Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
File: 6fa185be-42e8-4c62-ba43-464d0598c2ee.roa (raw, json)
Hash identifier: PGf8ovyNCzq3Mz3XT9gyPxVz0/65jZApgHiDNjCGbNs=
Subject key identifier: 07:E0:F0:86:74:46:CF:99:07:8F:56:0B:1F:EB:6B:92:6C:84:A8:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03D61114707DA8F51B3BF88019FEB07B841FCB2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
Signing time: Sun 11 Oct 2026 15:20:11 +0000
ROA not before: Sun 11 Oct 2026 15:20:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d6:11:14:70:7d:a8:f5:1b:3b:f8:80:19:fe:b0:7b:84:1f:cb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=47626dbc7983da3b7f41f6a28b376fbc4631e43cbf178ba51280d85a459284a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:56:d2:90:af:c8:09:bf:cd:60:aa:5f:b8:
32:a8:75:7c:ff:1f:27:f8:36:e1:a6:20:73:9c:ef:
cd:4d:4b:41:91:3a:ae:d9:fe:ec:26:0f:51:6b:64:
25:87:43:6b:86:38:24:c3:85:78:90:a8:2b:69:d0:
36:c6:d6:97:b7:17:bc:23:bf:17:2b:26:cc:fd:1b:
c4:6d:f3:a3:04:55:b3:21:12:34:43:0a:2a:9f:33:
e2:a4:67:c9:7c:67:f4:5e:f5:f0:fa:59:de:a4:dd:
2f:1e:19:96:30:ff:c5:a3:f1:5a:af:fe:98:65:d6:
03:fe:26:f1:93:46:af:cc:de:fd:19:6e:5e:79:8c:
9d:8a:ff:c6:62:20:43:5d:39:be:99:27:f0:07:3c:
34:85:fc:16:6a:01:13:0d:96:ea:dd:ec:3e:11:83:
37:ce:fb:22:8b:bc:50:3e:d8:42:f2:3d:dd:49:be:
db:c0:8c:6b:f7:fe:fb:82:15:ab:f4:a4:f2:06:68:
06:7e:49:9e:f6:6b:5b:0a:3d:d8:79:aa:a6:e8:fb:
bc:35:6b:6b:c2:a1:d2:19:cc:00:9b:d5:38:00:2b:
be:33:80:01:6e:d6:40:82:1f:5f:44:50:8a:fb:a1:
92:60:47:4d:26:67:ae:06:f1:a5:9d:60:33:7d:c1:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:F0:86:74:46:CF:99:07:8F:56:0B:1F:EB:6B:92:6C:84:A8:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b080::/46
Signature Algorithm: sha256WithRSAEncryption
9f:f6:b1:3a:10:09:1e:e8:10:d5:cc:9a:5e:84:51:3d:3e:f8:
14:74:49:a8:a8:30:8d:42:3c:17:46:6f:62:78:97:45:e4:20:
3c:f2:5c:bb:a2:46:91:f6:91:62:83:57:94:77:63:74:39:d8:
f9:e6:fc:bb:00:78:11:67:40:31:04:86:02:8b:5a:09:63:2f:
11:6a:c1:a0:4f:4b:46:72:a7:70:d1:09:99:1e:7c:da:aa:8a:
28:b4:b4:bb:b4:38:ed:0a:0f:30:3c:6b:92:f4:6b:3a:d4:ad:
00:1f:d8:2f:af:1c:c6:77:f6:ec:9b:36:78:79:83:72:51:70:
da:5a:df:65:ca:76:d9:88:e4:d5:52:6f:d5:bb:b0:06:6f:3e:
9a:6c:b5:38:64:73:f2:ce:65:99:21:f1:f4:ed:af:16:7d:28:
12:a8:80:fd:90:fb:d4:4b:a7:e6:60:dd:31:4b:6d:9b:a7:98:
fd:bf:a0:de:f0:a7:2b:f0:23:34:2f:3e:04:8c:b3:f0:bd:4f:
33:4a:7e:dd:7b:b4:0f:d6:d2:af:f5:42:8a:b1:99:b8:06:26:
dd:cf:15:7d:e5:73:9c:b7:48:92:67:5c:b9:e5:42:1e:7d:95:
9c:87:b8:a8:f3:2f:63:0d:69:fd:38:49:08:41:fc:e0:3f:1a:
c3:af:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:48 2026 by rpki-client