Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c768f15e-576e-48c0-91d4-8446a6be70a8.roa
File: c768f15e-576e-48c0-91d4-8446a6be70a8.roa (raw, json)
Hash identifier: gtI9O/ih5Ma7rpwL6bL2kMmcijHfm3T+8BPgsEBZBxU=
Subject key identifier: 04:38:AC:2C:9B:15:43:1A:7E:E8:1F:33:B4:16:4F:C6:82:B5:AB:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37892A810453791815BB57C55CAB0F5A43D2E420
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c768f15e-576e-48c0-91d4-8446a6be70a8.roa
Signing time: Mon 26 Oct 2026 05:20:42 +0000
ROA not before: Mon 26 Oct 2026 05:20:42 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:89:2a:81:04:53:79:18:15:bb:57:c5:5c:ab:0f:5a:43:d2:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:42 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e672c4881a79f058a28e718a031df4036a3bd44c4e8f521a83bd3bf468e843ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:b0:6d:00:b4:b5:c5:d6:d2:bc:a1:53:1d:
be:d2:94:fa:23:3f:ce:d9:be:f6:66:ca:ed:a6:09:
83:48:2f:b3:78:bd:6d:20:49:cb:5a:70:8c:23:e8:
47:6b:57:03:78:c4:89:8c:1b:9f:56:61:ab:4d:b3:
f9:35:bf:c3:3b:51:c6:26:62:3d:dc:bc:02:95:d8:
01:7c:c0:09:95:d4:7e:14:04:1f:e0:09:30:ac:b1:
f6:85:63:89:69:c6:be:94:18:13:cb:cd:57:f3:ce:
3e:ce:73:88:b8:11:ae:70:97:22:b3:b9:b4:f5:f0:
ac:e8:4c:20:36:c8:5a:3b:65:8a:b8:38:f9:a5:d2:
33:5e:76:a8:ef:e1:c0:bc:0e:8c:ba:e9:55:20:31:
53:e0:44:55:89:98:d3:62:cf:94:0d:10:c0:6b:29:
c5:6b:43:57:f6:71:6f:7e:aa:34:0a:35:5f:9f:fa:
67:3d:bc:69:88:63:13:1a:69:91:dd:7a:7e:24:df:
8c:3f:3c:bc:88:15:f6:04:05:42:a4:58:3c:d6:5d:
5d:ab:c5:76:94:48:cd:5e:71:2a:59:b5:93:bd:9e:
1e:b9:56:73:a1:e1:6d:d1:03:3d:8f:f2:bc:e2:20:
c6:f5:0e:55:95:c0:59:bf:41:1d:34:dc:23:fa:92:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:AC:2C:9B:15:43:1A:7E:E8:1F:33:B4:16:4F:C6:82:B5:AB:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c768f15e-576e-48c0-91d4-8446a6be70a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:ef:eb:07:8b:a2:c5:57:b6:8c:cf:91:47:4e:49:2a:cf:f5:
ac:2e:d5:ca:14:67:dd:af:4a:d9:c5:8d:2e:f0:fe:f3:c9:a1:
d5:05:80:a1:70:12:33:ab:6b:f2:c3:c3:b9:33:de:2d:c5:7b:
8a:fb:f9:73:38:b7:d8:71:33:dc:b1:b6:9e:8c:9f:e1:ba:59:
a9:a3:2d:06:4a:54:34:71:ed:61:43:93:d8:cf:e1:13:47:2e:
94:eb:2d:86:58:36:21:41:d1:6c:96:0d:30:09:45:61:60:dd:
23:f4:0b:f2:69:57:91:4e:95:7a:4e:6b:7b:0c:c4:2e:f7:a3:
20:c9:0d:e2:c2:c8:0f:64:a4:7c:f4:8e:da:2c:c8:8b:43:03:
56:dc:dd:b3:0b:40:ba:4f:86:c3:8e:df:ca:af:44:cf:60:1d:
da:f4:78:cf:dc:ec:8e:e3:26:dd:8e:fa:ac:2b:ec:2e:12:cf:
d6:b8:14:5f:e8:bd:f0:6e:1e:c6:d0:e1:fd:7f:bf:bb:66:60:
0a:f8:3f:90:c3:c2:e1:a0:df:aa:49:e4:db:88:00:24:f2:41:
bf:bf:3a:84:c9:31:e2:ff:94:77:91:f2:ce:c0:d0:89:6c:f6:
96:f9:9a:ac:6a:e7:96:87:53:62:7f:9e:5b:13:7c:76:55:d4:
1a:8f:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:27:01 2026 by rpki-client