Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
File: 76af8472-01ad-4042-b385-078d559d94d0.roa (raw, json)
Hash identifier: x0WFUvrRptNq+gvWjat+vIsTfSEAsHNrM9I568TWpVc=
Subject key identifier: D4:29:17:EE:12:F9:FE:CB:85:13:C0:B6:5F:DD:94:0B:2C:81:66:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B0E8C3B249A5E93CF5A6E4E6283319331E472F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
Signing time: Sun 04 Oct 2026 00:30:13 +0000
ROA not before: Sun 04 Oct 2026 00:30:13 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0e:8c:3b:24:9a:5e:93:cf:5a:6e:4e:62:83:31:93:31:e4:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:13 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=d454dddfe14609c8b1fc8a3a23129c330b1a66363a7d8dd76569621c35f62f5d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:c6:08:00:3e:a9:77:63:dd:91:bc:49:36:
6f:2d:28:8e:21:1a:45:c2:d9:73:5d:3c:53:20:30:
10:81:c7:01:56:e3:ba:b4:f5:09:e0:c2:7f:7d:af:
d7:dc:b8:87:d2:9f:ff:ac:fb:57:bd:ec:71:5c:00:
b7:a4:d8:05:40:4f:19:6f:38:cd:10:48:6c:70:f7:
23:ae:a7:35:07:c0:2e:4a:b5:68:e7:45:12:6d:40:
ef:39:8a:89:32:95:cf:82:83:74:af:f5:a4:cb:c7:
83:2c:86:d3:f9:7d:9c:b2:55:ce:75:a2:47:96:c5:
d8:1d:dc:61:7c:0b:db:ba:c4:4b:4d:44:b9:f5:b6:
07:89:d2:6d:16:45:20:d5:c7:87:db:b4:24:4b:ca:
f4:36:16:2e:4a:85:4a:cd:4b:5c:cc:71:7a:84:2d:
3e:8d:7b:e0:5d:ab:fb:2b:45:52:76:89:55:09:8b:
1a:06:da:5c:b9:34:7b:e6:d5:7c:30:a4:fa:b4:08:
6f:6a:b4:54:38:70:64:20:92:c3:f3:43:2c:6c:f6:
62:17:62:12:4a:c1:8e:a4:bb:1a:7b:7c:60:a2:4c:
36:db:20:c8:c8:35:0b:4d:6f:1a:9b:5f:57:73:6c:
bb:4f:59:1a:7c:92:cf:d2:90:bd:04:5d:dc:cf:25:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:17:EE:12:F9:FE:CB:85:13:C0:B6:5F:DD:94:0B:2C:81:66:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
0a:89:f9:bf:8b:8c:06:eb:66:e6:93:ee:cc:75:1c:62:ce:0b:
3e:b4:b3:8d:8d:94:15:68:68:3a:1a:33:7f:2a:ce:77:41:02:
08:7d:50:05:cc:d3:6f:88:84:98:30:4b:11:c6:bc:da:20:dd:
e4:c9:6d:14:cb:49:c5:11:71:ca:7d:dc:22:2b:3f:af:29:40:
f3:f5:76:9e:29:f6:60:0b:03:77:62:02:02:64:e8:0f:29:78:
d4:48:88:f6:fa:61:dd:58:ee:75:4d:89:a1:62:83:7c:49:d8:
ab:07:a1:85:94:25:ce:eb:d6:a6:b2:64:ae:b9:1d:3d:f8:7d:
62:29:77:33:ff:8a:cf:a0:d2:fd:6b:5f:b8:a3:38:28:d6:88:
ec:55:e7:0a:fe:6f:59:be:64:3b:ce:fe:c0:0a:69:80:f6:3e:
1e:3d:27:98:c4:60:7e:33:7e:9d:fb:ca:9e:2d:8a:5d:c2:d4:
dc:ee:53:db:59:b8:ed:cf:61:8e:01:30:42:eb:60:e5:3a:b1:
c0:26:ea:e2:3e:46:32:d7:87:1f:2f:b3:76:bb:fe:c6:9f:38:
c9:1d:2e:e4:16:02:f7:c3:b7:c7:bb:67:13:88:8d:77:ea:f8:
47:6f:b5:6e:12:01:a4:11:d5:a0:36:82:65:02:02:a2:63:4a:
0c:ef:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:47 2026 by rpki-client