Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
File: 834ff2b2-55b6-4011-9d9b-451a7311335d.roa (raw, json)
Hash identifier: NZmoI8O+I3J1SvT2JAbCgfWwiLoDMyLY1vG9M/kzNy0=
Subject key identifier: B1:1E:84:D4:06:BC:28:CE:6D:DB:11:10:98:2C:98:6D:F8:C7:06:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 454CD7161151E3F9F783BDC8C8FF09C96D8D2B81
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
Signing time: Mon 26 Oct 2026 04:30:43 +0000
ROA not before: Mon 26 Oct 2026 04:30:43 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4c:d7:16:11:51:e3:f9:f7:83:bd:c8:c8:ff:09:c9:6d:8d:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:43 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=069ce0a442677059791d9848fa1c687b9e1d1a5dc6977fadef78ac32bd6537c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:89:15:6a:32:4b:e4:11:8f:bb:59:b8:8a:
12:69:af:3e:4f:80:16:4b:1f:dc:e6:cc:97:b3:1a:
90:2f:60:39:f8:04:8d:61:ff:6f:d9:53:fe:43:cf:
02:6d:db:fc:60:8a:56:d4:f9:74:b1:3c:b9:5c:59:
2f:78:d3:bd:8b:f9:50:5f:ad:e6:46:05:47:df:66:
34:00:bb:e9:73:10:23:81:7c:ff:7d:e3:be:f0:06:
04:54:08:77:ea:13:fa:4b:4d:fa:e4:0d:e7:41:28:
9d:50:0e:65:d6:d2:cb:2c:cd:50:46:d4:17:8b:72:
cc:5e:15:e1:ef:48:82:3f:d9:12:fb:e3:8f:6d:57:
43:e2:a0:d2:fa:96:92:54:5a:a2:23:59:ba:17:f8:
7b:ac:9c:7b:94:1c:00:0d:5f:85:2c:df:53:03:71:
a5:8c:a3:ca:e0:ff:4c:52:c8:e3:52:63:a3:be:1d:
87:ff:ee:51:b6:67:8f:a4:0a:79:7a:cb:9f:2b:a2:
5f:65:c2:c0:47:43:bd:dc:dd:6d:67:04:e7:f3:76:
e5:32:b8:47:7c:a8:0f:04:e2:4f:94:ef:45:b5:b8:
0d:73:36:76:40:b0:81:c6:f2:90:d7:8c:06:be:48:
08:67:ae:6a:d1:f1:2c:04:5f:08:70:2e:74:35:02:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1E:84:D4:06:BC:28:CE:6D:DB:11:10:98:2C:98:6D:F8:C7:06:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:b000::/40
Signature Algorithm: sha256WithRSAEncryption
31:c1:fe:80:e4:41:0f:3c:3e:0f:ce:db:92:ef:ac:0a:ef:12:
5c:7c:01:96:60:b0:8d:5f:84:3f:bb:5e:94:9a:e5:fb:2a:c6:
ac:23:fe:b6:fc:03:47:47:cf:0d:a7:aa:c1:cf:86:a4:87:15:
22:36:de:bb:82:ca:06:f5:48:bd:26:f4:52:2c:64:c0:31:d3:
c0:54:29:8a:c2:ca:5b:02:a8:3b:21:e5:a6:c8:2b:04:97:d0:
a1:a8:10:9b:9f:db:5a:71:17:64:0b:64:7e:0f:c7:31:22:31:
48:90:69:b7:df:e1:e9:83:64:34:e0:b5:73:51:c4:9c:ce:c9:
1f:47:b0:9f:55:82:70:1b:f9:de:64:38:4e:b4:37:56:cd:13:
b4:92:b6:a5:9d:21:77:95:37:51:25:38:1c:a2:a9:ba:0c:a1:
42:4a:65:b3:46:33:28:87:cd:d9:24:ef:cd:10:fc:80:36:ad:
5d:f3:a8:fc:97:a5:7e:17:75:25:5d:dd:b4:34:16:b1:45:f6:
90:7a:8c:03:77:c0:65:52:31:50:41:78:0a:b8:4a:b9:5d:7d:
df:81:25:70:ad:f5:7e:94:cb:31:83:66:07:90:96:df:29:89:
14:a0:76:a3:0d:7f:b5:03:82:d2:c0:5c:6c:9c:fe:bd:c0:2f:
5d:e0:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:34 2026 by rpki-client