Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
File: 492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa (raw, json)
Hash identifier: 4jFJ/6fnf+8YxeeuEcg2u3fAjZNkb0Shi3Gi5A6/pUE=
Subject key identifier: B8:7C:15:A0:3A:B1:29:FA:D3:3C:25:29:90:82:B5:11:95:AB:60:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E85CD6714C327879A62C3C158992133E1FC1A8B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
Signing time: Fri 09 Oct 2026 01:20:11 +0000
ROA not before: Fri 09 Oct 2026 01:20:11 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:85:cd:67:14:c3:27:87:9a:62:c3:c1:58:99:21:33:e1:fc:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:11 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=89830ba04916362aafb240c8b0a7276ca2afe7a240754e7fbc1ce571daf4fd48, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:f3:88:30:7b:58:e8:52:bc:62:a0:02:8a:
e3:65:dc:79:ab:59:65:85:66:d3:ed:ca:79:7b:ac:
e4:88:28:fc:63:41:21:85:45:2f:cd:80:57:4f:65:
fb:ea:f4:cb:90:c9:49:fb:d2:26:c4:42:2b:84:d3:
da:1e:db:58:03:6c:8a:ec:37:5d:72:90:06:4e:7b:
2a:5d:85:26:2d:11:19:a7:ac:32:aa:51:79:d5:06:
ed:ec:55:0d:32:6a:69:11:f1:10:8b:04:9e:7f:25:
ba:47:cd:13:65:8d:ee:b3:15:5c:ba:87:b9:c0:55:
c6:b3:6f:8c:eb:81:69:e1:3d:81:59:42:54:26:d7:
8c:97:c0:4d:5e:a1:a7:97:0d:8b:c9:80:be:70:0b:
9b:f5:05:cc:4c:f1:8d:1f:93:9a:21:93:7e:47:4c:
a1:e3:9e:7e:6d:af:d1:81:86:2e:86:ec:c5:70:c1:
3d:c5:7b:a4:1c:5f:56:b6:a5:be:29:86:83:f8:b1:
b7:d9:78:13:a1:ba:ae:4b:19:0a:74:94:c9:61:3a:
88:cd:80:69:94:31:f9:fe:64:3b:d0:4f:6e:e8:f6:
22:78:2e:04:8c:66:d4:d7:71:b9:97:f0:be:08:af:
40:a0:80:30:c8:a9:44:3f:0a:3a:cf:2e:1a:2f:a3:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7C:15:A0:3A:B1:29:FA:D3:3C:25:29:90:82:B5:11:95:AB:60:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:2080::/48
Signature Algorithm: sha256WithRSAEncryption
a1:91:ff:af:56:84:a1:58:d1:fb:0a:f1:de:12:ce:6d:b5:1d:
57:4c:c9:26:47:c8:a4:0b:37:c3:52:a4:79:0d:91:13:9f:89:
19:e4:70:dc:d8:ad:d6:b5:0e:36:1d:37:50:77:36:28:a1:56:
4c:1b:59:b9:dd:5c:f5:62:74:94:f3:d6:f7:4d:e7:0c:fc:0b:
38:41:de:77:2b:ad:15:ac:26:ad:c6:f3:09:26:8f:1b:d2:a1:
cc:06:d1:f3:3c:5a:4a:a1:fb:2f:3c:e9:bb:62:af:f2:e0:71:
50:b2:69:7c:5f:6d:ee:a8:5b:63:f1:8e:2e:5a:70:c0:40:9d:
82:7d:0f:b4:33:24:e4:1f:f3:01:7c:f0:92:f7:16:5b:4e:67:
1b:41:b7:d4:b3:97:5f:5a:5a:71:15:7d:9a:80:ae:09:90:d2:
96:47:aa:23:20:3c:5a:8f:7a:8d:a5:c0:73:27:11:1c:c4:cf:
f3:10:7d:94:07:f6:ce:f7:cc:cb:d6:21:10:a2:48:0d:41:8d:
c5:7e:9f:40:94:b9:bb:c6:3c:9d:e3:86:1e:c7:16:e5:ba:59:
4f:77:94:3e:7d:e5:79:9a:3d:96:73:e7:ba:f1:69:96:50:7d:
83:5a:59:60:2c:40:dd:93:8f:e9:e7:20:c3:7a:b5:a0:76:09:
01:25:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:24:52 2026 by rpki-client