Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/914a6acc-cb88-4da2-8443-fbaf927c9652.roa
File: 914a6acc-cb88-4da2-8443-fbaf927c9652.roa (raw, json)
Hash identifier: Y4c2RC7vMbPz//aVi6wvP6OrD95jwK21FD00lJ0+F8I=
Subject key identifier: FB:6B:94:B5:AF:A1:93:E8:11:3E:72:2C:91:C2:28:3D:23:BB:61:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 755992B2ECBDCF6572823D0D7CA83732827DAF9E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/914a6acc-cb88-4da2-8443-fbaf927c9652.roa
Signing time: Sun 11 Oct 2026 15:20:11 +0000
ROA not before: Sun 11 Oct 2026 15:20:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:59:92:b2:ec:bd:cf:65:72:82:3d:0d:7c:a8:37:32:82:7d:af:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=13da8e13a0a21511e7203f41ab856ca944bf5267fb39d6640fb56d7962445c89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:25:ae:34:eb:15:d0:11:1f:80:76:22:10:
df:73:67:19:3a:7e:3e:73:39:4f:f0:c3:da:63:64:
58:1c:8d:6f:d1:2b:b0:7b:da:75:11:9a:78:f6:0f:
61:53:e3:fe:46:eb:c1:c3:fd:a3:f5:da:5d:99:ff:
eb:53:62:79:ec:ca:b8:b1:b2:d7:cf:14:55:6c:ac:
3a:b9:ae:9d:30:f4:9a:4f:c0:a0:93:d6:4a:19:07:
09:db:c3:6a:f0:63:d6:fb:7b:95:39:04:79:fb:f6:
d1:ee:e6:21:50:92:c1:39:23:21:ab:48:b9:72:03:
d5:81:9c:38:9d:66:6c:9c:85:fe:f3:fe:1c:47:50:
f8:3b:23:81:5e:df:24:e2:b5:8e:71:aa:10:9d:fb:
90:ef:26:8f:eb:02:6d:70:49:87:6b:e9:b3:71:31:
32:d9:ce:90:57:7c:ae:4f:4f:8c:c1:1b:7b:bf:15:
03:00:a6:38:17:03:21:21:dc:e6:e2:67:a0:9a:2d:
1a:51:51:21:d9:68:4b:ef:c7:4a:a0:6a:64:d7:dc:
0d:db:c3:6a:ac:23:92:61:94:f1:c5:66:b6:dd:29:
37:07:1a:52:7a:f9:74:a1:5a:9d:6e:70:7d:d5:2e:
64:1a:ff:a6:a0:02:a7:90:ed:7b:e0:0d:8a:1d:c5:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:94:B5:AF:A1:93:E8:11:3E:72:2C:91:C2:28:3D:23:BB:61:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/914a6acc-cb88-4da2-8443-fbaf927c9652.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:9000::/40
Signature Algorithm: sha256WithRSAEncryption
1f:e3:f1:fd:83:8a:84:22:9e:72:14:39:46:09:db:b1:d8:f7:
e2:4d:ba:fc:78:29:a1:e2:03:a0:ab:f0:0b:ba:29:c4:09:8a:
4f:d4:57:14:a2:24:99:1e:b6:55:f7:6b:38:9a:4f:37:ad:1f:
b2:e0:81:9a:66:f6:b9:54:c4:96:d4:35:e1:d6:9c:77:db:c8:
7b:91:8c:50:12:a4:d7:85:31:c4:3f:aa:4c:92:be:c6:d8:42:
cb:ec:99:ff:08:46:9a:21:45:a2:28:3f:d0:91:b9:46:2b:05:
e0:eb:22:1e:3c:49:5f:c8:33:8b:36:6d:24:33:e5:be:fc:10:
df:cd:0a:83:4c:77:63:bc:b1:67:96:a6:d5:c6:e3:b4:04:c1:
99:2b:34:7c:e0:96:64:ab:00:1d:a8:6e:de:c4:9c:0c:6d:7e:
89:2e:fa:26:17:e7:7a:99:08:42:a7:bf:26:1c:2a:a0:45:27:
f7:cc:2e:ca:4a:7d:11:61:97:21:e7:c4:0d:ae:44:15:d7:fc:
59:c1:ab:e9:81:12:c3:03:1a:b3:68:2c:20:85:ac:93:6e:11:
56:e0:73:db:48:b4:c9:02:f4:cd:d3:24:24:ae:89:d6:9c:b4:
50:ec:87:a5:55:82:9f:d4:f1:2b:60:91:7e:d1:0d:4e:1c:f4:
9a:b1:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:52 2026 by rpki-client