Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a727f1ce-d23b-4322-a2c4-5c2d04d8f003.roa
File: a727f1ce-d23b-4322-a2c4-5c2d04d8f003.roa (raw, json)
Hash identifier: m1+MAAa9fpnBgjQG8KDgU5PgenbUXjKoDqq3SkmPa+o=
Subject key identifier: 13:F0:32:6C:EA:41:C1:ED:92:48:E6:12:4F:8F:F6:45:BE:E7:92:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 268218DCC7CE8742DD68D2B344E91CE6939FF39A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a727f1ce-d23b-4322-a2c4-5c2d04d8f003.roa
Signing time: Thu 08 Oct 2026 17:24:40 +0000
ROA not before: Thu 08 Oct 2026 17:24:40 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:82:18:dc:c7:ce:87:42:dd:68:d2:b3:44:e9:1c:e6:93:9f:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:40 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=e73a67de6197c7ed3d62593e5dee10e666705ed571d76e79e7b224c149a82463, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:95:e1:56:f3:2e:77:63:fe:42:56:04:21:
bc:60:c4:5c:20:4b:1c:6e:30:37:1b:35:23:81:de:
c6:47:10:50:6c:77:07:57:8a:ed:6b:b0:59:15:11:
8a:42:27:e1:13:bf:6d:f9:d2:6d:66:fc:a7:7c:2c:
41:78:f4:6b:e2:45:84:23:e1:f1:c3:53:93:e5:10:
73:32:26:3c:c2:33:76:d2:3f:b4:ad:1d:1a:2f:ec:
c6:03:cf:23:0e:d5:9e:93:4d:5f:8e:b8:ec:08:01:
52:0e:20:e1:2c:3b:cc:aa:2f:32:2a:a5:1d:a8:8e:
c3:f4:ed:d7:ff:2b:45:2b:b4:59:e7:dd:d6:27:d1:
6a:06:5a:48:68:aa:21:47:96:d1:32:e9:45:d6:4f:
ef:25:c8:5a:e3:1f:94:bf:8f:83:6c:9a:70:20:a1:
ec:ea:86:03:1b:19:da:d1:be:12:15:5c:33:d5:80:
d1:93:13:77:e7:c4:fc:7e:c5:82:fb:bd:f0:8e:a6:
5b:ec:3e:93:b8:0e:72:d4:8e:03:10:b1:52:cd:17:
39:25:33:c3:9d:62:39:db:7e:45:c4:50:33:fc:7d:
5c:28:12:03:0d:b7:f7:f3:b2:a9:c8:8e:e0:ce:de:
8c:84:91:cc:cd:3d:ee:7b:0c:c5:ea:bc:f6:08:5f:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:32:6C:EA:41:C1:ED:92:48:E6:12:4F:8F:F6:45:BE:E7:92:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a727f1ce-d23b-4322-a2c4-5c2d04d8f003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:4000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:77:25:bc:48:b7:b0:ae:ba:3a:aa:fe:c1:8f:5b:79:d4:a9:
a7:58:b8:24:50:14:e4:46:ae:66:39:9d:4d:dc:6d:b6:82:0d:
01:37:39:99:c8:24:dd:99:3a:80:aa:96:7b:40:c1:42:d1:6f:
ca:08:de:41:40:e1:41:a7:27:c2:66:e2:3c:0c:00:7a:f6:ba:
16:3a:2d:7f:f6:b8:55:4a:a7:98:55:e5:67:b3:1b:86:83:d7:
1c:9d:7c:69:27:e6:4b:13:05:aa:2d:10:91:d3:9c:64:f0:d7:
43:4d:b7:ba:e9:dc:cf:87:72:5c:4e:97:d2:60:75:0a:c2:cb:
14:84:fa:ab:c8:55:01:a2:2c:95:4c:7e:80:32:ac:8c:54:71:
b5:cd:55:33:2b:90:46:49:e2:b5:11:d4:69:fa:2c:9a:4e:06:
0e:8e:fd:bf:c9:ac:3d:0d:6f:23:bc:3f:15:35:e9:17:17:29:
93:29:51:cc:21:d9:55:ab:e8:28:ba:d8:c4:bb:b9:dc:06:c5:
11:4a:f5:78:82:a9:06:5b:5f:99:48:d9:2a:29:10:7e:ea:36:
26:46:a1:47:a1:59:a0:43:16:16:6a:5c:ca:8e:a0:8c:da:8c:
3e:7c:86:25:5d:a0:89:1d:dd:5e:f8:57:f2:cc:cc:3f:65:fd:
16:36:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:22:33 2026 by rpki-client