Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d099fc6-0ea8-48b5-93c9-41448bd91cb5.roa
File: 6d099fc6-0ea8-48b5-93c9-41448bd91cb5.roa (raw, json)
Hash identifier: VxNhntiaet92a9v98KYyrrXJRyu+Mubdjk/NsAsd8xo=
Subject key identifier: D3:06:21:C8:0F:1B:37:83:B4:58:68:24:AC:D8:B5:AA:66:13:B8:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77526D305E592E6C233CB3D991762A48EBFF4D5F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d099fc6-0ea8-48b5-93c9-41448bd91cb5.roa
Signing time: Thu 08 Oct 2026 17:24:47 +0000
ROA not before: Thu 08 Oct 2026 17:24:47 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:52:6d:30:5e:59:2e:6c:23:3c:b3:d9:91:76:2a:48:eb:ff:4d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:47 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=6e1da18ddf0045dcd5389fe0905abe4557ee25803267bb5954aa76dbb8c1e9d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:26:bf:d5:1a:c2:40:10:3a:2b:fa:47:ed:
e4:ae:1b:90:25:c2:a6:c2:73:b9:c4:7a:16:ed:83:
7f:a2:19:ed:16:57:78:01:ce:78:1a:0a:fb:20:94:
52:1d:e3:ad:c5:cb:32:3a:ee:c5:ec:82:c7:4e:53:
29:ad:e5:91:77:97:05:ce:1c:05:65:a2:1d:41:1f:
56:e9:c4:04:fa:ba:0d:b3:46:9a:b6:8c:73:48:15:
73:be:a8:29:e1:fc:aa:c8:6a:dc:be:93:13:fd:bf:
2a:3d:e6:1c:74:b8:ad:21:fa:44:1b:62:5b:96:81:
2f:18:47:be:d0:52:97:c7:fa:72:3e:ac:57:17:c8:
be:e3:e4:48:7d:42:12:e7:11:61:e8:c9:c8:4b:a7:
62:73:9d:3b:b1:77:f2:e7:f2:81:0c:5f:d0:f0:c8:
2c:ca:00:ab:d8:10:74:79:8c:69:47:7c:f7:1f:7f:
1a:0b:a2:94:ee:35:7b:00:b4:e7:10:3b:fd:59:92:
6a:09:4f:7e:7b:3a:0e:2f:4f:6f:12:c2:49:f6:95:
00:b2:82:c4:d2:7e:f3:35:c3:e7:40:c9:e7:65:6a:
40:6a:0a:e5:6e:3a:b8:ae:a8:fb:23:c3:d9:65:5b:
42:55:95:55:97:ec:75:c0:2d:0a:14:63:95:07:e5:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:21:C8:0F:1B:37:83:B4:58:68:24:AC:D8:B5:AA:66:13:B8:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d099fc6-0ea8-48b5-93c9-41448bd91cb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:c000::/40
Signature Algorithm: sha256WithRSAEncryption
29:d7:86:e6:94:3c:e2:73:23:46:0d:98:0a:71:29:f7:e5:29:
63:7c:9a:a1:e3:b6:b9:f4:b8:32:de:1d:fa:93:07:72:7f:8e:
8e:30:a9:6c:4c:2c:7c:db:06:04:f8:7c:38:9b:0d:0e:00:73:
08:d4:ce:32:fb:a7:22:20:c0:6d:84:a2:9b:ff:45:c7:14:ea:
08:21:a4:a3:16:4b:33:2f:2e:4b:40:14:5c:d4:20:36:72:ea:
16:91:ef:0e:17:a6:ec:6b:1c:3b:82:3d:37:6e:4c:44:25:05:
c5:6c:24:c8:d5:57:be:38:0c:ca:34:22:ce:6e:4a:15:74:29:
c6:02:7b:52:08:3f:17:0d:5a:6a:2b:e2:0c:f9:d1:99:1a:55:
f0:dc:e1:42:14:a1:ba:26:55:95:5e:9c:af:e1:14:8a:91:a7:
f5:c4:be:b6:f4:91:d7:e3:77:2e:52:a4:de:bc:6e:65:94:97:
45:5a:a7:77:e4:ef:85:5f:d6:2b:4f:84:84:f2:72:4c:be:38:
b4:59:de:79:25:f2:ed:16:35:02:b1:a2:5f:ae:99:24:7b:d5:
0c:c6:aa:2c:63:d4:70:dc:1d:2c:7b:30:a5:de:b7:d0:b9:d2:
14:c7:af:24:8d:69:bb:71:98:18:82:bd:25:ec:3a:45:c4:87:
93:e5:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:43:30 2026 by rpki-client