Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b34990f1-eaff-4d7d-af91-c38762eca07a.roa
File: b34990f1-eaff-4d7d-af91-c38762eca07a.roa (raw, json)
Hash identifier: JTVwKErHUXKUeIymsXNrzFqTen2soUoeiKntOCw3k40=
Subject key identifier: 6A:48:3B:FA:D5:C3:B6:5B:33:C3:01:56:99:68:FA:67:E4:7D:AC:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B652A3A9FD87129EC9DD0375D928B903A46F4A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b34990f1-eaff-4d7d-af91-c38762eca07a.roa
Signing time: Thu 08 Oct 2026 17:24:48 +0000
ROA not before: Thu 08 Oct 2026 17:24:48 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:65:2a:3a:9f:d8:71:29:ec:9d:d0:37:5d:92:8b:90:3a:46:f4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:48 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=59dc27b234cad6d741dec421a60ecd6ba33935a5c300efa40660646546eacdd3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:c8:b7:e0:17:1c:66:5e:da:fd:4f:e6:48:
9d:7a:9f:5b:94:6e:f3:b5:cb:a8:3e:34:f0:58:88:
d0:0c:31:82:cc:75:7e:95:d8:6c:15:20:ff:e4:18:
62:44:d6:93:87:71:4f:dd:43:8e:2d:88:f3:5b:40:
f4:34:bf:70:d2:79:84:2f:73:e3:99:e7:19:d4:0c:
09:42:77:71:a9:06:89:23:bd:6b:9c:3f:b8:a7:ae:
65:94:3f:e9:84:2e:f3:60:d8:b2:f9:68:dd:50:21:
5f:40:25:5b:73:0a:a3:56:4a:1e:30:7a:14:60:52:
4d:22:7f:26:80:ac:c3:92:70:77:21:d3:49:9f:db:
88:c3:7e:7b:fd:02:4e:c7:ca:13:d8:9f:13:38:fe:
85:02:6d:7c:28:9d:6f:a7:46:e9:1b:cd:b0:8e:51:
cf:f6:4d:dc:bb:7c:6c:43:a9:25:6d:dc:64:76:8a:
ea:fb:dd:02:08:1c:61:bc:57:ca:aa:aa:51:38:1d:
8d:b5:4d:e8:c1:78:d4:34:e1:9d:07:7e:32:b4:fc:
59:ed:b9:11:3e:57:1b:64:3e:89:8f:79:ef:da:5b:
2f:3a:56:61:6c:53:23:5f:11:21:c4:a1:6f:dc:64:
ec:c0:13:50:e4:28:26:91:e2:65:5f:71:93:41:c6:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:3B:FA:D5:C3:B6:5B:33:C3:01:56:99:68:FA:67:E4:7D:AC:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b34990f1-eaff-4d7d-af91-c38762eca07a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:e000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:90:5e:c0:3e:96:46:f2:4e:a6:7f:33:11:24:ec:6c:56:da:
69:a1:39:3b:86:9d:0f:ab:c9:6d:3a:95:14:58:7b:e1:48:53:
d9:e6:72:a3:67:c8:b2:b2:35:a9:d9:1b:0e:42:84:0f:df:5f:
35:df:59:ad:c9:12:90:65:76:53:77:98:d0:f8:43:68:cc:a1:
62:f5:92:b0:37:1c:92:dc:e4:7a:ec:78:17:c3:3f:d9:51:71:
08:14:a4:91:4d:11:c6:6e:eb:d7:8f:e6:76:32:79:7d:97:3c:
b8:8b:59:aa:59:58:3a:f3:c6:17:5a:07:6c:9a:55:7e:7f:03:
1a:33:97:42:05:5a:70:03:fe:5b:fc:dc:ff:36:ac:7d:9a:3c:
a9:34:d4:e2:c7:22:58:f2:a0:4f:0f:45:62:24:2b:03:b4:1d:
32:2a:97:dd:fd:ef:f7:2c:da:57:3f:7d:5d:e7:cb:22:6b:e2:
15:35:96:81:dd:27:50:e1:b3:03:c7:d3:e8:31:a0:dc:42:03:
3a:65:db:d5:d3:88:df:97:97:77:59:11:c0:ea:90:90:a2:b3:
2c:2b:84:f4:2a:1c:29:3a:3d:4f:30:11:56:60:7e:7b:a7:47:
1d:54:5e:7d:c7:de:14:40:2a:ac:42:45:97:fd:b5:67:86:52:
37:96:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:02:13 2026 by rpki-client