Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5fec2d-2c40-4068-9bcf-c47d7601d087.roa
File: 9a5fec2d-2c40-4068-9bcf-c47d7601d087.roa (raw, json)
Hash identifier: kogXs/iAEtevq1g/+LEZaeDTr7MOoJV2swJ8TXHjkSw=
Subject key identifier: 17:6F:E0:1B:AC:FD:D7:D0:46:5E:C4:93:E8:62:54:2C:32:7E:81:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CF7178D57BFE57A337C8ECF2CBCD69DBE727819
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5fec2d-2c40-4068-9bcf-c47d7601d087.roa
Signing time: Sun 11 Oct 2026 15:08:11 +0000
ROA not before: Sun 11 Oct 2026 15:08:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:90c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f7:17:8d:57:bf:e5:7a:33:7c:8e:cf:2c:bc:d6:9d:be:72:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=b0b070953694d04100a1e78f31117f58a2dcbda5220a064bdb07c79357066e89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:ce:9f:95:ba:95:f7:a9:fc:91:2f:18:99:
15:24:35:52:76:c7:3c:51:64:d7:33:ba:93:ad:1a:
22:fd:e3:1c:3e:46:b2:24:3f:47:f5:89:c7:95:4c:
4b:64:f9:33:64:b3:74:a8:f5:ef:8f:d9:74:15:78:
79:5a:b7:b8:cb:ca:9e:98:71:c5:f2:16:c5:28:cf:
83:48:a5:1a:e4:91:aa:51:fe:c0:68:ee:07:88:ed:
11:a1:ff:92:1d:54:ba:00:84:2c:5d:a2:33:46:de:
d0:18:d2:d0:c3:2a:4f:cc:77:af:81:68:e2:30:61:
b4:4c:2c:e1:8d:63:20:90:12:d6:62:fb:e0:22:ae:
22:a3:8d:d6:2d:cc:4a:2f:86:9c:b3:88:71:02:d4:
a0:9d:29:cd:69:a9:47:dd:20:cb:1f:c2:99:b0:09:
00:b5:d8:de:ad:c4:17:65:9d:b0:ab:10:74:4d:49:
4b:4b:fe:c6:7f:20:8f:4a:51:04:60:0d:26:c7:15:
84:ea:9a:1c:7f:da:1f:51:a9:01:ed:7d:2b:a3:15:
df:f6:3b:e6:df:35:60:2a:87:ef:f0:43:ad:56:1a:
27:fa:ab:88:fc:54:de:b6:3b:b3:09:6b:7d:0e:a9:
46:e4:05:0b:16:ec:f2:78:17:2d:76:98:bc:25:aa:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:E0:1B:AC:FD:D7:D0:46:5E:C4:93:E8:62:54:2C:32:7E:81:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5fec2d-2c40-4068-9bcf-c47d7601d087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:90c0::/46
Signature Algorithm: sha256WithRSAEncryption
3b:86:6a:81:89:00:e4:e2:f1:db:3a:d1:a0:9b:69:bd:36:45:
72:92:c0:87:a2:42:cb:d6:66:ab:b0:1a:7a:1d:2c:0c:cd:f9:
77:7f:71:ab:ec:53:5a:1f:ab:29:5b:13:0c:0d:4d:44:e5:f8:
7b:5a:90:b2:71:c1:c7:91:06:f5:35:82:02:a5:32:eb:ff:6c:
71:f4:75:e2:ed:ad:40:a1:97:30:79:10:99:f0:5b:62:7d:88:
2e:0a:a1:ec:ab:96:7f:32:1e:40:7d:68:69:2b:49:b5:45:5a:
f6:5d:49:a1:01:8a:fe:a3:dd:ff:0b:b2:d3:36:6a:fa:24:6b:
cf:ec:4d:5e:3f:ed:7e:47:50:53:e6:1b:d9:95:1f:59:08:86:
fc:e7:a4:eb:8e:d3:78:c0:cd:4d:59:ef:1e:09:1d:37:1e:e0:
24:13:2a:6d:b4:52:1d:fb:31:2a:10:9e:d3:22:d4:7e:78:20:
36:9a:cd:75:3d:31:a1:03:83:41:64:56:59:d1:26:67:e5:7e:
22:75:f5:6c:9c:65:7b:66:56:15:49:db:a2:bd:cf:e0:49:81:
93:92:e8:6e:93:01:01:d3:b0:fa:75:fb:03:aa:da:8f:00:2e:
dc:13:69:e0:30:7f:4b:4d:4d:75:c6:ef:fa:15:90:5c:30:dd:
fa:e8:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:51 2026 by rpki-client