Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
File: 76a60505-d74d-4741-a42e-97a09bb6b2a1.roa (raw, json)
Hash identifier: NmWBKcjUrTOtZghhf4yuiAm8Ng0o58H/glHSPHLveXE=
Subject key identifier: 71:5E:CF:5E:06:E5:93:74:81:38:5C:05:6F:EE:F1:6F:59:A0:FA:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 442980C925F29883C91C04A24033E058027473A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
Signing time: Mon 26 Oct 2026 05:10:19 +0000
ROA not before: Mon 26 Oct 2026 05:10:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:29:80:c9:25:f2:98:83:c9:1c:04:a2:40:33:e0:58:02:74:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=d6a04350815f1e77ab16609e2448c8f5fd5bdfd3271b92a15218242611c8cfa4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:06:2e:5e:1f:b3:e6:0b:06:53:dd:40:9a:
b0:bb:14:5d:0b:a8:d6:48:a6:82:be:48:2f:76:c1:
0d:8d:a5:54:37:f9:9b:2e:8b:cc:d6:35:12:9a:0b:
01:b0:ca:b3:e5:3e:0b:00:a4:4b:3f:ff:22:a8:7d:
05:99:60:1c:86:63:13:f7:f5:ca:7b:cd:38:68:cb:
66:3c:f7:0b:1d:38:a7:f4:39:16:2b:c7:a9:32:e6:
0e:0d:1f:fb:ee:7e:33:c8:a7:46:d0:34:b9:5e:6e:
7a:76:af:b5:c1:f8:81:da:e0:d6:f2:b2:4f:3d:d3:
86:ec:a4:57:d7:2d:fd:19:57:9a:96:d3:77:c0:5c:
67:45:f3:50:6b:d7:fd:2f:2c:a0:7b:1c:a0:25:81:
25:f3:e4:ab:10:c9:90:86:3c:93:f2:21:c8:0a:ca:
0d:11:0a:10:ca:14:c0:22:c5:b4:df:c0:44:af:42:
42:14:74:7a:8b:57:5f:74:3c:ba:c9:8a:90:f6:48:
79:21:66:7a:b1:dd:dd:a4:5f:0d:93:af:e8:d2:89:
c7:6a:ac:73:a7:0d:8c:7d:77:f3:99:43:25:fc:3b:
9d:31:8e:60:3d:28:f6:07:e2:94:ed:e4:8a:be:75:
3c:e5:69:49:dd:18:f1:b4:e0:f2:36:53:29:01:68:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:CF:5E:06:E5:93:74:81:38:5C:05:6F:EE:F1:6F:59:A0:FA:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8080::/48
Signature Algorithm: sha256WithRSAEncryption
6f:e8:eb:a3:6c:85:66:4f:c4:1b:f3:31:6e:2e:9b:3a:e0:5b:
73:94:c3:f9:af:6d:9a:b8:73:4a:ce:4e:4c:a7:c6:91:71:00:
99:36:64:7a:cd:39:25:b6:70:e8:b5:ea:4e:77:13:d4:e9:65:
be:ce:f4:55:87:a7:59:82:1f:1a:ed:03:c8:8d:83:f2:0a:7a:
2a:78:16:0b:53:56:76:b9:af:67:df:ce:5b:57:78:6a:cc:60:
92:1b:e1:8b:4c:50:35:40:2e:55:af:de:fd:2f:16:9b:93:95:
5c:6f:91:d3:44:f8:1b:81:03:ee:43:fa:61:b5:1c:a7:3f:c0:
a4:88:5c:c7:52:ed:1a:b0:3f:27:5d:38:c1:ce:11:7b:20:15:
3e:c3:4a:a0:5a:b8:7f:e1:0c:a9:6f:5b:36:f8:2d:ae:8b:bf:
52:c5:4c:27:29:89:07:04:34:17:d3:22:83:71:1e:5a:ff:77:
39:c0:0d:57:d2:25:e9:2a:3c:d7:0a:d7:47:da:d5:e7:9d:09:
33:4f:7c:96:42:95:63:2a:bf:ad:ed:5e:b7:9a:62:cc:9d:f6:
6e:9b:e5:73:e5:8f:bb:40:c9:96:0a:81:fe:9c:36:d5:04:ba:
d2:9a:8f:db:48:71:05:63:a3:5b:6d:e9:78:30:e8:25:ef:e9:
c0:3b:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:30:44 2026 by rpki-client