Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
File: 5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa (raw, json)
Hash identifier: wB+pXIYXQnI4p2VeqskXH5QVliZDZpLacmFesjhCTRY=
Subject key identifier: 91:6A:0A:3E:D0:CD:B7:3A:FB:2B:EC:B2:0C:9E:33:61:79:3F:36:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 276AC41891B2DE0C83FAE44F457BA2EE2782EFEA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
Signing time: Mon 26 Oct 2026 05:03:15 +0000
ROA not before: Mon 26 Oct 2026 05:03:15 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6a:c4:18:91:b2:de:0c:83:fa:e4:4f:45:7b:a2:ee:27:82:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:03:15 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=163cd56a4e0fa2bb4b872ef4808e26f692f90c8e4de9c0ec9d029cc8f3355a81, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:72:0e:31:f1:a3:71:10:08:c2:cf:3a:52:
da:14:ec:0a:2a:df:dc:d3:a1:07:9d:b2:93:94:ba:
27:ce:02:23:66:33:aa:da:c9:0c:04:a0:c3:2e:04:
f0:75:4f:25:91:38:88:dc:34:6d:7e:91:59:1f:1a:
3b:b7:41:53:19:ec:b9:25:28:28:61:77:c4:3c:c8:
1d:3d:a2:62:0f:74:f4:e6:ae:94:9c:87:d7:ce:5e:
fe:87:4f:6e:01:f8:17:4c:a9:6c:5e:c1:f6:28:8d:
6e:c0:b8:cc:cb:3d:13:fc:6f:82:1f:e6:ce:e1:cc:
11:dc:2f:04:64:3b:4a:f3:23:47:51:1c:2c:8d:7f:
dd:98:49:3b:ed:b9:b2:3b:95:11:b0:f4:ec:24:db:
29:ac:64:e0:cf:44:b5:1d:42:71:e3:4a:04:5c:9a:
ee:d3:60:58:62:f1:ff:0f:5a:b9:70:59:9a:92:8c:
2c:44:47:68:fd:8e:d1:ed:59:ed:b4:55:fd:79:f4:
78:bc:44:a8:b4:ef:e8:93:ab:f9:4b:b2:dd:9b:86:
be:7a:be:9d:fa:b8:5f:72:02:6b:69:62:55:ca:88:
46:78:a2:cf:ce:fa:1c:d3:65:0d:0d:82:59:1a:57:
84:cd:7a:e2:1f:b6:75:01:51:10:80:a6:8a:87:65:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:0A:3E:D0:CD:B7:3A:FB:2B:EC:B2:0C:9E:33:61:79:3F:36:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:90:a6:a4:34:f1:d6:96:15:a5:5c:51:e0:f3:f1:91:01:ff:
fb:39:1e:12:fb:b9:92:d6:e0:2a:8b:b6:c6:8d:bc:57:3f:b5:
95:06:d5:07:d5:83:e1:fb:07:03:f1:17:99:9a:e8:36:24:71:
69:a6:7d:59:30:c7:51:7a:d3:97:a1:87:5e:d0:b1:93:af:fc:
5d:b8:62:4f:54:b8:e9:d6:eb:f2:ed:15:10:6a:3a:2f:4c:11:
be:4e:ab:bd:4b:27:2e:fa:12:bf:1b:29:ef:34:bd:05:02:4c:
36:c4:7a:3c:ae:a3:5c:cf:86:56:aa:2b:6d:13:03:1f:0d:60:
5a:9e:b0:f3:08:55:51:07:07:1f:ac:89:e6:4c:64:0a:7f:a8:
aa:27:61:04:42:59:7e:fc:0b:58:e2:1e:26:3a:d1:3c:f2:e2:
db:81:d2:49:f0:62:97:9e:c3:83:d8:0d:8f:6b:f9:a4:0a:44:
8f:96:9a:a7:85:12:24:f6:0c:30:71:99:81:a3:61:3f:76:a9:
35:d2:4f:7c:de:63:2a:c9:4e:93:3a:5f:cf:bd:5d:f6:7a:23:
52:41:a3:cf:98:67:9f:13:cd:23:a9:22:8c:c9:74:bc:6c:30:
9a:15:67:7d:61:01:98:ad:32:3b:87:83:f6:fb:b9:13:05:d9:
95:25:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:34 2026 by rpki-client