Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa
File: 5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa (raw, json)
Hash identifier: ThJ9HXJxTJkAbRTHeLhyoHdot3pLljlGXxzgn2gvQNs=
Subject key identifier: 45:B3:F1:87:18:FE:D1:50:13:69:9E:0F:4C:38:24:7F:04:8A:9E:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 330AA0194E13B387F50934FA70325380074E3107
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa
Signing time: Thu 29 Oct 2026 01:02:34 +0000
ROA not before: Thu 29 Oct 2026 01:02:34 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0a:a0:19:4e:13:b3:87:f5:09:34:fa:70:32:53:80:07:4e:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:34 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=fda5e0858879900f165e554ac892876537aca916ff5fe16d0f18f3f62637669d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:e6:fd:61:f3:6c:0c:40:ac:84:a8:03:0a:
8b:f7:5b:bc:58:a9:c1:54:0f:2f:41:7d:92:86:9e:
92:72:13:57:32:b7:04:ce:32:f1:d4:6e:15:16:7b:
aa:96:1c:2e:61:3b:a3:88:05:85:63:fa:8f:d4:a7:
cf:22:21:5f:d1:d1:17:eb:19:7d:ed:6f:d8:c4:cf:
b0:33:3c:b0:63:90:28:44:50:8b:f6:da:d9:b0:61:
35:4e:3c:aa:60:49:cf:16:ee:92:69:b0:40:c8:5a:
d7:bf:ae:8f:6f:16:16:ec:fd:32:e9:56:1c:50:bd:
e4:f4:26:83:90:45:06:32:26:36:e9:9c:17:47:df:
a7:ac:7d:51:fe:2a:42:fc:b8:3a:3b:d1:5d:66:e9:
b4:4d:6c:95:30:e3:d0:8c:66:41:41:e8:1e:d0:21:
8c:ff:bb:7d:e5:fb:72:3d:94:dc:ce:f8:c1:13:04:
fd:af:33:6a:41:91:65:97:6f:17:08:13:46:3c:7d:
df:30:29:6f:81:93:16:31:a9:c4:fc:ce:93:3d:fa:
6b:48:7b:c8:91:6f:d4:31:e9:00:9f:63:4d:28:5f:
80:97:8e:a1:a0:b0:1f:8a:af:54:7f:75:c3:f0:7b:
ce:6b:9d:47:81:2a:97:d2:48:98:9d:12:70:05:1e:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B3:F1:87:18:FE:D1:50:13:69:9E:0F:4C:38:24:7F:04:8A:9E:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c5687b2-1e71-41b5-a2fd-d6a8dd4b35a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8040::/48
Signature Algorithm: sha256WithRSAEncryption
90:b6:59:e3:e0:f7:2d:7b:bd:cb:af:d7:61:ee:62:3f:a1:f0:
97:35:44:0f:41:3c:ab:40:85:c0:59:c5:c1:32:56:5c:62:24:
8a:bf:65:36:a0:60:27:6a:67:d4:6c:92:6d:1d:56:60:e1:ee:
bd:2f:e3:95:f7:fa:76:61:5b:66:3b:ca:39:f8:ae:e3:e4:e9:
b8:ec:a4:55:23:db:d6:e1:cb:f3:c8:7d:1a:0b:c4:74:3b:27:
ee:fd:8d:3e:4b:c7:4b:fa:f3:91:c9:53:42:12:74:b9:c0:31:
5b:b6:a4:f7:46:f2:4f:13:58:13:03:51:4a:68:cd:ad:a1:4d:
fd:76:b6:6f:25:48:50:55:dd:30:d5:43:9f:d6:60:a2:a8:10:
73:71:68:55:a2:25:29:23:ed:18:aa:a1:27:3c:6f:2e:63:dc:
a3:f0:9e:d8:9b:04:d6:d8:a9:89:99:1a:13:fb:6a:ce:8c:e5:
d1:b9:6b:c8:ed:43:dc:ce:d0:fd:70:ae:5f:eb:94:65:0a:ce:
55:82:01:3e:34:33:b0:1f:cf:52:4b:79:0b:ee:f2:62:b1:6b:
6a:30:56:b2:62:1e:92:81:af:5d:8b:71:bc:c6:58:20:b0:64:
32:11:c3:24:60:6c:a4:8e:8d:98:88:21:2d:21:4e:ba:d1:33:
b9:cc:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:42:55 2026 by rpki-client