Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa
File: 4875c926-8b00-4b21-bffa-08659e5c223d.roa (raw, json)
Hash identifier: dHd7kolYxIBVs+eeRh7RGjHk0ieEzmssp5LeY1eOctA=
Subject key identifier: F8:76:F1:A6:A1:DE:2E:C8:5C:A5:0C:FD:0C:27:31:ED:B5:25:EE:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37A5C9007B99C301F51AA5BE2E2CF8A4C0750C7F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa
Signing time: Thu 22 Oct 2026 03:50:05 +0000
ROA not before: Thu 22 Oct 2026 03:50:05 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a5:c9:00:7b:99:c3:01:f5:1a:a5:be:2e:2c:f8:a4:c0:75:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:05 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=63bff76b329166f2070cb60cafd427a13d75b9af87bc5cbf8f009bda0d5478cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:da:7c:45:76:ab:3d:b5:1d:b9:07:8a:51:
41:d8:9b:9b:45:54:cb:e3:78:80:b5:10:f1:d3:05:
14:b1:bf:ab:94:5b:b8:f4:d8:35:93:9c:0b:e8:c2:
56:f6:8f:04:df:98:5f:23:db:49:54:32:2a:ab:b8:
83:83:3b:2a:fd:f7:6c:af:aa:34:25:ce:70:4f:3a:
10:dc:9a:e6:9a:24:05:08:c1:1b:20:69:4d:59:7f:
12:06:ac:62:60:db:d9:d5:59:d4:33:f4:72:4b:53:
1b:31:66:21:9c:10:6a:6f:ec:ff:7b:76:6b:6b:b0:
b6:94:ee:b9:71:c8:e6:3c:f5:28:9f:61:64:8e:0b:
ef:ef:95:e0:34:d8:9b:f1:fa:ce:ab:dd:56:24:ca:
04:bc:01:e1:2f:84:86:7c:50:ab:4f:d6:e7:a2:fc:
ae:94:eb:e6:c6:1c:cc:4a:1a:d4:d6:30:1f:1b:8d:
c2:1c:59:82:84:81:4a:50:d6:31:1d:1a:a5:72:44:
13:36:f8:97:9e:97:af:76:cf:1a:7f:52:43:bf:dc:
ec:74:0a:f8:3e:71:85:0d:25:31:f7:29:ec:76:af:
eb:0b:ec:1d:3a:63:50:95:06:45:3b:d2:b2:8f:5b:
b5:7b:62:8d:c9:fe:cf:67:96:3f:b9:c8:a7:f3:9b:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:76:F1:A6:A1:DE:2E:C8:5C:A5:0C:FD:0C:27:31:ED:B5:25:EE:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:1000::/40
Signature Algorithm: sha256WithRSAEncryption
28:f1:4a:2d:94:e6:b1:9f:82:9c:a9:82:ca:af:4c:f5:ff:b0:
0a:3b:ab:90:5c:1c:a5:6b:2b:08:80:65:d9:f3:1b:e3:ba:97:
8a:6e:86:06:bb:1e:20:81:86:82:ac:ad:ba:3d:3b:21:3e:6f:
37:6b:1b:47:04:3c:69:d6:a0:f2:1a:d7:9a:02:fe:66:75:f4:
3e:d1:57:4f:c2:d7:6a:6a:2d:60:90:55:a0:8e:8e:c0:d3:bf:
e8:c1:90:b4:b6:80:6b:f6:69:26:5b:76:8c:b9:ea:5a:68:a7:
8c:d9:75:8f:1a:48:81:62:44:ab:16:27:09:74:06:f0:03:c3:
87:99:fc:6b:e8:fe:bf:8b:6f:12:c2:e3:57:49:ae:0f:07:5d:
fd:1a:d9:52:d2:46:2e:6e:5a:6c:2e:ca:c9:d7:9a:ef:77:92:
3c:d9:94:88:2b:02:a8:1f:66:17:db:3b:6b:d8:87:d7:99:a1:
0b:07:ab:95:17:6c:8b:f1:62:35:74:ac:10:a2:f2:7d:73:6a:
37:a1:33:79:0d:91:24:47:2c:ad:8e:85:fa:88:12:96:28:ad:
53:cc:9c:83:ca:61:ac:a6:49:f0:82:3c:de:ef:de:c3:b8:e0:
6b:3a:e0:d7:ac:a6:1c:e3:86:52:4d:ef:4c:61:a5:13:c4:af:
e0:80:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:09 2026 by rpki-client