Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57cdb107-9a3c-4e41-87e2-149f989f7fae.roa
File: 57cdb107-9a3c-4e41-87e2-149f989f7fae.roa (raw, json)
Hash identifier: fsZgovu1DgtQgB2yK2eGQoV3yet6SYs+s/bufOA8+NA=
Subject key identifier: FD:FF:AD:8D:B3:21:0B:87:6B:31:7F:35:54:64:DB:53:9F:28:CA:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72217B1DBD8136AFD573617A672FF4B45C03B2D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57cdb107-9a3c-4e41-87e2-149f989f7fae.roa
Signing time: Sun 04 Oct 2026 00:30:12 +0000
ROA not before: Sun 04 Oct 2026 00:30:12 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:60c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:21:7b:1d:bd:81:36:af:d5:73:61:7a:67:2f:f4:b4:5c:03:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:12 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=e10babece39daf15e07542df0be78ff77c596caeb451ee4f46a4fd528b8496f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:92:9c:18:3e:8c:2b:1d:86:a2:55:1d:cc:
bf:bc:2d:68:df:98:8b:0e:84:1d:23:82:1c:30:3d:
be:9e:f8:5b:34:67:7d:46:05:02:8f:76:cb:31:a7:
1c:bb:2a:c3:54:a9:be:d6:7a:94:38:d4:b1:b4:9a:
83:6a:b8:0b:ec:cd:c1:05:be:f5:65:bc:75:b9:22:
be:39:66:f1:c5:63:f1:57:27:c2:b5:fb:a9:74:c7:
9b:31:67:8e:d3:2b:58:2a:1a:94:1a:f0:f4:d0:41:
f9:c9:05:e4:81:0a:77:e4:f7:67:fd:f3:ea:84:89:
b0:b5:45:59:e7:73:ce:44:c7:2f:93:4b:1a:00:ec:
38:92:9b:b3:9c:41:b0:cb:bf:5c:59:f9:bf:1b:19:
c0:1c:06:a1:9a:b0:ef:a8:61:bb:8a:54:62:82:8c:
f9:8c:55:c7:25:8e:32:70:6e:1a:7a:66:9d:11:c6:
b9:13:5e:6c:e5:62:71:43:63:28:9b:42:49:d7:45:
e2:dd:a0:2b:ac:91:fc:56:26:d3:ec:4c:b4:86:5b:
04:2a:ed:a2:bd:2c:f9:c2:f5:f2:3a:44:55:21:ac:
4a:ab:0c:80:69:3a:a2:7e:d1:2c:73:52:1a:e7:41:
f4:8e:96:dd:55:73:0b:ee:54:89:f9:c0:32:39:4b:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:AD:8D:B3:21:0B:87:6B:31:7F:35:54:64:DB:53:9F:28:CA:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57cdb107-9a3c-4e41-87e2-149f989f7fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
c3:2e:a2:ee:25:18:aa:b5:a7:ef:ea:0a:d1:c3:6a:1e:0d:06:
fe:fe:d0:d2:15:cb:49:6f:a9:4a:09:97:79:dd:4e:28:1b:1c:
00:9a:8a:73:a8:87:83:9f:86:04:2d:7a:71:d1:cd:f6:91:c3:
3a:3a:14:fd:7e:66:33:8e:d6:fc:44:26:80:ce:07:8c:11:47:
a0:4b:bc:4f:03:70:f5:15:83:7b:34:25:d7:4e:42:ca:0d:9b:
9b:0d:0f:80:c8:ae:9d:01:b4:5c:98:96:f1:54:1f:f1:7a:53:
ae:80:62:60:63:99:14:13:56:89:e6:28:b7:0b:08:22:f8:4a:
12:eb:e7:4b:8f:f7:20:06:d3:2e:55:dd:e8:8a:2b:65:37:bd:
ea:71:6a:5f:b3:40:24:d7:d8:85:2e:aa:0a:c3:a3:f0:ff:b7:
9f:49:45:d8:8b:03:cd:5d:09:e2:0e:2a:28:1b:7e:31:38:78:
39:79:0f:34:c8:6b:43:26:93:01:16:b4:11:67:87:fa:15:41:
55:f9:65:d1:ed:b5:5f:e7:02:ac:0e:47:48:6f:e1:dd:cc:0c:
e6:a6:6c:1e:64:2b:3e:f7:94:f1:d1:64:71:c0:d8:ed:d8:a3:
69:5a:5e:9e:6b:44:75:d5:53:9c:81:ce:f3:d3:dd:ec:36:17:
39:f8:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:49 2026 by rpki-client