Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
File: 88e98e26-39c9-4a1c-82e8-cc63267ca942.roa (raw, json)
Hash identifier: ipySIub8P/uFhLoHixrOGc0g6yAJk9bZ4OxeXFoF0/A=
Subject key identifier: A9:43:F2:6E:A2:EC:A2:18:03:7E:7E:C5:FC:A8:BC:29:BE:BE:D1:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 75B6536C183EB5936F9521CBD1091BD66E16DD35
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
Signing time: Sun 11 Oct 2026 15:08:09 +0000
ROA not before: Sun 11 Oct 2026 15:08:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b6:53:6c:18:3e:b5:93:6f:95:21:cb:d1:09:1b:d6:6e:16:dd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=6611ed89de1eadba883a03c1dbc89b2a0c933fe7d1d411badcae503e609f6712, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:b2:41:6d:31:e7:0b:f0:be:95:2c:ed:b4:
83:5f:c1:f5:3b:89:af:55:c7:1c:d7:6d:6b:b6:9a:
2f:79:00:3c:be:7c:3c:28:16:e1:89:db:30:80:24:
36:0f:21:c2:7f:47:60:95:a8:9b:75:cf:9e:b7:3d:
9a:72:1a:86:74:7c:cb:4a:d8:71:ea:30:fd:fc:32:
db:dc:2b:13:ca:95:c2:a7:32:5b:33:92:7b:74:80:
a0:b5:42:a1:1b:fc:d6:69:50:16:92:5a:66:9c:e1:
59:32:56:18:8e:a3:3e:8f:dc:c5:71:9f:1a:12:0b:
d8:5b:6f:9d:eb:53:66:03:dd:8b:40:92:60:87:ed:
97:2f:bb:0d:9d:2e:04:02:9b:66:e4:ee:d7:58:2e:
34:01:8a:7b:b3:f8:87:10:92:74:10:47:28:7f:66:
48:c4:d9:1c:96:83:59:67:1e:e1:8e:ca:4c:b5:ee:
c8:c7:0b:98:a8:d7:f2:2b:de:a3:76:aa:6d:1f:07:
67:54:ac:ac:ed:18:b9:f5:30:1b:76:4b:ea:a8:5b:
53:2a:35:b1:bf:53:19:85:7c:5f:cb:a9:e9:7b:4d:
87:63:d5:b8:f3:b5:40:fb:a4:b3:7e:a0:ee:ed:ec:
d0:1a:44:38:00:dc:8a:54:9e:79:a8:ce:0b:ef:95:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:F2:6E:A2:EC:A2:18:03:7E:7E:C5:FC:A8:BC:29:BE:BE:D1:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8020::/46
Signature Algorithm: sha256WithRSAEncryption
82:80:07:a5:19:d1:99:88:26:af:42:5d:fb:43:73:dd:bd:6a:
b2:0f:57:28:52:16:12:b5:f3:0d:ef:a5:e0:a7:51:66:17:f3:
9e:18:7c:fe:0b:6d:6d:45:a4:f0:4f:5f:7f:56:a0:e4:e3:d6:
f1:02:fc:69:9b:0d:74:e7:55:a8:3a:54:c3:c9:2c:f6:ec:69:
86:1d:7c:59:b0:4f:25:4d:2d:11:46:79:a8:be:55:a6:42:c4:
0d:01:7e:8d:ca:99:cf:66:9b:b0:2f:7a:11:c6:0e:c3:8d:af:
3f:36:d2:88:46:f8:30:09:27:a2:ea:e2:7a:a4:11:e1:34:61:
19:5e:1a:8f:c6:1f:15:f2:e3:5b:33:c1:72:08:89:3b:f2:3d:
f9:e2:f8:ae:23:e1:26:43:a8:01:66:94:6a:b8:6c:39:6f:db:
10:64:6c:74:0e:a2:2a:8d:e7:f3:6d:ef:82:d5:97:28:3f:28:
89:67:78:80:78:0d:1f:83:d7:54:c9:0b:d3:de:b4:2e:74:6d:
ef:49:60:bd:96:61:9a:e1:85:29:ef:2e:a6:3c:09:83:af:be:
7e:40:64:43:aa:c6:ac:75:23:28:1d:3f:e2:36:35:72:23:c8:
88:93:0e:98:f5:bf:65:67:20:1b:7c:09:97:32:c6:14:f9:59:
f5:69:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:40 2026 by rpki-client