Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
File: 4a3909fa-da3d-4cd8-918f-7755304d49d1.roa (raw, json)
Hash identifier: GjOUZ+iJJpx2RF7IEUhew+Br4Ti9PE0gFUDaYYOxEjw=
Subject key identifier: 07:2D:08:92:E6:80:4C:2D:A8:27:F3:D1:83:2B:0E:9D:2B:81:9B:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D9A64AE4194F5934D4C032D202825DE3686550F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
Signing time: Mon 26 Oct 2026 04:31:04 +0000
ROA not before: Mon 26 Oct 2026 04:31:04 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9a:64:ae:41:94:f5:93:4d:4c:03:2d:20:28:25:de:36:86:55:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:04 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4b287fbdb2a8a0b5c7f5155b7c98d5d8ef591e4a3bf2351e941fa26b3a8898b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:df:04:8d:a2:3b:f6:4c:e3:73:ac:7d:d0:
fc:d7:51:a9:eb:0d:61:58:61:7c:c3:c6:ba:e8:e1:
fa:2a:ac:67:24:ce:9a:e7:98:b7:0a:50:aa:20:f8:
2a:3d:f6:03:6f:41:6a:e7:2b:5a:fc:53:76:26:8d:
15:d0:4c:1b:4f:58:ee:29:c2:6f:68:f5:6d:3b:7a:
c4:d8:09:a6:b7:5c:63:ea:5f:db:af:58:99:20:5b:
11:8b:69:96:53:b0:27:07:9a:92:76:3e:47:27:ae:
12:aa:7d:cb:42:57:b1:78:9d:08:54:30:b0:4b:e4:
ea:cf:82:3c:f4:f5:56:db:82:93:24:dd:1e:38:33:
be:5d:d8:3d:8e:7d:b5:9a:cf:a5:16:29:c4:02:9f:
87:1b:84:6e:03:c3:b2:3f:c3:82:79:ef:e8:92:11:
ba:02:30:73:7b:7e:97:e9:75:c6:f5:2d:66:1f:82:
59:54:b3:43:e7:b7:db:f2:db:df:c9:05:ae:d3:8a:
86:18:2e:e4:da:ba:22:90:ff:56:1a:9c:49:65:49:
9c:e2:68:a0:dd:14:90:bc:7f:72:35:a1:88:cd:0e:
3a:28:e9:f6:48:b9:fd:40:e2:59:ed:7b:ba:77:1b:
4b:81:18:2c:11:2a:a3:6c:2d:a4:99:9a:40:68:16:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2D:08:92:E6:80:4C:2D:A8:27:F3:D1:83:2B:0E:9D:2B:81:9B:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
88:c2:41:5f:21:8b:d6:91:7b:12:e7:4a:72:3d:bd:e4:7e:a1:
62:d7:b1:6c:03:03:35:d0:ae:31:71:1c:28:5b:f7:c8:05:45:
82:ca:01:7e:c5:aa:2f:fd:f0:e4:6f:c5:63:5b:c4:52:70:9d:
e2:4b:b4:d9:e3:a7:8b:92:74:ff:41:e1:50:5a:7f:58:03:fb:
2a:8b:35:51:26:75:16:b4:95:95:ae:4f:73:5d:2c:49:74:52:
6c:8b:75:89:b9:1d:09:2f:19:3f:35:44:72:3d:9d:7d:06:9b:
a5:dd:a7:14:ab:81:40:d8:e5:06:e0:65:94:52:37:be:31:20:
3d:94:3b:d4:0c:c0:94:8d:a6:92:06:7c:cb:42:38:68:e8:4f:
7f:10:55:e1:d6:93:73:4c:e4:5b:57:e3:b9:61:d0:5b:a4:dc:
3d:2f:0a:53:f7:a2:78:87:ac:a2:35:76:9b:4a:b3:14:59:23:
69:19:cc:4e:54:87:2e:fc:9f:ee:78:b9:3d:aa:fa:f7:16:d4:
e1:8d:74:d1:d3:b1:33:52:e0:ec:54:64:7b:8c:2d:53:5a:be:
65:37:4c:b0:49:bf:b4:58:b5:b1:f4:03:4d:42:0b:57:d0:51:
63:17:24:4c:52:05:2b:f5:bc:9b:0c:59:57:d4:35:fc:36:1e:
c7:22:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:28:38 2026 by rpki-client