Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
File: 431d8e22-a384-419e-9218-32a80c0ce0e3.roa (raw, json)
Hash identifier: YDQ8wKUMc757nwKQaPAhtkFbQKLbjKfVAj8+R3mVahY=
Subject key identifier: 5B:C8:F8:56:0C:F2:81:92:05:BF:23:F1:5F:78:21:94:78:27:DC:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B13B5A903B6A930CD3E7EF0AE183D9AF6C35921
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
Signing time: Fri 23 Oct 2026 01:50:08 +0000
ROA not before: Fri 23 Oct 2026 01:50:08 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:13:b5:a9:03:b6:a9:30:cd:3e:7e:f0:ae:18:3d:9a:f6:c3:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:08 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=69ad34229d2049fbbc29955a2986120c70fb65d1fab8ec458cb8d3a57ee511b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:ac:a9:f1:89:e3:2c:a2:1a:df:c6:c7:28:
89:95:01:32:da:11:e8:cd:17:5b:e8:3a:4d:02:c5:
91:65:1c:42:49:fc:e4:38:e8:2e:85:f7:71:b4:1c:
52:38:b0:0c:3c:24:96:99:43:44:99:dc:0f:ec:ff:
b3:9f:8d:ae:86:3f:0c:36:fa:b4:76:c0:04:1e:b7:
78:32:9f:10:00:6f:2e:ae:03:aa:13:9e:cd:32:1a:
f2:6f:10:df:4b:90:8b:d4:00:00:24:84:99:13:bb:
8d:6a:27:33:49:c4:9a:2d:9f:5e:dc:5b:4a:44:a5:
82:db:f9:63:ac:e9:9b:82:ae:8e:a2:2a:33:b1:1f:
e7:bb:e8:8e:f6:86:65:2d:fa:dc:48:e5:56:57:62:
8f:91:75:c6:d2:9e:bb:1d:11:81:43:b6:ad:a1:9d:
99:f4:72:0d:39:9e:b6:9a:13:de:f7:6a:b8:07:eb:
58:f1:23:74:0e:53:e6:79:01:ac:1e:93:52:51:07:
40:6b:2e:af:4a:26:eb:63:b6:89:bb:38:81:2f:97:
79:b3:41:8b:59:45:6d:62:59:75:a5:e8:4c:5b:42:
14:d5:87:4e:6c:39:02:6c:9d:ba:0d:d2:fe:fa:e3:
ba:ce:b9:31:4b:f9:44:9f:ee:30:d2:15:78:68:b1:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:F8:56:0C:F2:81:92:05:BF:23:F1:5F:78:21:94:78:27:DC:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:e000::/40
Signature Algorithm: sha256WithRSAEncryption
20:19:c0:57:0b:5f:2a:94:41:12:45:01:1c:60:98:9b:44:0f:
bc:84:dc:7b:cc:01:89:18:b0:af:e7:35:8d:d2:6d:af:d4:cc:
b1:8d:7c:49:20:a4:9c:f5:48:84:66:57:09:c7:36:68:fa:06:
56:6f:5d:03:cd:d2:4a:38:18:f6:bb:54:1f:2c:01:0d:34:78:
61:dd:64:40:da:5f:b1:08:b1:e8:55:ef:32:65:f1:b4:2a:25:
ab:10:5b:12:b1:b3:78:31:d0:19:c6:91:79:da:36:d2:d6:bd:
13:02:4d:10:ee:5b:a5:27:b6:a1:d9:7a:2a:c4:37:be:0b:81:
40:0a:2f:86:d5:de:a7:2e:bb:b7:b1:97:16:16:1b:51:ae:68:
f8:96:9f:2c:8a:c2:bf:08:d5:ff:2b:05:ee:85:a1:2e:d8:ca:
b6:6f:25:f5:eb:1a:4e:3f:10:7a:01:66:52:4e:3e:03:d2:02:
d1:c7:b2:20:87:9f:4c:1d:55:35:c5:a2:b1:05:03:65:38:d4:
25:bf:57:6d:58:8e:29:30:c6:9f:f0:88:04:fa:c1:0c:60:e9:
1e:43:e4:c0:85:62:bd:45:ed:e7:0e:7a:de:f9:74:e0:fc:ac:
3d:84:59:c0:4b:22:91:e1:72:00:f4:96:9b:a1:b8:79:b2:63:
a4:31:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:18 2026 by rpki-client