Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
File: 575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa (raw, json)
Hash identifier: 8Jcec2//Pv6FfirAii5i8bKSJOAyop9cPHz6drl5ZFs=
Subject key identifier: FA:E5:CD:FE:E0:06:B2:D4:14:A0:7E:C4:7E:2A:ED:DA:46:AC:F2:9E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14D75512E38B9538ADF5ECDEF5AE5591C058F27C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
Signing time: Mon 26 Oct 2026 05:10:29 +0000
ROA not before: Mon 26 Oct 2026 05:10:29 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d7:55:12:e3:8b:95:38:ad:f5:ec:de:f5:ae:55:91:c0:58:f2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:29 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1eedf9fbebb4525dbc762176e93829fcf46b00d61c4801e49a32b9b21d286e05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:7d:f2:23:27:4c:4f:99:d0:fc:36:22:f1:
bd:9f:30:a0:f8:08:0a:60:c6:a8:8b:c0:33:9a:59:
f6:ac:a5:0c:39:03:3d:4d:4f:b9:e7:e8:66:b6:89:
7a:30:73:c0:3d:94:ee:45:1a:a3:5f:87:bb:24:fe:
2c:a3:5d:60:3f:92:a6:2e:44:f5:bb:46:7b:cd:7a:
93:1b:b9:24:91:18:5e:ab:cf:90:dc:7d:d4:a4:a6:
1f:8e:0b:b1:69:6b:98:09:4f:9f:f1:b3:58:15:da:
31:4e:22:00:b2:89:e6:f8:a4:5c:46:1f:d8:25:b8:
a7:a9:58:43:ce:15:e9:f9:77:73:d6:71:97:5f:a3:
f3:5a:11:d2:1d:08:86:35:11:18:18:ab:e2:9a:66:
16:27:f5:d5:f6:c5:6d:09:07:01:36:d1:4f:c0:a1:
db:7d:1d:91:1c:6b:70:8f:fd:1a:8d:de:3a:98:66:
f9:53:c8:27:0e:90:36:2b:88:ab:83:09:75:b0:fa:
93:81:80:b2:9a:8c:61:d2:ee:84:44:d9:29:16:d6:
23:05:39:2e:ca:a2:90:f3:5b:58:72:08:57:68:73:
50:e8:6b:f4:06:77:f3:fd:78:94:37:cf:b6:fa:cd:
a3:34:bc:f0:9c:fe:9b:f1:32:61:1c:f9:00:64:6f:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:CD:FE:E0:06:B2:D4:14:A0:7E:C4:7E:2A:ED:DA:46:AC:F2:9E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:4000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:1b:ad:e2:ac:71:03:c6:01:1e:f2:f9:e4:2a:eb:c6:0c:56:
68:07:28:6e:01:ed:5f:82:10:02:36:4e:74:0c:19:93:6e:04:
33:bf:c9:87:d9:52:7a:cd:90:5a:19:4c:5c:05:34:7d:cb:35:
bd:07:e2:ce:b1:64:78:16:a8:d5:63:a3:fd:44:27:45:3a:a1:
23:de:4b:c0:3b:24:89:38:2c:e3:d6:38:10:7c:1d:1d:ce:b5:
31:85:ad:97:8c:12:e3:c2:ce:51:3d:83:4f:f7:98:12:73:2f:
bf:c6:f3:e8:d1:86:20:8f:19:ea:4d:5c:83:33:cd:d1:5b:50:
09:97:09:44:9b:30:a2:f5:15:91:18:97:8b:9d:4e:7e:60:30:
c3:a2:30:eb:62:c6:b5:61:94:9c:9c:4c:1d:a5:aa:58:52:de:
14:d6:70:e2:2a:82:1a:3f:de:46:a8:b4:62:fe:1f:4a:fd:90:
a0:7f:be:c5:10:5d:02:8e:22:97:c7:5e:69:52:6c:cf:5d:5c:
3f:a2:69:a2:a9:1d:0c:69:f5:90:8b:00:6c:6c:39:65:53:a5:
f6:12:16:33:24:49:55:94:ad:2f:cf:6d:80:f4:f8:cf:25:c6:
18:72:b7:2f:12:1a:63:94:87:a3:83:e9:99:8e:2c:ff:35:23:
b1:f6:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 07:39:18 2026 by rpki-client