Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a082d12-70e1-4005-8dd1-52b78c0c75af.roa
File: 6a082d12-70e1-4005-8dd1-52b78c0c75af.roa (raw, json)
Hash identifier: fzQ0qnQVvWWSxBI9lce31Yc0xYMyuPsYH84bHTPIliE=
Subject key identifier: FE:87:DC:47:EF:FD:08:0E:BA:6E:1F:A6:7F:7D:03:AE:B5:CC:97:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D2F27490B49C99817D6D7126099ECBB912D9A7B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a082d12-70e1-4005-8dd1-52b78c0c75af.roa
Signing time: Sun 11 Oct 2026 15:20:17 +0000
ROA not before: Sun 11 Oct 2026 15:20:17 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2f:27:49:0b:49:c9:98:17:d6:d7:12:60:99:ec:bb:91:2d:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:17 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=ad197fd90427477f293918ffbb386b4c8b3917417b37a50d4c14c068d2957362, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:84:9b:f0:b3:38:7b:57:f3:71:84:b9:b2:
be:b2:7c:39:e3:f7:34:95:e8:16:d1:a9:81:be:9c:
4c:c7:4b:f5:4e:bf:38:44:90:a2:d0:4d:ed:7c:0d:
27:06:58:54:bd:a5:ca:6c:80:b1:ef:f0:23:3f:46:
5c:5d:cc:2c:71:87:7e:60:b9:47:d1:e6:35:f3:9c:
9b:c9:74:c8:75:04:b4:a2:c8:73:4f:45:6f:96:7c:
99:1a:dc:c4:88:b1:1d:cd:0e:a9:95:f2:75:58:eb:
17:fa:f8:5a:69:4c:f2:47:81:ed:80:be:a8:a9:b4:
72:dc:28:cc:91:a1:3e:39:df:77:3e:27:31:4f:13:
5d:a1:f7:08:4a:07:e7:fc:3a:01:75:cf:71:e7:a8:
3c:b5:c4:65:43:dd:f2:23:d9:0c:ba:32:f8:d6:fa:
e7:ad:5b:b9:93:fa:33:0c:af:c4:49:fb:ce:12:51:
4a:30:c8:1c:5c:c5:06:74:ce:1e:24:4a:0c:74:94:
23:b7:3d:d9:b6:83:9f:73:76:3b:b7:42:77:6d:77:
1b:f5:5b:32:68:bf:8e:f6:36:87:30:3b:3e:cc:8d:
aa:77:ac:1f:0c:4a:dc:31:a0:cf:74:e7:76:67:87:
da:6c:0e:29:1e:29:52:a1:20:de:12:a5:bb:91:f8:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:DC:47:EF:FD:08:0E:BA:6E:1F:A6:7F:7D:03:AE:B5:CC:97:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a082d12-70e1-4005-8dd1-52b78c0c75af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a080::/46
Signature Algorithm: sha256WithRSAEncryption
32:a7:71:b8:5b:59:c3:c5:a7:76:79:c1:03:06:6c:2a:6b:7d:
f0:7b:40:92:83:da:4d:2b:f8:cb:df:9c:04:86:d9:c9:7f:26:
e1:d6:78:38:41:8c:c7:5e:11:14:4f:07:1d:a5:73:62:50:f5:
8b:8c:1c:8c:3d:92:95:0b:2d:06:08:2b:7e:78:3e:7e:f4:e0:
77:c2:b3:7b:ea:36:08:26:34:1e:3a:e8:08:7b:ca:20:30:c6:
86:b3:e9:77:26:84:6a:2a:86:b2:fd:e9:e4:d5:12:29:f2:75:
96:88:30:08:10:54:43:02:16:df:2c:83:7a:52:e3:a5:cf:a8:
52:b5:d0:cd:8f:98:c5:78:d7:8b:2d:68:d0:1c:b0:c1:29:3d:
c0:63:06:1c:6b:46:05:28:b2:ce:c9:e2:4c:db:f4:a8:f4:f7:
56:d2:c1:0c:f0:9f:58:85:a8:b8:b8:ce:85:13:c4:f2:fc:05:
f1:45:fc:36:d5:d5:43:13:20:21:c8:01:c6:31:db:37:e4:c3:
24:17:55:7a:65:f6:a5:c4:7b:01:ad:93:03:cf:b5:4c:30:ea:
b2:41:7f:54:ec:76:99:54:eb:60:0e:5b:79:da:c4:33:d5:8c:
3b:c1:31:30:ca:d9:df:ec:23:e7:91:13:47:ee:b9:3a:75:a7:
3a:9d:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:59 2026 by rpki-client