Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
File: 4b0f19cc-b646-49d7-a134-8b1c2659541a.roa (raw, json)
Hash identifier: EUXnzQu7JeSLOT8g9WBd0u8w7kENPwHCwtx7mbcjNGs=
Subject key identifier: 76:66:42:BB:17:E2:19:24:19:56:28:D6:EA:7C:5B:BB:FB:E8:F4:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41D3B52D0F6A67481F72D9F9355BDD54A88D87F1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
Signing time: Sun 04 Oct 2026 00:30:19 +0000
ROA not before: Sun 04 Oct 2026 00:30:19 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d3:b5:2d:0f:6a:67:48:1f:72:d9:f9:35:5b:dd:54:a8:8d:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:19 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=8a208e798946ee0de4e7bd9eaa7513445fe6adfdecd2f6ae9f73f08004d84986, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:f5:22:b6:c2:28:8f:55:69:44:f4:0d:f6:
4b:39:31:aa:01:e7:03:d9:ff:7a:ad:c7:c3:b1:a9:
89:8c:95:44:29:32:0a:b0:b4:d6:08:95:35:a7:1d:
df:3c:6d:96:0f:46:5c:40:73:8b:7b:5a:16:7b:04:
9a:4d:47:b9:35:d4:cf:c4:9e:7e:e4:d4:bc:06:1a:
3c:f0:ea:4c:12:fe:9d:bb:6d:ef:e0:f2:36:3a:58:
88:e9:c2:ee:2a:14:8f:a1:3a:d3:d8:9d:62:d0:53:
7f:93:b5:e1:39:b9:d7:dd:46:0c:28:7a:e7:27:a6:
2e:c2:2d:16:d4:45:6c:b7:7c:df:06:23:4f:2c:b4:
16:50:eb:d1:2c:1e:c6:4e:e6:47:f4:cd:8e:e8:8a:
5d:e6:a3:a3:ef:9f:f9:2f:0b:f5:49:72:15:42:04:
01:26:d8:78:58:21:2b:65:bf:41:54:cc:6f:fc:a6:
68:0f:fd:37:87:72:b9:75:14:64:79:8d:38:a2:90:
30:35:56:24:eb:ac:62:3f:a8:05:3d:e4:6b:55:89:
df:65:31:e5:23:91:52:28:81:b5:c1:ae:14:0d:2b:
92:4f:39:f1:93:82:b7:ff:6a:d7:5a:95:89:bf:cb:
6a:4e:7b:07:72:bf:e3:c4:6f:e5:c4:73:69:1c:87:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:66:42:BB:17:E2:19:24:19:56:28:D6:EA:7C:5B:BB:FB:E8:F4:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b0f19cc-b646-49d7-a134-8b1c2659541a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
91:b0:35:49:53:f7:45:05:fa:d3:50:4a:de:01:58:38:76:63:
21:e4:9f:dd:0a:d2:77:f8:ff:33:99:6e:ad:9f:84:cf:51:d6:
57:37:24:e5:93:60:aa:fa:53:13:74:72:21:bf:83:4c:cd:57:
b6:69:62:3c:f8:df:7b:b3:6a:11:89:86:65:32:69:04:2d:2c:
73:bd:cd:59:40:f0:c3:ab:59:12:21:56:9b:ea:3a:f4:39:de:
90:9e:f6:a1:c1:17:07:2b:fd:15:1d:6d:59:4f:95:a5:cd:0a:
89:ab:0c:ec:08:e2:21:fb:ca:30:86:3d:e2:fb:78:f6:89:45:
2f:46:32:55:60:fb:89:81:7c:e9:1e:0e:d6:24:b7:26:12:e2:
d4:b9:79:fb:e3:42:a0:b9:01:d6:f0:8b:f4:93:e2:5e:2e:80:
40:6a:e5:7a:02:f6:e0:76:45:d8:87:8c:21:8f:dd:c8:e7:16:
59:76:59:ff:79:c9:2f:c6:a5:d9:69:1d:60:26:26:14:55:73:
8e:6c:50:4c:14:d1:b4:6a:6a:d6:b7:c1:71:b9:48:bf:b6:1a:
ac:64:a5:38:b3:72:5b:e7:ec:5c:54:ad:50:82:11:39:5e:f8:
30:76:db:ee:f3:a8:60:ac:f5:5b:7f:a0:b3:82:e1:44:d2:ed:
50:6b:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:23 2026 by rpki-client