Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa
File: 9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa (raw, json)
Hash identifier: ESEw+TgZPvkRu6snvQ62BwX+CpHKNMlC7+oOwP4FjLw=
Subject key identifier: A4:93:41:CC:8C:23:02:EE:B6:1E:18:F9:39:47:8B:AB:8D:9F:6A:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2556FBBAFED57DF6BEE8EC4C5DAD7313E52C56EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa
Signing time: Fri 23 Oct 2026 01:50:07 +0000
ROA not before: Fri 23 Oct 2026 01:50:07 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:56:fb:ba:fe:d5:7d:f6:be:e8:ec:4c:5d:ad:73:13:e5:2c:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:07 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=17815e5c66291b92ace716bbd66f1156ac75e351e7ab59c2c047021a5985c2fa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:d8:09:fb:ab:06:0e:63:d3:3c:22:a7:10:
15:31:19:fc:cc:88:92:53:47:33:92:88:63:73:f0:
2c:b4:25:47:35:fb:03:46:21:69:f8:a0:20:99:bd:
f6:a2:29:0d:85:52:02:f9:d4:ba:7b:2f:1d:5e:2d:
60:04:d0:14:c8:4a:41:52:76:7b:74:37:a6:ed:4e:
79:ca:07:b9:1c:76:a3:f2:d1:14:a4:7c:63:5a:2f:
06:70:12:6b:9e:fb:1b:c6:4f:2c:2b:94:9c:24:30:
a3:f9:80:0c:e4:9d:23:9a:29:c6:e4:3e:22:02:24:
b7:01:ea:dd:f7:e8:bf:fd:10:00:c6:cc:9e:c3:a6:
1d:42:7f:05:bc:5a:9d:ab:a4:da:2b:7a:78:bf:55:
ab:8d:d6:81:8f:3d:12:4b:9f:ac:d8:ac:3a:d1:c8:
d7:b6:8c:4c:29:1b:a5:e7:ba:fe:f8:27:af:50:43:
a1:1e:c0:91:64:c8:7b:ff:cc:e3:fc:a4:d2:b3:ff:
2f:2a:1d:2e:1d:28:9f:e4:49:94:97:36:4d:29:71:
ee:d7:52:80:cf:6b:81:80:ff:ff:45:6d:ad:1c:93:
bd:e4:fb:fc:b3:37:53:ef:61:e1:02:98:71:4b:29:
50:15:1d:eb:00:6c:c6:42:0b:9d:52:3e:09:b8:56:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:41:CC:8C:23:02:EE:B6:1E:18:F9:39:47:8B:AB:8D:9F:6A:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:c000::/48
Signature Algorithm: sha256WithRSAEncryption
97:81:31:f0:e7:08:19:50:38:fe:de:ff:2f:10:4f:15:f2:07:
7e:1b:a5:3c:1c:95:c8:0e:a4:d6:c2:21:08:07:6c:e4:dd:5c:
aa:0d:47:e1:a2:d4:ba:85:d0:d4:ee:a4:e9:ad:fa:10:b1:96:
80:8c:f9:b8:b8:8a:e0:e8:a9:51:e6:10:87:20:e3:82:50:eb:
36:6f:fb:39:b3:fc:d1:04:46:73:f6:96:cb:87:47:24:b6:7f:
10:a7:75:57:ed:90:33:1c:00:18:da:65:cd:48:f7:1c:e5:3c:
ec:93:05:82:5d:d2:f4:f0:9a:cf:3c:58:ed:48:db:35:58:69:
2d:6b:5f:32:25:91:47:e2:37:45:2c:fd:e5:00:df:88:a1:c1:
11:5c:a8:00:1d:db:c1:c7:c7:0e:d7:c2:ca:d7:21:95:e7:f0:
97:d4:b8:bd:03:9a:35:dd:74:27:3e:67:a7:94:5f:ee:a3:de:
ed:7f:1d:20:ec:02:b7:fa:82:8f:32:d2:7e:f2:e9:e6:59:c2:
e1:19:87:c0:b7:e0:88:5e:00:24:d2:4b:2f:91:ef:1f:b8:6f:
85:05:d8:cc:9b:9d:86:d5:ea:02:a9:1a:14:fd:fb:24:d4:db:
42:e9:d8:ce:8a:43:d4:35:e7:1b:bf:f9:96:25:da:b5:76:8a:
5e:72:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:07 2026 by rpki-client