Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66a53b3f-eb55-4869-ac1a-f83569ee728f.roa
File: 66a53b3f-eb55-4869-ac1a-f83569ee728f.roa (raw, json)
Hash identifier: lgukZNxIehnsef4xGdRsFHdqMJVJTvuM2Bpc9iw+Wbk=
Subject key identifier: 2F:3F:C8:53:FA:DF:6E:21:DE:74:31:73:8B:64:9E:CA:23:B5:C3:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1992AB9130CEFAEEF68CB146E61C6EF98F76ED7E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66a53b3f-eb55-4869-ac1a-f83569ee728f.roa
Signing time: Sun 18 Oct 2026 01:20:25 +0000
ROA not before: Sun 18 Oct 2026 01:20:25 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:92:ab:91:30:ce:fa:ee:f6:8c:b1:46:e6:1c:6e:f9:8f:76:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:25 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=d7e50fcc6afdf737f46cd54c955e53b9bbf91fe78d5754d8c0c3680115c200bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:81:47:c2:e3:72:92:e5:2f:28:63:90:35:
9c:f4:c1:48:ee:99:bf:1d:e2:bc:05:95:5c:f3:ef:
57:9c:ff:8d:7b:5b:75:ef:c7:e1:80:c7:d2:ef:d8:
30:51:9f:e3:c5:7e:4f:55:72:39:29:a8:6a:d8:20:
3e:92:ec:87:d1:38:be:53:cb:77:41:39:01:69:24:
88:cd:76:a5:0d:dc:ad:c7:02:04:f7:b8:38:bd:50:
81:9d:c9:e5:6a:47:71:43:ef:62:73:e3:a9:9d:ae:
f1:c1:bb:88:f5:37:a9:64:69:10:6d:1d:09:33:e7:
9d:39:fb:37:bb:b8:90:4c:fb:72:ea:ad:d9:25:a7:
8b:22:ea:05:d9:36:07:75:0b:cf:f4:cc:40:d7:3d:
ab:0f:1c:94:66:5f:4f:6a:d5:53:2e:d4:1b:63:a3:
b0:57:22:b4:9f:1e:b7:74:0b:68:b6:13:05:fd:3f:
9e:d0:89:86:7b:3f:fb:fa:7c:59:4a:9b:21:4c:a9:
ea:88:f3:d8:fc:3a:9c:03:ac:32:d0:8f:10:02:da:
3d:8f:7b:5e:1f:30:9b:1e:b3:ad:aa:74:e1:76:a9:
32:0d:a8:27:f3:21:73:16:9c:dd:14:96:fb:ab:f1:
49:7b:e6:6e:e4:e3:7d:57:d4:69:19:d0:41:58:87:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:C8:53:FA:DF:6E:21:DE:74:31:73:8B:64:9E:CA:23:B5:C3:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66a53b3f-eb55-4869-ac1a-f83569ee728f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:8000::/40
Signature Algorithm: sha256WithRSAEncryption
13:fd:f9:c2:5f:fa:6a:7f:52:90:c5:87:e1:27:91:d8:dc:1e:
11:24:e0:00:49:c0:09:df:30:55:93:39:ba:4e:e4:c8:b9:24:
c1:5b:86:ac:fa:81:64:26:9f:bb:36:a4:90:b4:5c:db:9e:38:
a1:fe:ad:49:67:13:f7:f4:dc:51:dc:d7:37:ae:bc:db:c6:c6:
86:0d:9f:bf:47:ca:b3:fd:7f:c9:17:85:1a:2a:65:0b:09:07:
5f:80:ce:13:e9:77:74:9a:f2:0d:68:9a:3a:cb:d2:bb:74:22:
60:a5:8a:0e:fc:34:53:5d:ef:4b:2f:6c:d8:8f:07:83:65:0e:
a1:8f:9c:b9:8e:08:92:1f:15:f6:94:04:bd:ab:55:a8:99:1b:
30:b0:b4:34:b5:f6:bb:3d:7d:89:99:8c:0c:dd:1c:f2:80:ec:
72:1e:a8:73:5a:f0:45:82:91:9b:93:79:3c:ca:1e:1e:f5:66:
e8:80:f7:85:11:4a:53:a0:f9:c9:1d:71:12:7b:53:2d:7c:9e:
8f:2a:e4:ae:69:fd:a5:a6:f6:1d:77:72:c4:31:d6:a2:ea:21:
b8:c3:63:24:6e:ab:20:7f:af:c0:5a:e3:c5:0b:e6:06:49:74:
dc:c5:95:81:00:7b:97:6c:aa:3b:19:e4:dd:55:4c:9f:61:99:
14:1b:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:34 2026 by rpki-client