Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70636172-55d6-477e-a5c3-1e8a1965e553.roa
File: 70636172-55d6-477e-a5c3-1e8a1965e553.roa (raw, json)
Hash identifier: tRyf26ko4M6zFTPBzrbYv0I5Ljr0uQV1z7iyLmmjgeM=
Subject key identifier: 83:20:12:07:CB:23:9C:83:E2:B4:54:E9:E1:83:35:63:F4:E2:05:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70ED4D3862B3D9BEB60FA0FE7EC65D6222852AF3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70636172-55d6-477e-a5c3-1e8a1965e553.roa
Signing time: Thu 08 Oct 2026 17:24:43 +0000
ROA not before: Thu 08 Oct 2026 17:24:43 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ed:4d:38:62:b3:d9:be:b6:0f:a0:fe:7e:c6:5d:62:22:85:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:43 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=df76e24a0d7de75c445bcee286e7e56542c08086955a84e13a9a11213c845119, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:8a:f7:b8:a2:8c:43:ea:b5:7c:19:41:f4:
72:18:ae:e1:42:70:86:4c:35:d2:34:72:76:11:b3:
d2:e8:b2:0e:11:06:7f:a0:15:8c:da:c0:c9:d9:3d:
08:67:fe:d8:5e:8a:19:91:16:ac:24:cf:1b:12:d0:
1c:93:9c:0d:45:ae:55:df:c3:9f:82:8b:4d:c7:e1:
dd:d2:fc:db:cd:d7:1c:81:4e:9b:80:a3:77:f8:7c:
c4:c2:6a:9f:a0:1f:cb:ab:38:a3:15:77:3a:c2:85:
fb:db:a9:cb:c7:2d:e9:24:1e:67:03:ac:59:03:c2:
b5:cf:25:85:97:8f:3e:bf:1d:a7:3a:1a:90:17:66:
ce:d6:45:38:37:ae:98:f6:a8:1f:75:64:4b:b0:58:
89:f9:b5:d3:1d:a0:c8:5f:7a:6a:89:c0:14:ac:bb:
4d:8f:35:08:6f:52:d6:c3:bd:92:ba:87:51:a5:68:
b2:e1:ff:23:6c:33:95:9f:14:bb:f6:63:46:0b:09:
05:29:fe:30:8f:19:f2:f4:e0:14:57:07:d2:bd:b8:
e0:a7:cd:82:58:67:1d:a8:c8:14:5f:42:b1:39:36:
cd:85:81:7c:f7:84:ca:d2:59:cd:6e:cf:21:44:68:
64:e8:8e:43:21:f8:e1:c0:50:22:c4:14:93:f4:4c:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:12:07:CB:23:9C:83:E2:B4:54:E9:E1:83:35:63:F4:E2:05:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70636172-55d6-477e-a5c3-1e8a1965e553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:800::/40
Signature Algorithm: sha256WithRSAEncryption
c6:73:57:ff:5e:22:98:9b:dd:cf:0a:bc:03:1c:f9:c4:0f:4d:
14:7c:af:14:4e:c2:a7:63:ff:ff:dd:3c:94:a8:81:cd:fb:64:
39:c2:52:e7:73:15:9d:b8:c4:d0:81:6f:53:a4:06:79:6f:b0:
0c:a3:49:bb:ef:5e:ed:d4:57:dc:b3:db:73:e3:18:2e:88:92:
c7:dd:3a:09:00:4e:6a:d9:0b:d6:d3:ff:2d:90:32:e1:c8:e2:
70:0a:d5:20:47:28:e8:8f:80:b4:bf:61:2d:2f:0d:f1:cc:4f:
2d:12:6d:ee:af:1a:bb:eb:31:a1:bb:25:56:20:ff:77:7e:ef:
8a:78:0b:e7:0a:3f:6e:12:42:9f:13:4b:04:fb:67:c6:f9:65:
d8:89:ef:d0:c6:bd:77:f1:2a:94:24:df:57:aa:c1:4c:77:33:
7c:6a:51:84:6f:d3:bf:81:a8:3c:9c:e5:b2:7b:d1:05:9c:53:
22:d3:7e:5d:fb:2e:b4:da:e9:40:3a:de:6c:5f:18:d1:48:ca:
1b:5b:3a:f2:a1:4c:d3:a8:80:e3:53:6e:7b:3e:96:13:0b:99:
fa:1a:ba:6a:61:48:05:8b:f3:da:bc:98:7d:cc:a6:78:d2:be:
9d:45:47:f5:2b:75:9f:cd:80:4d:d3:b0:f4:00:8f:de:e5:a8:
31:d9:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:33:29 2026 by rpki-client