Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json)
Hash identifier: bn1zjF/FgQ71NbCfk2els0fvBWAsbXBo5q2yI/tCy3A=
Subject key identifier: 00:B0:16:DC:47:77:44:D3:5E:85:FA:52:47:4D:6A:E8:40:B1:6A:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C2530235D4F3AB218EAAECCE271C86483111D9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
Signing time: Thu 22 Oct 2026 03:50:15 +0000
ROA not before: Thu 22 Oct 2026 03:50:15 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:25:30:23:5d:4f:3a:b2:18:ea:ae:cc:e2:71:c8:64:83:11:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:15 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=64a729538a7427e2567564f00bca2e02349c1c5db643028dec69bc6e93316b89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:10:85:8b:9c:29:a1:fa:71:d1:38:5e:d7:
11:4e:62:b9:be:81:89:56:c0:af:61:a6:60:fa:4f:
e9:fc:bd:84:0f:61:e5:09:cf:57:26:50:11:a3:7a:
23:5f:a0:04:95:f5:f6:f7:e8:9d:43:30:af:4d:c1:
ba:ee:5b:69:96:85:cb:aa:6e:cb:90:11:0d:b3:52:
b3:a6:d0:50:b9:b0:80:05:20:cb:e0:11:35:1a:2b:
51:62:3c:bb:26:a0:b4:3b:d8:0e:97:43:56:fa:e1:
21:9a:f1:32:a7:95:cc:d4:f5:76:b7:67:c1:04:89:
ab:83:c2:ec:6e:0a:de:ee:90:d1:1b:cd:98:59:be:
e3:0d:ba:fc:58:f0:c4:d2:2e:ce:3a:84:ce:bb:7a:
0b:d5:33:5f:99:a7:19:67:1c:13:f5:58:86:ee:e3:
d0:a7:16:7b:6a:ea:b1:42:5b:0a:8f:11:ce:6f:3a:
a2:87:a6:cb:cf:79:f4:8e:ed:b9:d8:5d:b8:09:f7:
8e:a4:87:ed:dd:cf:b5:1a:0d:e5:d8:95:8f:48:d2:
11:4b:68:3e:9b:20:9a:26:9b:41:63:71:47:af:ab:
0d:c4:4e:c4:fb:30:7f:09:72:f8:48:e3:e7:a5:d6:
2a:8d:15:b5:a8:70:a1:8e:11:69:03:2c:4d:87:2f:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:16:DC:47:77:44:D3:5E:85:FA:52:47:4D:6A:E8:40:B1:6A:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/40
Signature Algorithm: sha256WithRSAEncryption
6f:39:e2:a9:90:dd:cd:13:ae:80:13:42:00:57:2b:cf:1a:c5:
e6:a6:f8:af:13:36:4c:fa:fe:f6:3e:f3:1a:39:d4:7f:05:4e:
5f:4f:1f:06:c9:2c:3d:00:4f:0b:d4:8d:47:2b:83:e9:09:02:
93:63:1a:f3:95:10:e6:2f:05:4d:71:da:4b:00:93:f4:3d:0d:
d5:49:af:d9:d3:c7:ba:6f:d9:65:03:94:fd:d6:56:db:c3:9d:
1c:0e:69:54:9f:c6:78:ec:87:c8:5d:53:45:1c:4e:1a:39:18:
02:34:4a:e2:a3:1f:1e:be:8e:d9:d7:30:52:e8:00:e0:d8:7f:
a1:ce:9a:8a:00:cb:43:e5:64:04:7d:d9:c2:c8:8b:c6:64:f4:
a2:0a:bd:c6:e9:53:f5:6a:d1:a1:32:4e:82:a2:a9:94:a4:6e:
26:a4:4b:9d:a1:6c:02:69:f5:1a:dd:d9:4c:3e:ed:0e:c8:9f:
bd:b9:05:6d:c7:58:a5:ca:d4:a5:5b:03:5e:5a:71:e1:05:8d:
e5:89:32:c0:57:2c:a1:ac:f0:67:8d:e7:e7:bc:2b:02:e9:57:
4b:41:d5:23:f4:16:b4:dd:e7:91:87:5e:e2:89:3e:d8:3c:ae:
85:a4:6e:2f:1a:31:cc:c3:e1:85:df:6c:8b:e3:c7:e9:15:41:
fd:f1:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:38:10 2026 by rpki-client