Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier: DvCU4Z1ScmmZua6Ka0NrgBjYNROEu0H8E1Du87MNejc=
Subject key identifier: F9:03:AD:5B:00:E2:E9:A5:03:C4:1C:3F:81:E0:F2:AF:86:9E:38:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56277AD935155F61DD5B880A077A4BBEEC847B41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time: Sun 11 Oct 2026 15:08:10 +0000
ROA not before: Sun 11 Oct 2026 15:08:10 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:27:7a:d9:35:15:5f:61:dd:5b:88:0a:07:7a:4b:be:ec:84:7b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:10 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=482ec161da4e912cda965696755f21cd80d207df9e6ccb8a672245a987fad50f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:01:c5:e1:83:b0:1e:ee:31:29:3f:5d:2e:
d7:90:db:b3:6b:05:94:d2:b9:66:62:79:ca:bb:0c:
ab:04:1f:3d:9a:2d:12:2c:9b:63:f3:20:65:39:bd:
d5:a6:ae:34:0a:8e:0d:9f:42:63:b9:4e:00:e9:7d:
17:6a:73:81:d2:e7:9a:83:b8:ca:06:56:7c:2a:13:
f4:d6:c4:19:56:84:9b:bb:1c:96:df:96:7c:ac:d2:
11:cd:78:4d:9e:ce:48:68:46:2a:a5:70:bd:12:16:
0d:3f:0c:59:f5:f1:f9:47:a9:1f:1c:d3:70:c8:6d:
56:04:e4:a7:59:15:9c:b2:e8:3c:99:b5:07:e4:b7:
b0:fa:52:d1:99:67:ab:a3:81:96:9c:8c:d4:25:9b:
42:40:6b:6f:2c:57:14:2d:a2:a2:68:b6:89:d6:ea:
69:3e:2e:9b:26:d9:33:cd:02:2a:e7:b6:e2:8a:18:
44:88:85:3b:76:b5:c8:b6:63:de:92:9e:54:fe:3f:
ad:00:cb:86:ca:7e:87:57:06:d9:9a:de:59:d0:7b:
42:69:a2:72:4a:98:93:de:f8:0e:ee:cc:3e:0e:34:
ac:e4:65:6c:68:8b:b0:b3:04:a6:4d:34:ca:a8:61:
75:10:84:26:b7:3b:d8:f1:68:5c:15:e6:83:04:d9:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:AD:5B:00:E2:E9:A5:03:C4:1C:3F:81:E0:F2:AF:86:9E:38:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
b4:b9:72:14:56:cc:04:d5:15:0b:95:bf:f4:c6:bb:01:e9:b2:
01:15:80:cf:ba:29:43:40:a9:ac:53:ac:a1:8a:ab:3f:33:fb:
a9:55:93:fc:de:34:43:4d:bb:0b:ca:0c:d2:02:b3:58:34:31:
e0:4e:80:5a:bd:c8:37:67:41:13:8e:50:62:e2:33:65:a5:c0:
ef:9c:f1:35:1b:b7:57:93:db:c8:e1:18:c0:2c:85:a9:84:53:
42:13:96:0a:88:5c:10:c6:96:50:47:4c:5a:1b:1e:ef:8b:3f:
66:75:84:1f:85:37:5f:41:79:cb:72:c9:2c:41:e7:ca:20:d7:
f6:5f:3c:d1:07:8a:5d:30:96:04:90:7d:1c:ea:86:9c:34:e6:
3a:b1:2c:37:a2:6c:9f:03:c6:af:7e:36:bb:a7:c5:d2:53:c4:
73:d5:e2:aa:d2:56:37:bc:12:1a:67:3f:d0:ae:bc:8e:bb:d2:
fc:ae:94:b6:aa:2c:38:64:86:7b:e2:29:eb:a0:33:96:b8:68:
1b:b7:6d:19:de:e5:66:2e:50:f3:fe:61:34:06:34:56:43:fd:
8a:14:42:72:83:ce:23:df:a6:cf:9e:a7:79:00:b0:13:e9:20:
ff:e4:28:66:b3:99:2b:7e:e9:28:cb:46:e3:7b:e8:6d:13:39:
98:9b:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:10 2026 by rpki-client