Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7b18cc2-920e-43bd-bc04-881af07ed0df.roa
File: c7b18cc2-920e-43bd-bc04-881af07ed0df.roa (raw, json)
Hash identifier: WeyPGlKVklSlRB8uU4pgEYFHpgf2zNAQ4Gov89+Eha4=
Subject key identifier: C9:2D:C4:F4:DC:CD:FA:F7:64:79:F7:56:A2:BA:DB:1B:F6:B0:87:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 396EB651C4B9A3EF7B0ED3A679A5786640ED4404
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7b18cc2-920e-43bd-bc04-881af07ed0df.roa
Signing time: Thu 29 Oct 2026 01:02:29 +0000
ROA not before: Thu 29 Oct 2026 01:02:29 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6e:b6:51:c4:b9:a3:ef:7b:0e:d3:a6:79:a5:78:66:40:ed:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:29 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=4289a0a7b4920f16d44e60f7ff79e9133d64d055f6c97d709432feeb87338446, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:cd:16:7a:10:27:f9:c7:c6:a3:78:a1:34:
2a:02:32:9b:64:11:ad:eb:57:24:3c:46:11:73:68:
a4:2a:a6:12:07:53:46:2a:c8:91:e7:89:d2:d3:fb:
c9:71:1f:d6:dd:98:cf:52:70:9b:eb:a0:8d:70:2d:
65:64:50:6e:f5:72:b7:0c:81:ad:3b:72:b7:1a:9b:
4c:b7:c3:c2:a0:ad:80:54:a0:3e:80:9e:78:ea:c1:
07:0f:f4:56:79:2a:e0:62:74:fd:96:3f:5a:61:69:
f2:02:55:55:f2:47:cb:5b:86:16:a4:8a:51:0d:d3:
a9:b5:a0:63:2d:63:e9:c2:b9:b3:d5:e7:e2:5f:3a:
6e:1b:2c:d5:c2:c5:76:05:10:64:8a:58:02:9c:39:
c3:68:0a:f2:7f:03:84:79:61:07:2e:2d:2f:61:f9:
83:0b:47:e6:70:72:4c:d7:ba:a4:52:ba:44:2e:b4:
6d:d8:3e:6e:cd:79:55:26:2a:7d:2f:07:07:08:a4:
9e:6a:1d:6a:2b:a2:ce:62:bc:3e:19:68:d0:aa:b7:
61:69:6f:45:87:c3:97:b8:11:7c:f3:1c:fa:b4:34:
d9:d0:31:e6:28:93:ba:3f:64:cb:6e:63:65:1b:52:
0f:19:08:75:fc:ca:9b:0c:ff:99:64:a2:13:49:42:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:C4:F4:DC:CD:FA:F7:64:79:F7:56:A2:BA:DB:1B:F6:B0:87:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c7b18cc2-920e-43bd-bc04-881af07ed0df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4000::/40
Signature Algorithm: sha256WithRSAEncryption
09:3d:3a:33:53:db:91:1c:57:6d:0e:e0:b2:9e:14:fa:4f:c1:
fa:1b:e0:ef:f4:5d:7e:8e:90:19:dc:9b:bc:b6:91:43:eb:6e:
1f:32:0a:41:40:29:56:1f:4d:b7:49:fb:08:33:f4:53:70:78:
3b:c2:e9:b7:9b:49:00:d6:e5:2f:dd:6c:0b:a7:28:5f:9d:75:
ed:17:8c:46:2e:2d:83:bd:9e:08:d1:87:cd:fd:63:5a:25:00:
0c:2b:db:94:3f:57:fb:dd:97:3b:90:63:43:47:fe:7a:cf:f3:
a4:7d:92:0e:7d:15:86:11:49:10:c2:9b:39:4c:97:7e:c0:0e:
ff:b4:ef:5c:7c:43:ec:52:d9:46:92:8f:b6:e0:d0:18:a2:1a:
61:13:70:e5:e4:9d:45:da:67:b3:96:78:33:55:10:2b:ef:24:
01:43:cb:81:af:ba:8a:73:59:3e:3a:66:da:13:f9:93:88:54:
28:58:f2:fa:42:58:cf:d4:74:8d:54:c3:b2:08:85:4e:cf:29:
53:80:ea:3b:05:1f:0f:33:b8:45:cf:85:e6:5d:8f:b5:79:bb:
02:72:fc:71:34:ba:77:df:ac:18:e8:91:df:71:dc:93:28:9c:
db:25:c6:7d:91:72:fe:08:a0:d5:d9:04:c9:d0:68:68:a2:2f:
47:87:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:51 2026 by rpki-client