Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
File: a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json)
Hash identifier: w8PSGWwapxQf873Rv3I511uNO2JK1Vs8W0L+NS/j+8Q=
Subject key identifier: 23:D6:6A:AA:64:E2:49:D6:39:AF:CC:CC:1E:F4:B3:38:E5:6E:B2:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 731E2E75995957829F37AEB43A6E5DCAF5BCBB31
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
Signing time: Mon 26 Oct 2026 05:10:54 +0000
ROA not before: Mon 26 Oct 2026 05:10:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1e:2e:75:99:59:57:82:9f:37:ae:b4:3a:6e:5d:ca:f5:bc:bb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1b64a8b938852473fb42a1ba11c173d4c5cdc87c9ea546880ee8a0e8eff6b3f0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:5c:ec:e9:2b:0b:de:a7:db:ee:b7:9c:ff:
b1:95:4d:d5:23:0c:a4:db:a8:e6:fa:cd:d5:fe:d2:
b9:90:90:72:77:86:9f:11:27:69:2e:fb:48:39:89:
a2:88:b5:88:dc:23:fa:54:bc:6c:b6:b6:36:8f:6c:
43:d7:c1:a8:49:58:18:8e:dc:c1:de:f2:9d:4e:38:
63:f8:3b:23:47:67:6f:a6:ff:59:60:d5:b4:a2:62:
bb:63:3a:1b:a4:4b:c2:62:b0:85:a9:50:63:33:2b:
06:c9:f2:3e:e7:22:07:ea:0f:1a:25:6e:8e:85:35:
22:cd:ee:8a:1b:9e:b1:39:76:c4:77:99:a1:58:d0:
f3:ea:f5:ea:d3:f4:04:47:b0:cd:ff:35:57:e0:02:
0e:03:35:8b:27:7a:b6:a8:5e:fd:e2:94:8a:9c:7d:
b1:cf:aa:b9:a9:31:4b:b9:f8:a2:54:2a:cd:c3:a0:
31:aa:90:b7:93:9f:f8:72:f7:e5:e7:a5:4c:04:91:
0f:c6:b7:2f:fb:17:87:22:f1:14:15:26:29:ce:80:
80:6d:2b:90:19:76:ca:81:65:54:8b:dc:20:be:65:
37:2f:95:0d:68:ac:a3:09:b9:67:43:ad:35:77:08:
ba:2f:3e:ef:bc:b3:15:6a:7e:62:7e:fe:c4:44:bf:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D6:6A:AA:64:E2:49:D6:39:AF:CC:CC:1E:F4:B3:38:E5:6E:B2:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
99:21:3a:72:b6:ec:6b:c9:76:ce:27:a6:28:70:f4:12:29:36:
33:62:ab:4f:d5:cc:d4:51:9a:38:32:d6:5c:a8:fd:00:23:b0:
4e:73:52:74:fe:d5:41:f7:31:e5:db:a9:8d:4e:ec:a9:55:1e:
d5:93:6f:67:e1:31:6a:0f:d2:20:e0:9d:49:75:56:4f:b1:8c:
3d:8e:4b:e0:94:93:fd:1b:94:d0:69:7c:e2:fd:4b:cc:8b:06:
5d:a1:8a:f1:8e:72:b0:08:69:0a:3b:27:43:89:ee:6f:58:de:
f5:c6:fc:58:e7:2a:ba:08:fe:8f:74:cb:03:50:94:5b:31:37:
ee:45:e2:a0:7b:da:2d:59:75:d7:b4:12:20:49:5b:11:f1:de:
35:5b:fb:f4:38:f2:ac:23:da:be:19:16:ab:dc:fb:46:2e:a6:
16:02:ad:df:c7:9a:dc:dc:84:37:27:5e:f1:55:59:5c:d8:37:
11:43:83:5e:36:34:51:8a:b4:74:79:46:5a:31:31:58:83:a2:
79:11:26:bf:5f:d3:f3:ee:04:c4:8f:2e:3f:b3:d0:9b:0c:05:
69:59:07:59:a3:4c:28:44:d5:ab:cc:cd:2b:a5:44:e2:17:c5:
3d:e0:99:e2:74:75:3f:cd:d2:a7:c1:8c:93:27:7e:e1:b1:62:
e6:b7:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:19 2026 by rpki-client