Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa
File: a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa (raw, json)
Hash identifier: CTNeiR/IG4aXNfpPWXIUPYfrgR1ervvkgpUtJpLJ1uI=
Subject key identifier: C4:19:D0:21:17:49:1E:4C:52:5C:7C:37:2B:9E:69:B2:45:6B:AF:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 323416E4935788A12A7E179DB2EEC6A72014A337
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa
Signing time: Sun 04 Oct 2026 00:30:40 +0000
ROA not before: Sun 04 Oct 2026 00:30:40 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:34:16:e4:93:57:88:a1:2a:7e:17:9d:b2:ee:c6:a7:20:14:a3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:40 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=8252780ee5c5e43826e833deaa5f5a245f53d076df438a111be5b0d44b0cef48, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:45:e2:69:c5:c0:24:79:9c:37:11:30:11:
da:61:89:d4:d6:7f:05:4e:9b:e8:c6:dc:c5:c9:af:
28:d7:22:3e:bf:7c:7a:77:56:b8:68:c4:3c:84:5c:
25:68:53:a5:0a:e4:a8:53:cd:65:bd:c0:0c:19:a5:
5c:7a:8d:b2:b1:27:d5:67:06:53:d4:80:e9:df:22:
96:35:6a:38:23:0b:15:fa:69:46:c4:ec:0d:eb:7c:
2d:a3:32:81:ce:94:6c:db:9e:ea:aa:c0:d1:2c:59:
01:da:d7:d3:90:c6:d4:be:4f:76:ba:12:43:5f:78:
50:b9:17:47:bf:5d:00:38:19:37:62:1e:3d:d9:2b:
ea:42:b0:46:58:ea:aa:e2:67:62:c4:ed:f2:02:d4:
a9:ac:23:83:e9:7e:30:82:90:ac:7e:0d:6e:56:0e:
a5:65:3d:01:85:85:4e:49:da:c4:f8:4d:7b:85:7d:
f8:59:c2:db:bb:f1:fa:3f:b9:10:ae:0d:53:b9:82:
60:96:dc:77:cb:5e:a2:b4:e4:76:23:66:1e:27:a1:
be:9f:68:31:7a:c6:3a:48:ea:44:9e:09:69:d4:a2:
78:1d:cf:10:ea:2a:4f:1c:a6:09:ee:07:1a:f6:28:
46:9a:90:30:59:57:24:ec:7e:74:b5:47:06:b1:b9:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:D0:21:17:49:1E:4C:52:5C:7C:37:2B:9E:69:B2:45:6B:AF:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2ae01f1-ad20-4e92-9bc6-f03ede97e16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
32:f3:28:db:a7:65:c1:89:d7:ae:95:51:b8:16:28:e3:e5:18:
f6:0f:fb:0d:62:96:e1:c7:ce:c0:4c:c3:a2:01:e3:c2:0f:04:
b7:19:75:70:df:30:53:04:31:ce:e3:80:de:44:05:99:4e:9b:
bc:ed:70:0f:69:37:d7:3c:bb:f9:fa:fc:84:e5:9e:9f:4c:80:
c4:6a:0d:c7:8a:ef:1c:3b:b7:1d:75:b4:a6:79:7d:53:aa:52:
1b:6c:5f:0c:65:c8:7e:30:18:5a:81:34:34:f0:a4:0c:e9:ec:
c7:fb:c3:f5:ee:82:ec:c0:0c:a3:bc:9b:02:b7:33:d2:31:e0:
9d:00:6e:a9:6a:93:f8:93:80:5a:b1:f2:b2:ec:70:eb:02:68:
e3:7e:9e:c9:0d:31:ec:0e:8b:f8:6d:4b:43:86:71:ab:1c:5b:
25:e4:28:cd:99:6e:bc:c9:b8:e9:4b:a3:26:db:69:7a:57:00:
c2:cc:6a:9e:9e:4f:9b:a8:b4:97:0f:61:4c:92:8d:35:8d:5d:
a5:92:3a:a3:31:23:ea:8c:d8:29:05:74:4f:de:77:d1:56:8d:
08:19:cf:47:35:65:05:06:7d:83:81:6d:d8:3c:18:d2:0f:27:
e8:1d:a0:09:45:4c:c4:49:ca:88:62:95:33:20:ff:0f:9a:7f:
31:3e:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:08 2026 by rpki-client