Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa
File: 4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa (raw, json)
Hash identifier: 6Ur68NUD8pr5x/ghSBdeinqAiI+T3gI0fcHeI+Vc7dk=
Subject key identifier: 45:E5:40:87:8B:0B:7A:BC:57:49:53:4A:65:FC:41:3D:35:D8:9B:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22FF5F7FC89CF0DE4B188EBA79AC3A47B6492BA5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa
Signing time: Thu 29 Oct 2026 01:03:05 +0000
ROA not before: Thu 29 Oct 2026 01:03:05 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ff:5f:7f:c8:9c:f0:de:4b:18:8e:ba:79:ac:3a:47:b6:49:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:03:05 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=7a18253a87deafb54f8d48caac07bb61e86af8217d4e133debf8cfc98ea2c5fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:7d:ab:38:8b:6f:8a:a5:d6:c7:57:7d:99:
11:b8:a4:9b:61:58:83:6a:0c:df:5c:11:33:30:2a:
d0:0c:b1:e9:03:de:97:76:cd:d2:1a:da:dc:f8:c8:
ef:d8:94:b9:6b:66:66:ae:f5:27:26:8f:3b:06:44:
1b:8a:4e:32:d1:12:d3:6a:b7:55:75:eb:ef:b1:96:
90:3b:3d:7e:17:b2:f6:97:a4:68:88:94:62:78:60:
16:df:be:a7:15:0a:b7:0e:cb:b9:49:c3:e2:ba:9b:
e0:0d:c8:2c:19:ed:b9:ef:61:c8:e6:8d:ae:41:48:
32:87:f6:12:31:47:2b:8d:70:04:8e:19:21:41:db:
69:90:97:33:0a:f6:ee:75:31:3e:ce:8a:16:3c:04:
ff:71:4e:dd:6f:6c:32:28:3b:fb:95:4d:05:32:40:
eb:f0:b1:70:8e:ee:2b:d5:49:db:cc:6c:2c:cc:6f:
21:8a:0b:5a:c7:c3:27:dc:fc:6a:dc:2b:25:f5:db:
e7:45:46:00:ba:7c:14:5d:25:ec:a4:6c:a0:ed:97:
ee:56:06:a4:23:f9:50:07:b5:ae:95:1e:a8:d7:4f:
f7:cf:83:be:9d:35:02:24:d8:fa:2e:ce:67:2d:7e:
e5:41:f1:ce:92:f4:f5:f9:74:08:df:ca:de:2e:f3:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:40:87:8B:0B:7A:BC:57:49:53:4A:65:FC:41:3D:35:D8:9B:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:9b:b3:79:56:cb:64:94:3d:58:ea:41:6c:6d:00:b8:61:e8:
50:fb:b9:f0:98:ec:7c:6f:83:22:e9:0a:06:c7:06:b4:e7:ef:
5b:ac:0e:3d:f8:33:72:e1:7f:af:d4:63:ed:ba:f2:e5:64:2b:
ad:e8:c8:f0:01:9e:0a:45:22:1a:4b:0d:1d:99:4d:1a:f2:ea:
eb:e8:e9:b8:cb:3a:a5:a9:3b:76:38:b2:f5:68:2a:55:79:ec:
5f:db:69:a6:07:04:13:e8:8b:08:01:05:99:f9:50:32:7c:34:
94:97:45:c6:29:c8:5a:1e:03:13:cb:f0:c8:d1:37:f9:7d:43:
8b:09:d8:db:07:74:c8:4d:2f:5b:12:b6:a0:a3:7f:71:5d:63:
02:3e:3c:46:a9:06:15:c8:cc:fd:36:30:74:42:37:f1:2c:66:
f3:b2:20:8b:51:6d:eb:c5:1f:e1:af:69:ee:aa:09:7a:ff:fc:
49:a3:17:41:4b:d6:7f:e7:10:37:be:50:43:c9:fa:51:9e:c6:
02:c7:2c:18:c8:17:cb:1e:e3:0c:18:06:36:b4:1f:cf:f1:05:
58:00:33:50:71:00:2c:5c:86:59:56:73:0e:10:73:ab:0f:77:
ef:d1:79:d1:6e:b2:6b:58:99:27:fd:27:78:ae:2e:6e:9c:1e:
94:84:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:24:43 2026 by rpki-client