Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa
File: 75900e8f-9582-4f56-8b92-09a50d5110f8.roa (raw, json)
Hash identifier: CPJCD4GMRtVuL8toEqXzZF0sWZ48kHDenE2BFGsQVps=
Subject key identifier: 4F:91:FD:A0:DD:EB:FA:07:9E:1C:CB:F2:A6:9E:C2:9F:06:B9:04:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 033649634AAC385E0C11E8939D9C01962722C37F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa
Signing time: Sun 11 Oct 2026 15:08:11 +0000
ROA not before: Sun 11 Oct 2026 15:08:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:36:49:63:4a:ac:38:5e:0c:11:e8:93:9d:9c:01:96:27:22:c3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=cb473fd0899034edf9e92af9a5dcd0001c12fff28784ec2c2f082989509a51a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:b6:5b:e6:bc:f1:f2:ef:4d:99:63:24:8f:
81:ae:33:1e:e1:89:da:dc:17:d0:0b:e1:76:f0:28:
cc:b1:83:f5:ec:56:77:ff:4f:53:80:b9:95:8d:2a:
ec:3f:34:f0:7c:0d:82:98:f0:0d:4a:37:e2:87:15:
7f:69:99:47:b2:76:1b:bc:c5:e2:4a:42:b5:cd:22:
bf:d4:96:46:d3:42:bb:c5:a8:e6:95:82:07:68:6c:
c2:d1:a1:ce:f2:7b:6a:4e:0e:4a:95:28:e2:3a:27:
0d:8d:af:0a:fd:ff:2c:e2:df:8d:42:6c:2e:34:b2:
a2:3a:97:bf:4c:20:9d:91:f4:51:8c:fb:4b:11:b5:
1e:22:d3:79:50:2f:e3:7d:9f:51:c2:10:f3:6f:6a:
af:da:2f:75:f0:4b:2e:77:cf:af:51:1a:00:3e:7e:
c3:58:a3:b1:86:8f:72:15:78:a8:1d:d8:de:73:50:
b6:44:c3:29:50:4b:3f:20:07:4e:17:5e:f3:f4:9a:
1e:5e:cd:4c:dd:b2:b5:c4:9e:81:a8:22:35:40:e5:
8e:4d:92:45:b0:0e:14:bb:15:af:94:12:d8:be:94:
d0:42:d5:34:7d:cf:c9:33:b9:2e:d4:65:2a:2b:52:
7e:fa:b4:42:63:af:c1:cc:ee:89:c7:5e:de:15:04:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:FD:A0:DD:EB:FA:07:9E:1C:CB:F2:A6:9E:C2:9F:06:B9:04:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a000::/40
Signature Algorithm: sha256WithRSAEncryption
34:43:ef:0a:47:2a:32:42:87:ed:bd:1c:44:e0:71:c9:54:ec:
44:0f:4f:5f:c6:be:5d:2a:20:c1:8c:42:45:c7:c4:8b:31:eb:
ca:aa:f1:f5:aa:27:74:5a:0c:08:21:f9:98:b1:57:f0:5c:11:
b7:3d:5b:b7:94:dc:85:8b:0a:a5:b0:50:8d:26:93:53:49:ca:
c0:9e:ab:eb:4d:e0:93:2a:f4:a3:e7:92:d3:12:e2:6d:b0:2c:
c9:22:ef:5c:a1:0a:a5:de:b6:05:56:70:ad:b6:a8:65:1a:86:
c5:5a:e6:7d:a2:07:7c:a5:62:5d:43:2f:69:19:e3:2e:67:2a:
37:95:a0:e1:fa:48:4e:9a:b9:bc:50:b8:40:91:bf:00:74:c7:
ab:af:8d:47:e5:ba:38:ef:c8:91:6c:67:10:43:df:9c:5f:6e:
1a:6e:b6:2d:1f:81:3a:40:04:2b:02:ac:d6:b3:2d:f9:d1:34:
11:df:6e:ff:61:06:3c:08:e3:29:76:c2:1e:8d:d3:50:71:a9:
c1:29:77:f3:c9:19:5d:94:2a:a7:62:9b:f2:98:dd:7a:dd:03:
4a:5e:52:b6:cc:02:41:a2:ac:97:4f:55:8d:e7:5f:d0:ee:de:
12:6c:23:ab:e7:dd:ce:ee:7d:3e:75:90:cd:8c:9c:b0:09:79:
fa:a4:d9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:15 2026 by rpki-client