Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
File: 7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa (raw, json)
Hash identifier: mom901zmSxprge3N7gN4H7rCQqTtC/CNDMuF4X9Nvn4=
Subject key identifier: 08:5C:CC:0F:58:EE:64:BB:70:D1:59:EB:6B:E6:23:5C:95:D4:98:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6282F4E95678D257F95C1A4A49DB97F9B3F960CC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
Signing time: Mon 26 Oct 2026 04:40:23 +0000
ROA not before: Mon 26 Oct 2026 04:40:23 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:82:f4:e9:56:78:d2:57:f9:5c:1a:4a:49:db:97:f9:b3:f9:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:23 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=3a9dee3e048693c54db133039319348a88e363eafc476611ee7397e8ad85d442, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:f0:76:d2:f1:f8:8a:94:5c:f4:f0:82:80:
9b:77:95:b7:75:4e:9b:96:0c:56:29:69:1c:4a:99:
ac:15:4b:40:1f:4f:7f:f0:0e:ff:3d:56:e5:93:d2:
58:54:40:cb:3d:57:e6:e8:25:c5:32:74:82:cc:f0:
6b:9c:27:f5:ff:d4:ed:07:a4:db:81:4f:3d:ca:51:
c2:4e:07:08:7a:48:73:27:5b:3a:aa:83:9c:43:73:
b7:36:be:f6:61:8a:35:2a:87:21:c3:90:a2:ad:30:
b0:e7:0f:3f:ca:9e:71:72:a1:f5:34:7d:b2:ce:c8:
99:5d:3b:07:55:0e:e5:60:24:d4:63:70:df:37:c3:
ed:8a:d3:26:96:da:9a:f6:41:d2:91:73:fe:06:a9:
a0:9e:f3:82:d7:04:e7:c7:d7:b3:93:d0:9c:bc:f8:
d9:f6:cd:19:c0:0b:0c:b9:50:c5:24:95:f1:65:3c:
63:b0:36:8d:0a:23:bc:76:fb:5c:95:ca:62:64:39:
f4:03:a1:93:30:8d:8a:9d:4e:e2:96:10:be:95:05:
ac:3c:cf:94:52:d3:6b:ea:47:c4:a1:d9:61:9c:e2:
e5:e1:d3:b3:7c:f3:02:d6:81:35:d6:cd:a9:f6:8e:
dc:93:88:f1:95:86:c5:01:32:4c:29:83:6e:d4:00:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5C:CC:0F:58:EE:64:BB:70:D1:59:EB:6B:E6:23:5C:95:D4:98:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:9000::/40
Signature Algorithm: sha256WithRSAEncryption
61:a8:7a:f7:e5:52:d7:be:da:6f:db:82:73:7f:75:a8:e2:4f:
fd:c1:28:9d:5a:49:9f:26:70:08:99:27:7b:f4:62:5d:80:60:
7d:76:8a:37:76:9b:85:3b:f4:ec:23:ba:0f:a1:1d:b6:d8:4f:
82:10:d8:72:9f:51:ad:af:e0:90:24:18:1f:60:77:76:16:2c:
93:2a:aa:a8:23:3c:b2:a6:d7:23:48:f6:a6:9b:94:c1:ee:36:
23:8c:ad:c1:fe:d5:87:05:31:66:15:07:ac:ca:ab:b2:1a:0f:
d7:18:cb:ae:12:47:d6:d0:67:96:df:d6:82:50:4d:33:15:c0:
aa:6c:c8:c9:ae:21:f6:7d:89:78:18:59:2c:9b:80:c2:89:a4:
90:11:78:d4:c1:ca:52:73:66:7a:63:a1:34:d5:e0:8e:99:8b:
03:49:26:6b:9c:0d:f5:ed:ba:2f:25:76:15:40:db:6c:cf:29:
28:6b:0e:fd:eb:52:d1:8f:b9:b8:8d:a0:cc:9a:8e:0e:b1:77:
16:12:e2:dd:eb:70:e7:27:1d:b8:71:8c:60:c7:02:92:15:08:
23:84:3f:59:ee:db:1a:7d:5f:9d:2f:9c:62:62:68:57:68:e3:
b2:a7:34:4e:7d:4a:e3:aa:b6:04:0f:cf:28:97:87:d5:b3:80:
6f:5b:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:49 2026 by rpki-client