:f7:39:
74:4c:ee:91:7b:01:6c:70:83:34:6b:4f:33:3c:c0:35:99:fb:
18:95:24:ca:98:ee:1e:10:29:0c:a3:9a:c9:16:bd:19:5c:16:
e1:8b:5b:98:8a:38:3c:1e:50:c6:7e:a6:ad:e9:1f:4a:a9:4c:
5e:3a:8b:37:d8:b0:db:49:f5:8d:bf:c2:a4:14:97:5a:80:91:
23:b7:30:eb:6a:7b:68:a8:c6:5c:fa:74:19:8b:69:d6:0c:90:
c9:6b:0d:7b:c8:19:ea:ce:12:3b:41:18:a6:af:81:29:a0:8b:
1c:f4:7b:20:76:80:c6:11:be:47:02:d8:bc:6f:4e:24:7d:23:
64:ff:ff:fa:54:ea:d0:72:ec:b6:40:57:93:7f:d5:18:14:5c:
84:b7:cd:16:87:a9:ea:73:8e:c1:5a:f9:60:1f:e3:47:dd:d6:
28:6c:7d:b4:e0:c6:22:2e:5b:4c:b3:aa:e5:12:2b:dd:48:f1:
dc:56:f3:eb:0b:68:80:4c:32:8c:ef:1a:ee:5b:b5:60:7c:c8:
8a:23:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:38:29 2026 by rpki-client