Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1fdc4a-fa1a-4813-8272-9601a3d755e4.roa
File: ab1fdc4a-fa1a-4813-8272-9601a3d755e4.roa (raw, json)
Hash identifier: ih1JVpJAbyUF+wfahPzyP82borDI6+RYDLnYc4t1qxk=
Subject key identifier: 15:71:ED:42:19:4F:10:04:2F:5D:EA:18:FB:45:EA:8D:48:60:B7:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7760591298579F5752CE64B4CFCAA7B5D7AD1820
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1fdc4a-fa1a-4813-8272-9601a3d755e4.roa
Signing time: Mon 26 Oct 2026 04:50:27 +0000
ROA not before: Mon 26 Oct 2026 04:50:27 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:60:59:12:98:57:9f:57:52:ce:64:b4:cf:ca:a7:b5:d7:ad:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:27 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=40784cf51efb408436469c840e20a28caa1a48650b0c94121f2329b41bfbfa6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:1b:9d:21:b0:46:1e:29:bd:dd:38:21:21:
30:2c:c3:56:11:7c:63:4b:dd:ca:b1:a2:04:9c:c6:
10:13:86:9c:89:73:a5:00:4c:c7:ed:18:fa:ab:05:
87:f7:ce:30:99:d7:c2:47:df:25:10:06:c7:bb:5e:
e9:4b:75:7b:da:0b:a6:08:a4:43:27:61:b6:e7:76:
2d:ca:13:f7:87:15:40:db:f9:cb:ad:78:2a:a0:99:
d5:ae:14:a1:0a:4f:16:40:87:28:85:3f:fb:42:f9:
16:c2:de:32:6e:12:f0:0e:e8:e4:c5:4a:ef:7d:b4:
3f:ef:75:35:d2:0f:df:4c:2f:55:0a:96:63:d3:af:
c8:9a:2e:f4:d2:50:7f:a9:9d:a0:7e:a4:c3:51:ed:
a7:8e:db:29:96:da:b1:e3:e1:d6:c6:40:96:bd:f1:
e4:e5:c2:ca:b0:63:c2:86:9a:28:03:81:42:90:ac:
c8:94:4c:70:db:34:77:c5:fa:28:37:7d:92:19:45:
a6:67:71:81:29:34:f6:a3:8f:1e:3f:83:9c:a3:c1:
3a:7c:47:dc:38:79:6c:aa:a3:05:2e:22:62:82:e3:
76:78:bf:35:a0:5d:86:22:69:e9:8e:35:ee:07:4c:
78:52:7d:f6:28:00:21:17:aa:7c:f5:dd:08:d9:fb:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:ED:42:19:4F:10:04:2F:5D:EA:18:FB:45:EA:8D:48:60:B7:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1fdc4a-fa1a-4813-8272-9601a3d755e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
4a:4d:07:c6:eb:ae:54:ff:34:e6:02:52:73:3f:6f:dc:1b:66:
a5:81:1b:d4:ef:a0:2e:42:88:90:57:50:0e:38:de:f2:b0:34:
54:c7:e8:2e:51:df:95:cb:e6:40:55:d0:b4:cf:81:c0:55:ae:
37:d4:61:8b:ba:be:87:2d:20:69:7c:4e:c9:18:15:98:1e:88:
45:97:9e:e5:21:2d:10:31:81:a4:2d:aa:23:bb:99:25:5e:e5:
80:c2:c7:b3:41:c2:07:06:1f:d1:bf:a2:25:46:6c:c0:53:59:
f6:e7:6b:3d:43:1e:8f:20:b7:5d:dc:7c:8e:89:bc:bc:28:b0:
01:06:f5:ff:00:35:5f:56:a1:fe:05:29:61:be:32:2f:37:1c:
3c:63:d2:3d:78:45:29:10:90:30:15:67:d6:f2:67:92:9d:d0:
99:79:4c:d1:b8:31:2a:fc:5a:f3:1e:68:8f:65:b8:b4:8b:7e:
53:4f:28:fd:10:90:3d:81:94:b5:10:1f:3d:5e:72:ae:22:83:
a9:48:f5:4a:18:ff:43:fe:6a:76:94:aa:42:42:a7:12:ed:9e:
b5:e3:3b:5d:e7:af:f4:5b:5b:a1:fc:4b:5e:d2:b8:26:3c:88:
fd:64:76:42:82:b3:52:94:a0:2b:02:48:c7:4a:23:22:1f:ef:
c7:f7:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:39:44 2026 by rpki-client