Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
File: b0fb422a-c1ce-4269-b503-2c8145fc798a.roa (raw, json)
Hash identifier: FPbzuZMaQzFBFFas/3ELxT+P6t4ixZTBdK55rsaEyrU=
Subject key identifier: 6E:16:45:E1:AA:CE:FA:0F:EA:71:51:C8:7F:1E:55:51:A3:58:0E:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 240071E885C06EA01C1FF4D702BCCCCD31B87B17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
Signing time: Mon 26 Oct 2026 05:20:06 +0000
ROA not before: Mon 26 Oct 2026 05:20:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:00:71:e8:85:c0:6e:a0:1c:1f:f4:d7:02:bc:cc:cd:31:b8:7b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=327bee224109f567a5844d528f0579441f67df502c999492c61f572263e71035, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:ca:ac:f1:bb:25:33:fa:31:8f:ae:64:bc:
30:24:24:0a:ca:1f:63:8d:48:a9:59:00:95:16:8b:
65:8e:50:08:37:3f:ef:43:81:aa:3a:34:4b:26:52:
a5:06:12:79:f2:bc:a4:12:96:0d:61:01:6d:d8:2b:
d3:f3:1d:e2:f0:d1:67:56:b2:a0:bf:6f:c9:f4:98:
63:46:c6:7c:60:9d:e7:56:e8:9d:04:c7:fe:74:1a:
20:d8:f8:c3:a6:38:d9:6b:55:80:4e:f3:f7:f8:7e:
f1:75:eb:61:f5:6a:db:81:cc:10:d1:f8:33:fe:cf:
ac:31:57:38:55:9c:c4:f6:e7:88:df:84:c1:9e:eb:
e6:22:22:92:87:eb:71:a7:83:dd:0c:10:af:ca:43:
d0:14:dd:f2:1c:b8:57:a8:cc:cb:95:3b:ae:66:39:
91:f0:cb:2e:1c:7f:de:bf:41:a5:d8:b1:3a:7e:06:
e6:09:ba:86:6c:8c:c9:f0:ca:52:ff:a2:ec:e7:f9:
89:53:3b:07:1a:2f:63:c8:4e:b7:f9:51:3f:d5:fd:
f4:25:bb:69:31:94:a2:ef:ff:98:e5:04:55:86:c4:
3a:c9:94:c2:b3:92:b4:7c:c8:1e:bb:22:53:30:59:
b9:52:bc:6b:0f:fa:77:7b:7c:ed:13:c0:2c:be:a6:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:45:E1:AA:CE:FA:0F:EA:71:51:C8:7F:1E:55:51:A3:58:0E:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a020::/48
Signature Algorithm: sha256WithRSAEncryption
59:b7:81:57:f8:cd:e6:1d:28:49:cc:51:3e:16:f9:49:d1:aa:
a3:6f:16:56:af:57:23:fd:6d:1f:4f:4b:8c:be:89:bd:48:06:
af:4e:2d:fe:7b:e2:20:b9:95:f2:ef:cb:11:ef:6b:c2:5e:5b:
63:10:50:97:ad:cf:d0:95:3b:6b:f5:77:8d:55:49:6a:bb:d5:
dc:21:f6:f6:a0:72:a0:3e:b3:38:48:cb:40:f7:dd:5e:6e:f6:
05:b4:4e:f2:93:29:7a:e2:82:0b:d6:ab:ba:37:31:a2:74:7e:
f1:ec:ef:0a:01:10:36:01:73:c0:b6:6f:21:23:2c:77:31:fa:
dc:60:56:00:dd:5d:51:ec:89:fa:43:d9:09:0d:11:e1:3b:99:
9d:51:2f:a4:8f:ab:67:eb:4f:81:3d:9a:2d:5c:20:fa:e5:75:
77:af:03:3e:d4:b9:de:a1:d0:c2:90:e1:be:5a:9d:4f:29:e5:
28:ce:29:31:61:38:96:89:44:83:d7:01:5a:11:07:4c:58:35:
77:c3:24:9a:32:a9:f1:9c:a8:97:e4:c9:54:41:c2:a1:cb:eb:
9f:a4:33:fc:61:d4:36:8f:ec:70:81:e9:9a:e5:56:7b:3f:42:
a8:5f:82:83:9b:7a:e5:18:82:cd:e2:a8:da:25:06:dc:1c:d8:
56:03:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:35 2026 by rpki-client