Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7faac5a8-c482-4a8a-8670-ed6a8130467d.roa
File: 7faac5a8-c482-4a8a-8670-ed6a8130467d.roa (raw, json)
Hash identifier: Bop4KkFUfq6iuvc395CeoaVPdGzoJfoSml+M6s22dCM=
Subject key identifier: 6F:95:E8:27:79:F5:CB:5B:A2:F5:E4:83:96:BE:E8:20:19:41:C1:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 316BBEC86DCB65B702BD73399CB0E1AA67A7EE0C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7faac5a8-c482-4a8a-8670-ed6a8130467d.roa
Signing time: Thu 29 Oct 2026 00:50:06 +0000
ROA not before: Thu 29 Oct 2026 00:50:06 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6b:be:c8:6d:cb:65:b7:02:bd:73:39:9c:b0:e1:aa:67:a7:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 00:50:06 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=d1ab389f01606e9553babfe785d3274023ecdf7a47385e133e7a121ec792261c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:8a:d0:21:6f:48:01:1d:46:ec:c4:8f:18:
dd:4e:81:a5:a2:43:fc:81:58:c3:1f:04:db:37:bc:
fa:f4:9d:29:33:e3:db:a6:1d:27:79:21:e4:e0:93:
d6:4e:d7:1f:a1:cf:79:20:2f:da:7d:ce:2a:fa:97:
44:00:2d:4c:40:e1:48:8f:a1:3e:92:65:e2:ce:a7:
d7:7e:28:44:fc:49:ca:d6:8a:4a:77:05:39:94:0f:
93:f1:2f:e1:3a:13:c5:a1:b1:a4:41:e4:5b:70:63:
00:75:43:21:72:a5:6d:13:44:a0:40:b9:6e:7d:c5:
46:d7:66:fe:91:3b:c8:75:7b:1a:78:74:8d:c7:1b:
42:4d:07:fd:5b:da:9b:3e:8e:75:49:a8:12:01:51:
90:f5:94:ec:2d:05:3a:fc:dc:0b:e2:2e:8c:a6:e4:
97:4b:62:d0:cf:04:9a:d6:31:4a:49:e5:48:34:92:
d5:84:62:a7:27:d9:d9:74:40:33:7f:6b:7f:57:76:
e4:2b:3e:3f:17:ed:5d:69:d0:61:34:db:86:d8:e3:
9b:a0:70:4c:44:a7:6f:cc:c5:b9:1c:14:3d:c9:94:
1e:7e:1c:42:75:b2:13:42:aa:48:f6:62:9d:b6:cc:
d0:a5:d9:f2:56:0d:78:79:c5:19:36:8b:88:26:34:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:E8:27:79:F5:CB:5B:A2:F5:E4:83:96:BE:E8:20:19:41:C1:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7faac5a8-c482-4a8a-8670-ed6a8130467d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:e080::/48
Signature Algorithm: sha256WithRSAEncryption
1d:34:00:93:8f:a3:2b:86:01:b5:32:0a:1f:ad:15:f3:c2:2a:
b3:54:ce:03:dd:06:f4:f2:3c:e7:7a:5c:af:aa:1d:7f:c7:ad:
6f:8d:cc:19:1e:2c:34:50:33:66:1a:19:67:e6:75:d1:a7:b3:
03:54:5e:d9:77:8b:06:9f:a4:33:53:77:c1:7c:44:db:02:09:
37:6a:87:d0:1a:24:28:d7:66:54:87:8b:b4:be:13:11:c8:22:
0b:61:10:f7:6a:a2:92:76:92:db:50:ca:7b:7f:c7:56:e5:37:
37:8e:2c:87:90:35:f9:cc:9c:28:c8:a9:2f:dd:fc:aa:75:e7:
87:7e:e7:54:5e:e9:1f:c7:5d:d4:9b:4e:6e:6f:bd:b3:0d:5e:
64:4e:c1:85:0d:c6:ec:07:4b:99:34:e1:9f:a5:84:cd:0a:6c:
7d:8d:7c:cb:10:4a:b5:3e:a3:70:5b:c8:ea:7a:21:e9:ca:fd:
98:83:45:2e:be:48:6f:5d:fb:4e:5b:24:a1:f5:94:17:a8:bf:
79:33:0c:d5:c9:54:cf:0d:2b:4e:47:2b:b5:9e:23:75:bb:ff:
56:af:84:50:b7:c9:0e:4c:19:5f:26:83:88:fd:33:c1:d9:bc:
12:74:71:4f:2d:74:1d:b6:a7:12:08:d1:16:d6:0d:4a:65:c6:
60:46:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:36:58 2026 by rpki-client