Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
File: abbee85f-272a-4ae4-8329-48f63bc24277.roa (raw, json)
Hash identifier: c+sCs3vo6P/OFWzdYWey63xl3Fz5kj4l6earma4Piug=
Subject key identifier: 1A:B1:08:FD:D7:76:8F:AD:55:A3:54:AD:24:4F:65:A5:50:DC:83:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03EB50A0AE13223EC8FFD3734A0255BC00C11E98
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
Signing time: Fri 09 Oct 2026 01:30:21 +0000
ROA not before: Fri 09 Oct 2026 01:30:21 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:eb:50:a0:ae:13:22:3e:c8:ff:d3:73:4a:02:55:bc:00:c1:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:21 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=3a773024c1abed07a4bb0f7e39a9e4659b81ce5b2d4881e0c581f7b3194b1c63, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:dd:eb:86:ed:5c:4b:03:07:fe:fe:81:f3:
58:66:80:ef:17:28:ec:01:0d:1d:67:28:57:cb:7a:
6e:86:3b:f0:20:04:49:84:6d:07:d2:ec:17:29:60:
9f:e7:ba:c7:e6:c6:e9:fd:4e:d4:e2:13:63:95:4b:
c3:d9:39:bc:46:82:18:55:93:d0:59:6f:4c:df:a6:
c3:34:15:74:d9:b9:39:ae:e8:c9:9e:64:90:05:80:
fe:54:6f:56:c6:eb:8a:6b:40:f2:54:f3:95:ed:7b:
9a:68:34:38:b2:fe:7b:ba:65:df:53:43:54:bf:b5:
26:27:96:de:36:3b:f7:b9:d5:60:35:c6:ba:5d:92:
1a:51:c4:ee:14:4d:d8:8a:07:4d:c4:5f:2e:bd:f4:
da:70:3a:74:ae:94:1b:7a:d0:33:57:6b:33:6e:8e:
4c:95:32:f0:e3:4e:e3:70:b4:04:e1:42:f9:e4:82:
24:83:59:62:e7:bb:7a:c6:82:42:12:15:96:c3:42:
5b:bb:c8:62:e3:93:4b:39:7f:5f:6d:89:d7:31:20:
ff:9d:db:f3:0b:c1:95:d8:06:9c:c0:da:6b:d4:82:
99:3d:85:c9:d3:56:55:4a:2e:7a:9e:b2:0d:aa:95:
4a:9a:b9:56:fa:39:68:4d:e2:84:b9:86:9b:8c:8d:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:08:FD:D7:76:8F:AD:55:A3:54:AD:24:4F:65:A5:50:DC:83:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a080::/48
Signature Algorithm: sha256WithRSAEncryption
a8:0e:93:f3:8f:49:90:c5:76:e4:a0:0e:4f:b3:4d:f6:56:f3:
49:cf:e1:13:b1:ff:71:94:13:39:79:ce:fb:e5:a2:92:a3:fa:
2d:4f:ca:86:ac:bf:c5:49:0a:38:c0:b0:f6:6b:5b:74:e2:6d:
46:2b:07:4d:16:8f:66:12:f5:fc:63:4b:4b:15:27:14:bd:50:
f4:c1:ad:92:a4:61:17:77:0a:2b:f3:3b:9e:45:56:57:6c:82:
e4:f4:e8:ee:fb:6f:f3:63:2e:1e:c5:1f:74:48:22:73:dc:78:
04:22:e7:bc:60:8a:11:5f:f5:84:cf:ab:ad:f0:a5:79:f2:ac:
28:39:0b:38:46:4d:91:60:2f:02:59:5d:17:80:0b:ce:6a:cc:
38:9b:10:20:46:01:ce:66:d8:44:d7:8e:2c:9f:fe:d0:7f:0e:
8e:28:df:c1:f9:df:0c:6c:e1:f2:07:8d:e4:5e:7b:a3:1f:24:
6c:5a:d9:3f:5d:4e:e2:8e:56:85:d4:ef:38:18:af:94:92:19:
d6:5d:01:d2:51:53:bc:42:b2:18:92:e6:86:b8:53:1b:4b:de:
96:ae:a6:ca:92:6a:e1:f2:67:74:ab:29:f8:dc:08:10:a2:6d:
52:ba:ef:a2:a4:35:94:33:21:4b:e6:49:b2:a8:3a:39:41:16:
0f:f0:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:42 2026 by rpki-client