Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
File: b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa (raw, json)
Hash identifier: cA5afJfcUbXi/X2Va/zPBTGSYTqJ2nbZ9Fl9qt3GDUQ=
Subject key identifier: 53:D3:59:40:F0:4B:8E:AC:61:3F:D6:AE:FF:AA:1A:C5:1D:8C:1A:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E67197B86E948B7E4ED5D7DD26D4F9C45AC1314
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
Signing time: Sun 11 Oct 2026 15:20:18 +0000
ROA not before: Sun 11 Oct 2026 15:20:18 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:67:19:7b:86:e9:48:b7:e4:ed:5d:7d:d2:6d:4f:9c:45:ac:13:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:18 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=c0905498ed84af3ee6185759b9e12d299b2759cb78bbd8b4aef25be5136d9ce7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:bf:19:e5:55:60:d3:fe:f0:a3:51:71:05:
50:39:a7:20:ae:5e:5e:26:21:6e:f9:81:0b:6c:ac:
61:74:7a:a0:8a:79:b7:6a:54:da:02:fa:f2:07:d5:
4c:dc:d0:cc:9a:83:3a:b5:54:ae:5a:79:a0:02:18:
92:02:19:e1:cb:0d:81:ec:34:e0:84:ae:23:63:f4:
0c:06:e0:25:77:ae:28:56:d1:a2:c6:fa:bb:e7:a2:
93:94:78:09:be:6d:56:12:c3:d1:a3:1d:2a:12:d2:
63:75:0d:5f:2d:7c:e4:34:bb:16:8a:b7:52:90:cc:
c1:60:d2:d3:cc:25:e5:2d:8b:77:42:dc:c1:7a:5c:
78:8a:4c:fd:6c:36:0d:e0:c6:96:be:7e:b8:e0:f1:
28:e5:6d:17:ad:0a:6a:08:88:37:4c:ea:5c:fb:00:
a0:4a:72:60:8f:8d:f2:52:bf:c4:a0:b0:20:82:f3:
bb:ff:93:63:13:60:cd:8f:a7:38:d1:8e:b7:87:fd:
3b:31:b1:67:b7:41:32:56:3d:a1:f6:6c:a9:a7:95:
73:c0:17:41:a6:ae:88:9f:e9:8a:b7:dc:69:28:5f:
f2:42:ff:98:d3:fe:9c:2e:b2:79:a5:52:29:56:d7:
36:2e:38:1c:fe:ad:7d:78:60:16:d5:8d:d3:9c:c0:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:59:40:F0:4B:8E:AC:61:3F:D6:AE:FF:AA:1A:C5:1D:8C:1A:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4020::/46
Signature Algorithm: sha256WithRSAEncryption
14:6d:1c:8a:4e:10:ef:fe:95:14:ff:c7:5a:c3:e5:c2:c0:53:
07:c6:fa:69:3f:bf:c6:9b:9a:96:64:c1:a2:89:03:e5:52:06:
d7:a0:60:ed:7c:00:0f:cb:85:89:fe:10:ef:eb:49:86:50:b1:
13:f8:a1:4e:e1:78:d3:69:01:d7:31:21:99:ab:37:81:10:5b:
bc:c8:17:ff:f6:f0:a2:d1:3c:74:15:a7:94:40:05:c9:db:96:
bb:44:18:33:67:1c:e6:cb:04:bb:3c:9f:6e:24:a0:a6:e4:06:
8d:3f:b9:86:5c:3a:66:ae:1f:6b:97:1e:83:f8:f1:28:c5:c5:
12:fc:1d:b6:11:52:7e:fa:09:52:17:7b:32:a2:38:be:59:16:
6c:69:6f:fc:03:48:9a:5f:b9:2a:bb:85:25:27:49:49:15:a0:
a3:34:9d:a8:70:43:47:58:d0:9a:1d:12:73:9f:51:40:f1:ff:
08:c3:df:82:6c:51:4e:14:78:3e:e2:8d:dc:ee:44:46:f2:56:
cf:79:06:fa:a5:da:e9:b4:e5:02:92:3b:21:ef:d1:e3:b4:5b:
c9:38:8f:b3:61:22:4a:3b:2d:b2:d6:37:2e:89:d8:65:e1:5d:
60:85:c1:68:70:b1:50:20:a8:5b:3a:35:00:43:e7:10:97:d6:
25:3c:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:47 2026 by rpki-client