Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
File: 8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa (raw, json)
Hash identifier: PljMep9JVLPl09LXNUH3qxT1zF54mJtvtJdN979ZMFU=
Subject key identifier: 08:99:47:4A:55:4E:78:28:74:58:A5:37:AC:0B:B7:3E:46:30:25:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0385FDE0C7F9D106258AFA9E3445EBFE578AEBAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
Signing time: Mon 26 Oct 2026 05:10:19 +0000
ROA not before: Mon 26 Oct 2026 05:10:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:85:fd:e0:c7:f9:d1:06:25:8a:fa:9e:34:45:eb:fe:57:8a:eb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a64ecf3982fd486d5d530e73aa598131b3e8ef092b3da114aa8611662eecc278, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:d1:9f:fb:33:68:93:fb:db:f7:f0:ca:60:
d6:05:81:c0:29:c2:91:25:22:b7:58:c7:f5:83:4e:
ce:85:b5:65:d7:14:56:9a:f6:b3:14:b1:aa:b4:d8:
ec:f7:cf:95:c0:ae:d5:bb:58:a9:01:8e:08:2c:62:
a4:d0:eb:29:0d:68:69:74:a7:db:87:89:a5:ec:da:
16:62:e6:16:40:79:6a:d4:fd:84:01:89:39:a3:98:
27:98:5b:a9:3d:97:eb:2a:df:26:7d:51:a4:9c:d2:
8c:81:2e:d9:fe:f5:a3:b0:67:f8:70:45:00:65:ad:
d6:2e:e2:ca:aa:9c:5e:23:52:d8:c1:28:40:76:a2:
80:6b:b8:92:b1:6a:e9:63:19:88:fd:bf:15:3f:71:
cb:20:d8:84:69:4c:30:54:fd:33:80:f4:b5:66:b1:
91:64:94:ec:43:4d:b6:7e:6d:4a:0d:74:59:e8:fe:
51:a5:ae:cf:60:98:db:92:cf:44:28:86:4f:ef:5f:
42:83:56:70:c9:6f:f1:ca:5e:f5:37:68:25:62:56:
bc:72:c3:dc:09:96:ea:78:89:e0:0b:a2:c8:13:9f:
56:71:f7:17:17:37:89:09:4c:4d:72:09:a7:6e:99:
85:49:d4:12:52:94:05:0b:39:b1:7a:46:3f:4e:d0:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:99:47:4A:55:4E:78:28:74:58:A5:37:AC:0B:B7:3E:46:30:25:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
83:29:dd:f6:bb:37:e0:6b:a4:1b:f1:ec:e8:2c:28:a3:ea:f0:
1c:f1:f7:d8:4c:ba:1f:6a:31:60:4c:47:37:f7:7d:4a:4d:9d:
38:22:e8:14:53:a8:ab:80:a2:95:84:d9:72:7f:c7:4f:91:07:
b6:fb:21:89:8f:ea:83:90:2e:c4:e4:b0:a9:68:db:b3:48:cd:
2f:a8:a4:ab:34:a7:c6:b8:35:51:b8:d2:04:d0:98:2d:7b:4d:
e8:7f:d5:af:65:69:a3:16:46:1b:0c:92:f7:51:13:4b:16:34:
16:cc:72:b5:5d:f5:57:58:d0:6e:28:aa:c6:bc:c6:17:dc:59:
59:6b:74:35:57:98:5b:67:6c:f7:95:9d:bf:71:64:ea:85:33:
27:d8:e5:b1:87:92:e9:53:0f:c3:f9:30:10:e7:ce:5b:6d:8e:
c2:90:a1:55:55:a3:bc:32:5c:4b:4b:24:36:e2:0c:3e:78:38:
a7:08:d5:e4:2f:ea:b6:6d:48:79:50:54:59:5e:76:00:56:c3:
e0:1f:ce:14:ec:31:03:f1:1b:84:2f:33:da:2b:36:4a:9d:df:
53:63:16:94:ae:08:57:57:13:d9:1b:a3:b2:75:c4:d7:8f:77:
f8:0a:c8:51:f3:69:fe:a2:d4:eb:28:0b:00:fb:77:3f:24:e8:
44:b6:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:47 2026 by rpki-client