Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa
File: 9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa (raw, json)
Hash identifier: X3ZonLlgQoyKMt4VmL7Q8zrg67RZbOPZEnO+TEhsDyk=
Subject key identifier: 6C:36:29:70:40:C7:A7:36:9F:B8:0D:3E:AB:B0:D4:CC:F0:85:E1:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71F36A602F8E3824C241C787A44BFCB1EF28E307
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa
Signing time: Thu 22 Oct 2026 03:50:20 +0000
ROA not before: Thu 22 Oct 2026 03:50:20 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f3:6a:60:2f:8e:38:24:c2:41:c7:87:a4:4b:fc:b1:ef:28:e3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:20 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=00566335a3ac0f0450e337e6b11d2a38f89e4fb593977ea461e904c1dad09c8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:b5:95:e3:45:95:ba:4c:39:72:02:9e:cb:
7b:11:66:3a:db:a4:84:04:af:3b:95:5c:6f:ba:53:
82:c2:1c:fe:56:1a:2e:3b:94:4b:d3:93:b7:1c:59:
8c:df:78:b6:84:92:94:0d:4f:db:c6:ee:66:53:00:
24:26:fb:46:72:48:57:66:0b:6e:48:df:9a:db:3c:
1a:f5:a1:50:8a:28:8c:f1:aa:ca:4d:31:0f:6c:45:
2d:19:da:f9:4a:b2:39:a8:73:3d:2b:fb:fe:37:62:
fb:18:7a:10:90:ee:ff:aa:31:76:4d:b0:7d:9d:7c:
76:76:be:d0:9e:48:ec:ad:0e:f8:ce:3b:81:df:f1:
b4:74:33:cd:1e:cb:f8:37:61:0d:e2:72:22:19:32:
b8:4f:0f:4f:67:91:5c:45:f7:af:05:00:40:94:dc:
b8:6b:28:0b:40:39:65:78:e1:95:38:e7:02:8a:25:
d6:1e:6b:a7:60:8d:6e:60:1b:1a:08:14:fe:0e:15:
40:7c:37:f5:f4:64:9a:1d:3a:74:05:8b:3c:5c:5e:
36:62:d7:4a:24:dd:06:d4:91:21:35:62:b8:6f:bd:
f2:c2:c1:1b:82:a9:f0:e1:28:d9:a8:72:5d:08:0f:
ac:37:72:e2:77:af:ea:9e:45:88:c6:db:92:25:34:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:29:70:40:C7:A7:36:9F:B8:0D:3E:AB:B0:D4:CC:F0:85:E1:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
76:78:4b:49:1c:c4:f7:be:95:03:1f:17:25:94:43:e8:29:2f:
45:ef:65:4f:68:7b:31:f0:c1:3b:9d:bf:a7:e0:32:a9:e7:c6:
4b:66:80:3c:c6:04:c2:91:36:ba:ae:54:f8:1f:6c:86:f9:12:
25:7d:ef:c9:3a:d1:8d:e6:8c:a2:3b:b2:b7:56:71:11:8d:64:
6e:f3:60:e7:e6:bd:6e:ca:ae:fd:07:a7:7f:75:47:ff:5d:77:
cb:74:e7:8c:26:e9:d8:76:d1:a8:33:f5:c3:91:bb:dc:eb:79:
93:dd:1b:be:70:1b:de:20:4a:dd:59:b9:f5:3d:59:c1:bb:f7:
67:11:dd:46:b3:63:ab:14:8c:5d:a7:d6:67:6f:32:ad:cb:6e:
af:09:53:f8:59:c8:20:9f:7b:68:64:ec:d0:d4:d1:6c:44:f7:
ac:80:e6:61:1c:74:db:22:38:8e:73:be:37:1e:13:2e:89:fa:
fb:ad:3a:58:a0:fd:b2:ab:10:5a:8a:c9:81:59:8b:a7:9e:44:
fe:63:be:b3:16:97:53:25:2d:ec:3f:ef:cb:a1:e6:97:31:0a:
dc:28:19:96:b4:3a:e0:61:64:81:54:fd:d4:a8:57:6f:50:6e:
5d:e1:55:ce:51:10:a1:16:b0:82:49:99:43:6d:47:a6:4e:cf:
03:32:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:36 2026 by rpki-client