Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7621c219-1d36-4d98-a0bd-377af4967f1e.roa
File: 7621c219-1d36-4d98-a0bd-377af4967f1e.roa (raw, json)
Hash identifier: yxAq5xX0TdqaA3PAHP7BlnWwWTtcZViOgMdiR58i6do=
Subject key identifier: 7C:90:65:ED:5D:98:13:56:5D:A2:C5:90:F1:A4:44:E9:F1:34:C1:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D712434B46B575E36A124454FF43C7F53D8AD4F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7621c219-1d36-4d98-a0bd-377af4967f1e.roa
Signing time: Thu 29 Oct 2026 01:03:02 +0000
ROA not before: Thu 29 Oct 2026 01:03:02 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:71:24:34:b4:6b:57:5e:36:a1:24:45:4f:f4:3c:7f:53:d8:ad:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:03:02 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=39c59948502c291c96872558b1723a7d859dcd9c454083d26d8cf548462388fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:81:c6:71:0b:24:a1:32:d0:c5:24:c5:2e:
5e:24:32:19:bf:c6:22:80:9b:1d:5c:cd:e5:ab:90:
32:3a:a2:a2:80:ee:74:07:bc:b5:ec:3b:77:91:bf:
b7:7c:75:6b:fe:81:3f:44:05:20:cc:aa:f2:b5:2d:
73:d5:fd:e4:be:be:c5:06:e4:b2:1d:91:ef:6a:5d:
3c:43:3a:cd:3b:c5:db:85:bf:29:35:e3:37:fb:51:
4d:fd:77:c4:63:ee:5d:50:ec:9b:b9:de:fc:81:4a:
44:5e:83:d4:0a:56:e9:42:d6:af:55:6e:1b:ae:8f:
8b:82:2d:d1:bd:f4:ba:60:09:1d:26:c0:ce:0a:70:
ba:3c:13:73:7d:e5:49:97:cf:5d:eb:6c:9a:db:43:
29:ad:3e:f5:cb:cd:4a:3d:79:c8:1f:cb:29:c0:67:
5f:c8:08:98:f0:ee:19:76:6d:e2:89:25:83:f8:00:
13:2d:ec:55:a5:45:35:4f:7a:51:fd:4c:bc:39:cc:
d8:41:41:bf:25:3a:44:ba:09:d6:2a:65:9f:65:5a:
b9:3e:e0:54:95:1c:a9:06:66:2b:2f:3a:4c:b6:ec:
ea:3b:12:34:79:d6:19:13:4a:38:81:96:e2:85:4d:
64:f2:4d:22:da:0b:f3:8d:ea:ae:05:92:43:4d:ef:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:65:ED:5D:98:13:56:5D:A2:C5:90:F1:A4:44:E9:F1:34:C1:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7621c219-1d36-4d98-a0bd-377af4967f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8080::/48
Signature Algorithm: sha256WithRSAEncryption
78:59:8d:34:be:ce:99:8d:af:e2:af:e8:8b:1e:bb:00:3a:fd:
08:c3:b1:40:85:ba:b0:6f:d6:95:9b:45:9d:1e:a4:60:13:00:
1e:fd:b3:b9:63:d0:d6:06:68:fb:fa:14:f2:50:f2:b0:5c:0c:
70:ff:f0:64:19:b4:ae:99:da:85:6b:a5:0f:6d:bf:6b:39:06:
19:d5:41:0e:4d:95:5a:1a:f5:51:87:ef:46:30:b7:ac:48:3b:
ec:d7:7a:eb:80:6e:f9:93:b0:0b:8f:5b:ac:6f:61:53:4e:dd:
ee:9b:d7:49:33:18:b0:08:b6:68:6d:df:34:8f:d1:d1:e0:5d:
cb:61:3b:66:5a:37:a3:ba:39:86:1e:b0:c6:e5:12:73:0d:b5:
6d:c1:ae:6a:4c:51:e3:b9:ef:29:2c:71:be:1e:fa:2f:83:2d:
a3:36:4c:70:5e:38:be:fc:52:b1:1f:4e:40:ca:3c:29:4f:d1:
c8:78:da:6f:ae:9a:5d:d7:b2:d9:2e:8c:5d:3b:39:ee:56:45:
79:6e:40:d3:f5:9b:97:61:4d:89:92:a0:06:71:ce:dc:21:1c:
da:89:36:99:2e:16:10:66:c1:98:e0:20:9b:bc:2c:2d:62:c4:
25:ca:59:a7:05:98:61:a3:e4:ab:7d:9e:bf:e0:0c:93:2d:51:
0d:0f:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:43:08 2026 by rpki-client