Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
File: 7116ef93-bff5-462e-a725-ae90147ffd39.roa (raw, json)
Hash identifier: ZqMojs2Ung6sA7z1SCfQh/D6Bg+eW9TwCwTELSG9c68=
Subject key identifier: 3C:BE:C3:91:7C:40:6A:E0:59:CF:CB:A5:E4:18:83:2D:06:DA:CC:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A09182500402D2E4115CD1AEBA434B5215BEDA6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
Signing time: Mon 26 Oct 2026 05:10:30 +0000
ROA not before: Mon 26 Oct 2026 05:10:30 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:09:18:25:00:40:2d:2e:41:15:cd:1a:eb:a4:34:b5:21:5b:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:30 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=6768a79ab42adeec8a7bdb7129b3767800cfb20e99826034bb547bc184f34db6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:f0:f9:18:b1:d2:f5:e5:c1:0a:0c:47:a6:
93:3a:f5:74:1b:18:1d:d6:be:5d:9e:ec:f9:81:0b:
40:52:10:dc:d4:17:f8:96:a2:09:c0:fa:6a:8c:37:
5e:9a:3f:36:de:70:e1:80:8d:30:31:3d:f1:0f:36:
fe:32:7c:f6:90:33:cf:88:5c:dd:0a:d3:db:7e:e1:
f9:fb:99:66:65:12:c4:7c:a6:68:5e:69:77:30:d2:
a5:55:8e:3a:8f:af:dd:da:ac:33:51:e4:28:90:3f:
96:71:03:31:84:fe:31:84:3b:d5:3d:34:4b:78:ed:
58:a6:b5:a3:1d:99:d8:69:16:84:fb:d7:8c:9b:44:
67:14:fa:c3:f0:44:62:85:ae:9f:6f:e5:a4:f1:7f:
a4:ea:38:06:96:9e:e3:c4:b3:3c:f6:16:9a:e6:5d:
ca:07:2c:96:5e:63:e2:09:8f:2f:b6:94:36:b2:f3:
98:7a:c2:7b:57:89:09:5e:2b:bb:00:92:b6:26:7f:
c6:1c:03:80:9c:e7:31:f7:9c:44:3d:8b:d1:ee:4d:
9b:96:22:33:08:d1:2f:f8:5f:50:fb:6a:f6:f7:7a:
f6:64:59:ec:51:15:25:d4:c5:53:db:24:78:18:24:
56:38:fc:a4:cf:d7:e7:ee:cd:06:1a:b5:e6:22:19:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:C3:91:7C:40:6A:E0:59:CF:CB:A5:E4:18:83:2D:06:DA:CC:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:0a:cc:b9:dc:d7:ad:cf:9b:f8:bb:cf:7f:fc:61:41:5e:a5:
ad:72:20:d9:54:a4:8e:45:b1:93:b5:ec:ad:fb:4b:7e:90:15:
c9:5e:c3:95:ae:f5:a4:aa:e1:6c:cc:66:a6:03:94:24:88:63:
8b:27:c0:6c:9b:f7:75:f1:cf:2f:17:f3:6b:cd:78:49:16:65:
30:63:6c:ff:b9:2d:e9:0a:9c:1c:44:e9:ca:7e:2b:bc:d6:fc:
1b:29:83:c0:ab:3c:d4:f6:20:36:8c:39:8f:e5:56:96:54:11:
1c:7c:f9:0e:ad:60:f8:b8:a0:a7:c4:ee:6c:c5:ca:8b:c3:80:
61:8e:3c:00:ba:ca:af:60:36:ce:dd:54:19:d3:54:3d:a3:a6:
a7:40:fe:95:ca:6c:9b:8d:9d:dd:9b:75:8d:d1:82:61:b3:0c:
6f:ab:b1:f3:c1:c8:bd:ca:9f:f6:12:5d:67:55:80:6e:87:bc:
19:72:e7:cd:ed:12:38:3f:0f:cf:8a:18:f5:0c:07:9e:5c:1f:
d8:df:f5:7a:d0:42:f4:dd:8e:9f:4b:67:d0:bf:d4:51:2f:c7:
45:5e:8f:a7:ee:7e:29:c5:a0:be:9d:5f:fa:61:82:5c:00:5a:
2e:da:4d:bd:88:ed:20:15:f8:de:04:7e:23:b7:58:14:c9:64:
ab:0a:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:14 2026 by rpki-client