Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
File: 593bb6f2-1ee0-4352-97de-e329502838f7.roa (raw, json)
Hash identifier: iYWkKXd1RJFdvLXLr7RCqTjSA63VyOhTwYkBNgijAOE=
Subject key identifier: 0E:C0:F2:15:6C:81:1E:29:DA:F7:D8:83:0F:59:26:BE:31:6A:3B:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27F8F0A17A7EBA17AD19CF964A5267A90E1093F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
Signing time: Sat 24 Oct 2026 02:02:58 +0000
ROA not before: Sat 24 Oct 2026 02:02:58 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f8:f0:a1:7a:7e:ba:17:ad:19:cf:96:4a:52:67:a9:0e:10:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:02:58 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=c7725b5233654066d51961a84c7e4b2d1f8e37fff8718423222441fb75257631, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:af:04:1b:5c:e4:12:df:f5:fe:71:7f:e8:
50:d5:98:d4:3f:07:a9:c0:31:31:c7:61:56:6e:15:
df:83:ae:8b:17:3e:70:5d:49:85:63:83:61:ae:65:
11:de:fa:90:65:0c:3b:75:5d:c0:6d:f8:36:80:af:
57:7f:a4:55:d6:38:89:56:ea:b0:13:b9:aa:16:3d:
75:87:53:e6:21:97:ba:e2:ee:ef:59:3d:f9:09:6c:
42:97:33:9c:67:b5:73:5f:35:d7:d1:5a:d6:e1:80:
c8:2a:a0:e9:14:fb:46:3c:fb:72:cc:90:4f:b2:b5:
98:8f:13:5b:3a:2a:b8:2d:38:90:37:82:1b:c6:a2:
a3:92:68:8a:70:70:55:a6:0e:13:d4:1e:ec:d1:8a:
a0:9a:c3:c8:be:05:24:5d:c7:50:30:e3:cb:47:93:
c8:0a:ba:ae:d1:23:9d:88:44:40:b7:cf:d6:70:ee:
eb:ac:95:9d:d2:34:89:b5:44:62:68:42:0f:cd:70:
e6:a1:62:d3:d5:51:ff:4d:e5:46:61:9c:b6:6e:95:
d8:ff:bf:a5:b1:46:a9:b5:89:25:f5:28:0e:91:95:
87:43:46:0f:c5:6d:a1:90:ab:91:1c:62:f6:49:93:
75:f3:68:d4:5b:9f:a8:1a:67:6c:23:39:2e:51:82:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:F2:15:6C:81:1E:29:DA:F7:D8:83:0F:59:26:BE:31:6A:3B:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:800::/40
Signature Algorithm: sha256WithRSAEncryption
7c:3e:7e:f0:b6:ed:c1:ec:e7:ce:e9:5a:54:86:12:41:40:67:
ad:e8:0f:70:63:68:8d:49:e4:bd:05:98:7e:fc:9a:54:f7:ff:
ae:83:fd:b4:c7:55:6b:8e:42:4f:85:ed:a6:67:eb:52:71:9e:
6d:63:f5:ac:12:9e:7d:c6:5b:cf:f6:f2:7d:72:19:8d:4f:df:
e0:00:93:2b:48:84:02:e8:33:69:33:b3:e2:ea:a8:9a:23:48:
46:07:dc:a3:98:f0:9a:91:5b:98:f9:92:a9:88:9f:37:0d:4e:
db:29:e6:a9:10:32:da:e9:60:a9:9d:8e:81:34:dc:64:81:3a:
a5:6b:5b:15:8d:47:92:a9:b1:b6:7b:76:04:53:20:a9:c2:f8:
13:f5:3d:a8:d6:41:a5:0e:e8:dd:38:10:75:ff:28:01:ed:b5:
e3:df:12:ec:57:ae:7f:ce:64:b9:0f:8f:14:bf:cc:c2:40:e1:
df:37:80:03:48:b4:95:b4:e8:ad:3f:76:74:6e:8a:9a:de:93:
f7:18:97:e6:db:d5:d7:c1:7b:de:e5:5e:15:1c:0c:39:97:89:
a7:9e:e7:fb:5e:fa:7a:8d:4d:94:17:99:c4:3e:a9:bc:1f:a9:
2c:a9:88:a5:6a:7b:21:b0:fa:49:a5:14:f7:e9:ff:af:5b:9b:
f8:cd:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:47 2026 by rpki-client