Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcde19c-85ea-4e4c-b31b-859be4055425.roa
File: 7dcde19c-85ea-4e4c-b31b-859be4055425.roa (raw, json)
Hash identifier: TpMwGqVsDWWv8auZWdv1e2V39G7EL9muILj1bkSVfW8=
Subject key identifier: 72:42:E1:42:41:CE:E2:01:0B:8D:47:41:B8:0E:82:CF:69:47:F6:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C9DE7B8F32D1AB528C374605C1FD7CC5E47F649
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcde19c-85ea-4e4c-b31b-859be4055425.roa
Signing time: Fri 09 Oct 2026 01:30:35 +0000
ROA not before: Fri 09 Oct 2026 01:30:35 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:8800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9d:e7:b8:f3:2d:1a:b5:28:c3:74:60:5c:1f:d7:cc:5e:47:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:35 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=7ae4d806019ea0eca279662aba3f8d0e4041e7867e4d76fb64f065435e68c437, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:fd:b1:21:be:2e:eb:b7:96:81:4e:e9:b9:
6f:d1:5e:1c:b7:6b:d4:db:47:31:52:5c:35:78:42:
1d:d5:1c:59:47:17:32:a3:60:96:08:87:02:b6:f7:
f8:50:07:84:3b:5f:88:4a:f2:f1:8d:17:fb:28:74:
34:5c:8e:59:3b:7c:98:1b:a6:a7:56:33:85:e0:bc:
c1:51:92:b0:dc:bf:30:d7:f7:0c:88:87:8b:27:b0:
e1:5c:11:58:26:05:91:8d:92:f8:42:a5:8a:60:38:
12:ac:16:00:c1:58:e3:8f:d0:39:0a:50:e6:ed:2c:
17:52:f4:e6:c1:19:ef:0e:80:98:43:25:04:40:33:
c1:98:99:17:06:cf:24:b7:09:8f:86:92:0e:19:9c:
8f:54:3b:b8:d4:ae:c5:d9:2a:6f:01:fd:48:2a:df:
3c:04:c9:85:c4:42:a8:55:eb:ef:31:08:a4:69:92:
2e:af:0d:a7:41:bb:5f:3e:82:ee:dc:dd:07:80:70:
8e:90:f0:7d:73:01:da:af:11:06:07:c2:65:2d:58:
33:2c:fd:95:69:5f:a0:56:60:77:bc:2a:55:ce:86:
9b:c1:d6:aa:f6:48:62:9d:af:29:6e:95:78:da:1f:
6e:cd:fe:85:87:a9:a0:9b:c0:b3:99:8a:c9:88:ab:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:E1:42:41:CE:E2:01:0B:8D:47:41:B8:0E:82:CF:69:47:F6:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcde19c-85ea-4e4c-b31b-859be4055425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:8800::/48
Signature Algorithm: sha256WithRSAEncryption
64:cc:76:80:38:7e:51:1c:ec:f0:ea:42:61:f5:c4:c6:30:7f:
30:62:46:87:ca:9b:40:71:65:58:ee:0d:7f:8a:45:4b:49:c0:
76:2c:8d:32:b0:6b:2f:fa:55:bb:08:42:19:91:6b:56:71:6c:
45:49:c2:11:cb:3b:21:3f:15:e6:90:b2:19:5a:ee:98:be:4b:
d1:81:ac:51:e2:93:98:ff:37:28:be:90:ba:fe:6d:7d:b8:f6:
45:64:d0:83:bb:3f:4b:a2:1f:22:a1:04:70:6b:b2:d6:0f:a1:
1e:2d:01:8e:8e:be:ad:e9:e6:e5:ad:74:8a:93:8c:38:69:b1:
f0:72:81:b7:47:f9:90:20:8a:f5:35:cf:36:1f:3f:85:8e:8d:
d7:0e:c9:01:73:8d:e6:1d:d8:10:fb:12:68:54:c6:65:bc:9d:
6d:90:fa:34:0b:e6:4d:91:5e:7b:c2:a6:dc:27:9b:20:d2:9b:
5f:0a:97:63:60:45:59:36:82:1c:a1:64:93:cf:51:25:9f:77:
85:03:20:37:d8:43:a8:8d:4d:a9:cb:d6:56:3c:9b:1e:ef:95:
33:92:b0:37:b0:4d:0a:f6:02:56:c1:a4:e2:77:60:b1:d1:a4:
12:ef:7b:11:ae:fd:45:f4:a6:79:01:36:2f:fb:52:bd:ef:f8:
86:4d:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:46 2026 by rpki-client