Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: FgISOufk26ub+xJ2F8BnfCGw4FOh65KOgjoS3R1soYk=
Subject key identifier: CA:E4:F4:8A:79:5A:B6:16:99:E3:B9:BC:C6:05:DC:6E:7F:B6:5E:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F65A204EF84D4C4483CB75DE82A20977F43B0F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Mon 26 Oct 2026 05:20:49 +0000
ROA not before: Mon 26 Oct 2026 05:20:49 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:65:a2:04:ef:84:d4:c4:48:3c:b7:5d:e8:2a:20:97:7f:43:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:49 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c6b0d89486ed8204a0aa7a6d955b08bb0b1335b4af114f85869cb341b47fbff7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:ac:44:0e:74:93:51:af:1d:79:fb:2f:87:
b2:68:e1:cf:a5:6d:69:fe:d8:23:56:e2:50:f4:de:
be:fa:5c:8f:7c:c3:3b:64:d3:0e:f9:3f:21:3f:3a:
9c:bd:0c:1b:8a:b6:20:cd:eb:c0:d7:11:62:33:d3:
0f:05:3a:04:d1:20:a0:b9:94:58:f9:c4:a2:7d:f8:
96:f9:5d:6a:ca:ae:b2:68:ea:b0:3a:28:1d:68:38:
9a:95:a6:f5:b6:c5:bc:25:7e:d8:8a:43:b4:b2:04:
41:65:82:04:7b:97:47:57:ac:96:e4:da:cb:d1:e8:
49:de:64:90:b4:71:29:69:b3:51:c7:ce:a8:d0:43:
cb:c0:94:98:45:08:2b:8f:3f:e4:b4:7b:8c:f3:15:
7e:de:0a:5e:1c:e0:f9:58:ce:ac:b9:50:fe:22:52:
14:b6:6c:d9:c8:c8:c4:b7:c6:33:59:4b:a3:5d:dc:
ca:82:b4:e6:2c:7c:65:d1:01:44:43:f2:6a:ed:6c:
9b:35:18:78:18:25:b4:42:40:39:f6:14:ae:1b:fb:
56:a9:cc:f7:eb:58:4b:56:a6:e4:b0:7a:d6:cb:f2:
c5:9e:49:1c:2a:31:24:e6:64:03:38:26:20:b3:c7:
e3:55:75:5d:05:ab:14:67:ab:4b:fc:6c:b2:85:4c:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:F4:8A:79:5A:B6:16:99:E3:B9:BC:C6:05:DC:6E:7F:B6:5E:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1b:6c:f1:7f:48:df:8e:7f:25:3f:0f:8d:2a:a1:a8:f1:46:
2e:6a:ad:40:91:c4:1b:ba:b5:cf:4c:84:34:a3:cc:7d:7d:01:
5e:23:17:9a:d8:5b:f4:f7:91:59:80:dc:2e:c7:f0:d2:67:19:
82:9b:fb:0b:20:c7:c4:e3:42:68:0a:da:d6:c0:44:5b:bd:b9:
5d:00:c6:7e:33:61:ee:a3:b7:36:3d:18:0e:53:bb:09:f3:d6:
b5:0a:52:85:51:86:ff:ea:cb:8b:c6:fb:ca:2c:25:10:be:f2:
7d:10:ca:01:28:0c:2e:4b:7b:d0:ce:16:f0:45:84:bc:6d:b7:
5e:d5:64:51:38:da:61:8d:5a:a6:95:c8:dc:30:f5:d8:82:58:
1e:81:70:80:82:ed:2a:b0:35:dd:58:2c:04:0d:96:11:ec:4a:
c4:90:63:6e:ce:71:a7:6d:3f:9f:b0:6b:8d:36:a0:fd:d3:15:
02:57:94:d4:ab:9e:c9:9c:48:0b:f7:52:ab:69:5b:65:ef:9f:
e2:56:13:64:c7:75:a4:45:a9:ff:50:81:a3:bd:77:0b:bf:7a:
48:23:af:05:b8:d4:97:b0:bb:39:fc:06:d6:51:3a:d3:86:69:
ce:69:df:55:b6:73:56:66:2e:6a:3a:bc:17:48:59:d3:c6:7b:
cc:a3:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:22 2026 by rpki-client