Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9902e563-fe64-4a01-9616-0424a53839fb.roa
File: 9902e563-fe64-4a01-9616-0424a53839fb.roa (raw, json)
Hash identifier: 66Te11r6cdzCwfIL3wE81tKA2ZgnEj3w7B72xcV5SA0=
Subject key identifier: 82:6B:B6:E8:A3:9D:39:60:3C:E6:7F:57:2B:4A:4C:21:C2:AB:8A:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0677CBD701C8D93444F0DBAA6BAAC043303E634F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9902e563-fe64-4a01-9616-0424a53839fb.roa
Signing time: Mon 26 Oct 2026 05:02:56 +0000
ROA not before: Mon 26 Oct 2026 05:02:56 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:77:cb:d7:01:c8:d9:34:44:f0:db:aa:6b:aa:c0:43:30:3e:63:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:56 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=48b7060e95dc57f642983e71e252ecec6553321b68ac314e20789933c4edda36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:16:1c:63:67:66:29:16:50:2d:3d:de:e0:
ab:92:5b:d1:12:5c:48:17:27:a7:db:8d:f2:a0:53:
f2:8e:0b:86:2b:4f:a0:40:49:8d:77:87:9c:d6:f9:
9f:c8:19:2c:58:8f:dc:b2:ee:a5:31:63:99:d0:e5:
b0:07:c5:31:a9:2e:df:ac:d7:f6:88:4b:ce:4a:59:
ee:48:49:13:21:46:5d:4e:ca:94:92:35:e9:14:fc:
57:dd:e3:46:24:87:3d:06:b1:e9:a7:2b:3f:2b:1c:
7a:c6:79:61:4f:d0:b7:de:f1:b0:c0:45:54:61:bb:
d6:49:8b:c9:d0:d2:9a:64:08:05:84:bc:51:3a:1d:
95:3e:a4:5c:80:09:c6:2e:df:c5:7e:05:ca:cd:7e:
de:e2:8f:c0:01:89:b6:c3:24:d8:a1:a9:cf:92:cd:
82:89:5d:3a:23:52:5b:5b:7c:c9:66:97:99:a1:a1:
a9:ba:f1:8a:bf:87:4e:34:49:ad:2b:27:e5:31:e6:
af:43:08:98:95:e0:9d:c6:33:1c:34:45:a3:1a:14:
8e:1c:46:4f:77:bb:69:17:75:9e:8b:77:54:c9:7e:
65:be:c2:dd:b5:af:e0:3c:50:91:81:84:3c:16:f6:
a7:e1:ef:0f:5b:c9:b5:60:b0:b9:0e:08:70:5e:cb:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:B6:E8:A3:9D:39:60:3C:E6:7F:57:2B:4A:4C:21:C2:AB:8A:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9902e563-fe64-4a01-9616-0424a53839fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
27:91:21:94:fe:18:09:5c:dd:f6:bc:2c:35:b9:48:a2:69:b6:
84:66:e7:ad:62:90:46:11:50:00:af:14:7c:d2:43:4d:bb:4f:
9c:a8:b2:93:64:65:3a:e5:1e:a4:ff:e3:99:31:53:04:22:b9:
68:a7:ae:dd:a4:29:73:17:3a:d6:93:45:9b:04:bc:c3:ec:eb:
e4:f7:b4:e0:db:b9:13:81:d9:47:30:db:f6:a8:82:11:fb:1e:
24:d1:9b:53:39:a8:53:29:33:d2:aa:f5:17:6e:8c:f0:a3:20:
73:4a:ba:b4:ce:9d:58:08:ef:44:ec:a5:ab:89:d1:91:48:fb:
f1:66:1c:12:a9:e6:45:4a:b2:9d:30:5a:61:6a:83:c9:58:41:
c5:bb:72:d2:a2:c9:d0:3e:68:85:4e:39:c7:e1:eb:08:be:52:
2a:37:06:ee:0b:b6:8d:ec:b8:ce:69:c9:0d:3f:67:65:1f:ce:
7f:24:7d:6b:b0:53:96:36:a9:2b:94:68:58:4c:a2:89:e6:bc:
75:0e:ce:27:0d:5d:12:db:7f:e7:ee:c8:5e:84:49:d8:60:89:
f0:c6:7e:ee:ac:a0:db:a3:70:fd:8c:ea:0b:a0:ab:14:03:92:
27:29:06:ab:5b:fc:f1:71:5a:c0:37:31:25:38:9f:17:24:4f:
22:ab:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:59 2026 by rpki-client