Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
File: 6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa (raw, json)
Hash identifier: oonZXxRv3gz35Ded1YglP3RU/B9MWFPJBAjB088DTos=
Subject key identifier: 8E:5E:57:42:79:02:47:21:46:94:B1:5E:3A:A1:88:49:E7:BB:97:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63695DF2D65E9A177A450F8B5550827DC2562E0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
Signing time: Mon 26 Oct 2026 04:40:37 +0000
ROA not before: Mon 26 Oct 2026 04:40:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:69:5d:f2:d6:5e:9a:17:7a:45:0f:8b:55:50:82:7d:c2:56:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4ecbd74d6e4bbff8840305c89ece9b21320cfecc96afd7e56dcdd57613b18bcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fd:3b:07:a4:34:2f:f1:78:4c:54:25:c4:bd:
cd:6b:5c:ae:4e:c9:b9:f3:9e:a2:e4:35:58:06:65:
50:81:83:14:98:0d:b2:c1:68:b2:bb:c9:9d:54:c2:
cd:a7:31:b9:73:04:fa:3c:53:34:00:20:73:69:da:
37:12:a7:f7:f7:60:35:f1:ac:73:2d:2f:07:48:61:
38:f7:3f:55:7d:b2:d2:24:1b:a2:81:fd:7e:49:57:
58:db:3d:9e:cc:76:6d:4d:50:08:90:74:3f:bc:2c:
4e:60:c7:7a:bc:5c:6f:61:e2:09:ae:d3:a1:e8:ad:
3d:60:4b:29:75:3d:3c:02:79:e8:2e:29:b0:36:d3:
bb:22:dd:a6:dd:57:10:e8:1a:1a:0d:36:50:2b:50:
08:2b:2c:60:65:3b:5c:6e:4b:13:bd:97:c8:8e:37:
cb:16:58:87:04:61:e5:32:9f:b3:b5:f9:47:02:b8:
f3:9a:bd:39:ca:6a:b6:d8:3b:21:02:b5:3c:0d:3c:
ff:cb:14:91:12:e3:cd:64:0c:5f:9f:41:0c:ca:55:
8c:b2:77:5c:d7:73:1f:96:84:cf:e2:c2:68:7c:9c:
00:93:e8:0f:18:cb:91:6e:11:e2:64:ca:f0:46:71:
05:ea:1c:fa:af:5e:1e:92:c9:42:14:2e:7c:c3:23:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:57:42:79:02:47:21:46:94:B1:5E:3A:A1:88:49:E7:BB:97:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:c000::/40
Signature Algorithm: sha256WithRSAEncryption
18:ad:ed:4f:89:bc:de:66:44:fe:a6:50:b8:69:01:27:b0:88:
d4:56:6f:8e:71:72:e6:8d:f9:36:ed:33:53:49:90:c1:9c:72:
cc:95:07:0f:2c:7c:0e:32:af:f8:b3:62:be:a6:a6:97:3b:84:
e1:6d:d7:4b:0a:3e:39:f7:06:ed:e7:c6:fb:6e:43:a1:1c:4d:
4a:89:b6:51:a3:24:92:60:29:a1:84:e1:2e:7e:bb:bc:e2:6b:
fb:8d:97:90:05:42:c9:13:4b:e5:7f:27:8b:fc:da:e7:4b:74:
f4:54:a7:58:3f:9e:52:61:53:30:ca:cb:15:c4:bc:a4:93:eb:
73:0c:14:24:2f:29:ea:64:8e:70:b2:4c:6e:ad:5a:54:a1:63:
1c:b6:ee:a9:98:6c:ec:55:35:6c:d9:fb:51:52:3f:a7:3d:04:
54:92:05:c4:09:7b:44:9a:f8:23:fc:7c:d9:9c:9f:21:0a:8b:
55:25:96:4c:5f:65:47:bf:eb:4e:ef:c0:ca:e9:20:ae:06:75:
95:48:4e:ae:20:36:da:10:ce:36:e5:89:ec:06:e5:4a:d5:6b:
17:b8:6d:53:21:30:a5:67:3e:99:0f:cf:23:c3:1e:f2:c6:29:
17:cb:76:30:61:a3:02:2a:e2:7c:df:a6:de:41:c0:98:b5:a8:
1d:02:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:32 2026 by rpki-client