Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a0196e5-a789-4daf-912c-37aa6951f379.roa
File: 9a0196e5-a789-4daf-912c-37aa6951f379.roa (raw, json)
Hash identifier: 22VJq4AIykPgZB75aXEscBtKsOlp8XMREN4WduN5x9E=
Subject key identifier: 65:41:3A:47:AC:2D:AE:F0:E9:AC:49:E4:43:28:AA:46:58:62:68:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13FFF4B28D934C015934C64B4E8006D758ED6660
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a0196e5-a789-4daf-912c-37aa6951f379.roa
Signing time: Sun 18 Oct 2026 01:30:23 +0000
ROA not before: Sun 18 Oct 2026 01:30:23 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ff:f4:b2:8d:93:4c:01:59:34:c6:4b:4e:80:06:d7:58:ed:66:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:23 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=0077d6f5ef290ec2876e5b923aba64129a77151e89dc128d5daf37b84876c646, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:67:6c:9d:57:14:90:2a:03:ba:f6:9f:7a:
cd:65:2b:3e:cd:01:11:c3:a8:6b:9c:b5:59:fd:93:
e6:7b:d2:8f:9b:75:3e:6c:14:2c:dd:c7:13:eb:01:
50:8d:c8:bb:f8:83:df:05:aa:94:ce:3a:6d:24:6f:
ac:4d:cb:59:62:b4:19:f8:78:ad:c4:82:ea:4b:31:
ac:14:c8:d5:cb:b4:2f:19:cc:e4:fc:e4:50:12:10:
85:91:f1:89:e2:c5:fc:23:2d:96:bd:4a:a6:1b:09:
cf:49:50:4f:cf:81:51:91:90:dc:0c:38:12:d7:3c:
28:65:65:76:f9:49:cb:ae:ca:a2:da:cd:79:6c:1f:
d6:d6:98:ba:be:84:91:46:93:a7:66:4b:30:a9:e2:
e6:4e:6b:2d:1b:7e:64:70:79:17:2a:38:da:15:20:
c3:39:d7:69:b9:be:11:f9:e4:75:b3:54:fb:7f:0a:
85:61:a0:ed:45:54:f9:73:d5:6a:23:67:ae:e4:4a:
14:c2:c0:61:50:92:fe:5b:1c:cd:a0:b6:d9:3c:5c:
ad:2d:ff:62:78:ed:b5:a8:b0:59:69:f7:97:d9:08:
31:06:fc:42:69:50:81:31:37:df:3d:df:e3:4f:19:
58:25:68:ba:e6:a0:33:d2:07:56:43:61:ab:c9:8d:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:3A:47:AC:2D:AE:F0:E9:AC:49:E4:43:28:AA:46:58:62:68:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a0196e5-a789-4daf-912c-37aa6951f379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:a000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:aa:ce:69:65:c6:6f:c0:47:04:69:07:f0:4c:21:9e:99:a2:
3c:17:78:75:e9:84:58:de:53:cf:4e:51:5c:36:78:dc:72:7a:
8d:0d:b2:59:a1:35:54:56:50:b9:97:9d:95:db:92:93:c3:a2:
9f:28:58:bc:33:74:6e:ee:ed:2f:cb:dc:4f:69:09:99:d4:af:
f8:b1:43:f5:69:a0:3f:71:e1:39:21:50:3c:05:88:f2:59:b5:
b4:8d:e1:aa:b0:c7:62:f2:83:01:20:54:be:3a:c9:4c:97:d2:
e3:72:6f:44:a1:ed:2f:cf:c8:b6:8f:0b:0e:cf:58:7b:91:76:
6c:8e:81:5a:27:63:30:30:73:80:80:51:98:89:04:3b:f7:cb:
ad:65:f9:20:70:17:ae:34:7b:e5:19:47:06:2b:43:42:24:2d:
56:84:84:86:d2:ac:54:60:cb:f2:92:5f:ad:c9:49:81:0e:09:
40:e9:d1:9b:e3:54:5b:61:d9:32:9b:52:71:6e:c9:20:43:bb:
a4:ba:2e:d0:53:f0:8b:2c:35:f0:b5:07:1b:60:7a:af:a2:2c:
06:6f:5f:47:0a:69:20:3c:43:31:e5:6a:9e:84:10:d7:5b:7d:
36:ac:0f:96:81:65:cb:d4:ba:04:7e:35:a8:cd:9a:b2:9a:5c:
c5:48:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:11 2026 by rpki-client