Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7420658-e19d-4922-8077-ebb0f392e3fd.roa
File: c7420658-e19d-4922-8077-ebb0f392e3fd.roa (raw, json)
Hash identifier: g26H36UYXbj4a8KXFw5q4n1x8cGa7peVcXPVIjZadiI=
Subject key identifier: 98:C3:12:E3:4C:16:19:A0:86:EE:55:59:FD:17:CA:8A:24:DC:49:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15D3CEB81B98CC2CCB08D6B31CC01AFC62D1A7FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7420658-e19d-4922-8077-ebb0f392e3fd.roa
Signing time: Thu 08 Oct 2026 17:24:37 +0000
ROA not before: Thu 08 Oct 2026 17:24:37 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d3:ce:b8:1b:98:cc:2c:cb:08:d6:b3:1c:c0:1a:fc:62:d1:a7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:37 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=56099e2d66f7d8737c9c4b7682723fda2b7b7a32a8492f0c1e046985c492040a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:3a:9f:fe:e4:e0:93:f8:1b:37:fc:01:05:
23:70:d6:a1:6d:dd:41:50:dd:4e:11:ad:9c:c2:69:
d4:74:96:ff:a5:9b:30:3d:92:b2:81:59:47:f7:83:
fd:e8:93:d0:7a:c3:d1:a6:4a:fd:16:a7:8a:c9:3a:
5b:53:69:b1:87:3b:0a:5a:34:f6:e2:2a:54:2e:18:
47:98:24:eb:7d:fd:70:f7:36:02:c7:53:07:34:74:
bc:e1:d3:75:81:8c:48:95:e2:3b:60:23:04:90:43:
fa:96:7b:50:31:1e:1d:d8:9a:71:a4:19:56:5e:fa:
1f:b4:98:65:bb:0d:1e:c8:90:51:ba:4c:25:ee:e0:
b8:cb:31:7d:0a:58:d9:e4:13:d9:51:08:82:49:83:
94:3d:6c:86:31:83:42:c9:63:50:76:17:54:8c:c4:
7f:2a:df:a6:4d:a4:25:4e:f8:0b:f1:c6:3f:45:28:
23:c0:ae:ed:55:2a:e6:29:fa:7c:38:71:59:c3:61:
a2:0d:d1:0c:b8:a7:fb:83:a2:c1:61:01:61:77:ff:
60:3c:23:47:4a:14:f7:b7:67:55:e8:39:92:a1:a1:
c0:2d:74:0b:01:14:7a:8d:ae:76:93:f7:93:15:0b:
6d:b4:19:67:52:21:d4:97:5a:6b:8a:44:40:36:d4:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:12:E3:4C:16:19:A0:86:EE:55:59:FD:17:CA:8A:24:DC:49:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7420658-e19d-4922-8077-ebb0f392e3fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:9000::/40
Signature Algorithm: sha256WithRSAEncryption
35:d1:6c:8c:ba:29:81:02:99:50:b9:87:72:bb:bd:a8:10:aa:
20:45:62:80:14:1d:45:bf:6a:e8:d6:42:ba:de:7c:9b:88:b3:
20:41:c0:1b:4d:55:6d:0c:47:d8:5b:0c:04:fe:99:fe:8e:03:
2e:53:01:e1:59:83:84:f7:db:33:31:31:1f:b4:9b:c6:e6:4b:
87:f6:05:c9:37:b7:92:fa:bf:98:9e:80:f5:f5:0d:fe:bf:a6:
5a:e6:e9:67:e3:a4:ff:10:f9:b9:56:4b:e0:92:ab:f2:72:de:
b7:8b:0b:53:73:31:81:10:a5:9f:93:52:cc:70:4e:d2:60:fa:
3a:17:ac:da:c7:64:ce:7e:02:88:40:34:39:a6:c1:80:79:f9:
35:17:ce:c0:ae:db:f1:6b:b8:d1:25:b0:8d:a9:65:64:7c:80:
14:37:12:e0:82:95:fb:c0:f7:4a:e7:d8:2d:ec:08:28:66:73:
56:63:b0:84:fe:64:a2:ec:e7:6f:9a:59:96:6d:df:a8:ae:28:
9a:38:ff:3c:22:af:6e:61:c9:17:6f:d9:dc:38:8d:db:c5:df:
b9:85:c9:46:f5:17:21:ea:80:87:91:16:14:b7:15:34:07:62:
bb:7e:85:3e:03:c2:95:46:d4:bc:3f:46:21:fe:c5:33:8b:4b:
cb:8b:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:22:14 2026 by rpki-client