Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
File: 45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa (raw, json)
Hash identifier: awqMX0K9a4Z3YaemJlUhn3XVQSlqouQdUPgndS/eCbE=
Subject key identifier: A7:0D:A2:5E:0C:58:58:7C:3B:36:E7:32:C5:E5:4D:EE:73:82:03:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C01BB760EAE015BC044F0ED7F89CFAAA1DE2AE4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
Signing time: Mon 26 Oct 2026 05:02:33 +0000
ROA not before: Mon 26 Oct 2026 05:02:33 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:01:bb:76:0e:ae:01:5b:c0:44:f0:ed:7f:89:cf:aa:a1:de:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:33 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=dd5b6be98488c17361ca6a9ca7157b9dd3082fbacf4adaab0bbfe48b073ecedd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:5c:c2:db:90:c5:bc:09:ab:be:8c:75:e5:
cd:ee:5b:e7:4b:5c:e5:ad:67:98:e6:74:59:94:ff:
e1:ab:3f:d7:07:52:f1:77:97:71:8c:cd:01:cb:7f:
91:09:e8:f5:16:a1:8d:8d:b5:25:3c:6b:af:53:b2:
22:de:9e:33:c3:77:a1:95:ed:9f:58:66:77:33:71:
3e:f8:e9:30:bf:27:c7:17:16:e5:e8:a2:c1:cd:2b:
a2:f3:72:d5:5b:a3:94:40:72:87:e5:94:3d:55:e5:
f1:d8:bc:ab:ef:32:3a:f1:89:bd:5e:9f:48:63:55:
d7:de:e2:89:3b:66:c2:c9:95:60:e0:cd:4e:9d:74:
d4:c0:55:63:bd:54:e1:ed:0a:21:25:ba:06:f4:69:
4d:69:c2:50:ac:e8:27:60:09:35:99:15:dd:1a:62:
89:fd:5d:5a:f6:5e:62:dc:3c:b4:95:c8:a7:8e:39:
4c:fe:46:24:c8:11:1e:0f:9a:ed:1e:a0:f7:63:9a:
0b:86:93:d2:43:92:31:11:ba:75:9d:36:2e:75:f5:
69:43:19:c8:93:0f:59:b2:f0:a7:5e:56:0f:b5:a8:
22:4c:8c:03:cb:ba:03:dd:a3:63:0d:e4:92:08:45:
9e:75:24:b2:98:44:a1:c0:7c:3f:67:f1:4e:ee:be:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:A2:5E:0C:58:58:7C:3B:36:E7:32:C5:E5:4D:EE:73:82:03:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:e000::/40
Signature Algorithm: sha256WithRSAEncryption
86:fe:ff:94:5b:fa:35:c1:71:6b:13:3e:ea:ec:24:b6:e3:df:
a6:bf:e3:57:6d:33:56:df:ff:d1:8a:90:fc:62:04:ee:f6:00:
20:e7:53:bf:0d:72:00:70:b3:57:47:d4:0d:45:e7:40:a3:e1:
b1:f6:9e:4b:f7:df:19:63:f5:a4:7c:91:6d:27:36:14:2d:ee:
a2:c0:0d:04:3f:41:08:22:f2:55:42:2c:e6:fc:16:5c:a4:6f:
6f:a8:7a:41:92:bd:ac:94:05:81:30:7f:21:fe:b6:56:db:24:
c9:3b:27:19:45:c9:3b:c0:32:ca:be:17:46:34:eb:a5:4c:40:
08:c5:78:bf:20:d1:1a:26:98:c5:74:52:84:f0:b6:ab:88:b9:
9d:c1:f3:df:f9:ed:2c:47:cc:95:18:60:c9:7a:bb:ff:59:99:
74:05:a9:fb:6b:76:f7:e0:5c:a3:9d:04:ef:02:1f:bb:93:ca:
30:2f:79:eb:5a:a8:96:25:b7:a4:d5:73:23:3c:de:ce:ab:ec:
c0:06:0b:d3:55:48:9a:e1:ce:50:7f:f2:a4:c2:4f:a0:f5:0c:
10:eb:9b:9c:81:26:8e:62:99:57:d5:ee:9d:b2:99:de:fb:09:
b6:54:d6:50:5c:ed:10:08:2e:62:69:31:d2:82:d7:48:1a:4f:
44:67:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:31 2026 by rpki-client