Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
File: 4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json)
Hash identifier: VfgOmXTQIrcAfIG2P8dJGZpNFjBelFfdarjG1gTx2Fc=
Subject key identifier: B0:03:8B:6F:1C:32:35:BF:36:23:AB:A5:BE:82:71:70:2C:70:03:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3623C6D8D9212E78039EA9A9E75DABBADF00A500
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
Signing time: Mon 26 Oct 2026 05:03:13 +0000
ROA not before: Mon 26 Oct 2026 05:03:13 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:23:c6:d8:d9:21:2e:78:03:9e:a9:a9:e7:5d:ab:ba:df:00:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:03:13 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8cd72170d6cc225456ae43bc630df30e21ce18c155427570282d4e85a595a974, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:6c:c5:66:b2:d4:b8:2d:f0:4f:7e:e4:91:
f3:41:5b:c1:7f:a5:f8:35:48:43:12:49:81:59:85:
42:85:7a:ad:31:32:3b:46:f0:45:66:45:e3:00:c9:
2d:db:7c:03:63:eb:dc:bf:cf:e8:ab:8c:7a:82:4a:
20:59:be:12:f3:02:9b:85:1e:b3:e0:70:d9:0d:a9:
34:4e:e6:41:e5:26:9a:da:60:41:a9:df:b4:15:0e:
04:2a:20:1f:f6:ec:2c:93:1d:f7:bb:0a:e8:4e:70:
cf:df:55:3c:23:a1:f2:90:a5:be:cb:d1:c9:14:0a:
10:8c:14:24:99:c5:5d:40:69:76:70:24:69:b1:dc:
59:76:85:ed:5c:9a:65:58:48:0f:17:27:59:ae:2a:
06:fe:df:73:1c:28:7d:5a:b0:c6:2f:da:b7:89:51:
36:be:b2:e1:fd:8f:82:ba:79:e3:de:2c:af:8c:53:
60:b9:c4:64:d8:c8:50:92:e8:7b:48:da:4d:7d:df:
09:ed:d7:91:6e:4c:7a:68:45:bb:b5:ff:24:e6:1f:
c7:89:90:a0:52:ca:43:71:1f:c0:65:f1:0a:1e:d8:
be:dd:72:75:46:b8:ca:6d:62:5c:5b:44:cd:01:18:
d4:8a:a0:21:cd:1e:6a:bd:90:2b:2c:18:89:f8:83:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:8B:6F:1C:32:35:BF:36:23:AB:A5:BE:82:71:70:2C:70:03:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:2d:bf:d0:32:a2:47:d7:4f:08:12:2d:38:5e:f0:a8:d2:9c:
a7:3d:92:6b:c2:41:d1:56:22:e3:64:a1:d7:90:43:6f:92:46:
da:89:8d:0a:84:8b:c3:a7:aa:1a:13:c6:33:a0:77:25:b1:60:
04:bf:2d:72:94:7e:4d:e1:3a:77:87:27:1e:6d:80:2d:59:84:
4a:c5:62:e4:51:9f:da:45:94:c8:ee:47:59:5e:e8:34:2f:ef:
29:ab:fa:68:4a:2e:2a:f5:71:04:ee:aa:ab:03:de:91:8b:9b:
66:81:77:96:b2:f7:02:3b:19:1c:bd:c5:47:aa:82:62:1f:79:
e8:ed:58:6f:02:50:30:d6:bd:7d:ea:3e:27:5b:eb:70:02:47:
6a:8d:6f:bf:29:6b:70:72:61:34:27:9d:53:b2:59:f2:51:84:
27:a5:ed:ae:37:26:a0:e5:b0:60:ff:6d:35:70:43:8a:06:a9:
c2:e9:6e:2e:0c:14:b8:0c:fd:6e:5a:b5:82:0d:2e:43:63:80:
9b:b4:06:fb:de:86:06:40:de:93:bd:ca:c7:e0:fa:11:d1:35:
4d:b3:78:e1:22:72:22:70:52:30:71:7b:65:69:34:c9:b5:f6:
fa:49:6d:f2:ca:fe:e6:8c:b5:b3:9f:23:64:d9:5b:20:36:c9:
5f:49:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:35:52 2026 by rpki-client