Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa
File: c8af18fc-ae06-42ae-9533-a5516ea722d4.roa (raw, json)
Hash identifier: rzp5ucatV97Pnf7PHdbdHQAYdIqep3prYjH8XfgCv9U=
Subject key identifier: DA:E3:15:13:0B:37:49:C6:A1:DA:BC:EF:5A:5F:24:8B:4A:E6:A7:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02F36B0D9376C227EA60038198B510C935649E56
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa
Signing time: Mon 26 Oct 2026 05:10:06 +0000
ROA not before: Mon 26 Oct 2026 05:10:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f3:6b:0d:93:76:c2:27:ea:60:03:81:98:b5:10:c9:35:64:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ff320e56c73771508d20ad4b2c74a246a253dedce377ebe84bc2379db265f7d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:50:97:7f:ba:46:be:22:a8:3a:d3:8e:b7:
a7:0f:68:10:3b:be:fb:10:b1:43:89:d1:57:c7:69:
cc:e4:57:07:8f:ac:2b:0d:0e:cd:50:37:df:a0:ae:
2c:1f:25:37:59:a2:dc:74:d4:de:48:f3:fe:25:4b:
9b:f2:34:8c:dd:24:c7:1d:72:c7:bb:34:2c:eb:f2:
06:c3:b5:ff:bd:12:1c:10:a7:3c:f4:47:ba:64:61:
75:ef:2e:da:d8:82:36:77:bc:15:cc:b9:53:c3:fe:
5d:68:3a:36:46:48:0b:3e:e9:bd:55:dc:7f:ae:51:
40:92:66:e3:fd:3e:26:1b:cf:1e:c3:43:64:98:0d:
78:32:ac:d6:ac:88:ab:af:7c:26:9e:39:34:9c:de:
f2:54:7b:2d:30:36:25:0b:06:32:0c:d3:ee:2b:0c:
1d:03:a7:4b:d4:ba:00:26:a8:ee:23:67:66:3a:df:
da:c6:09:db:b1:09:a2:41:20:2d:8d:9c:9f:80:a3:
a8:69:f1:0c:6e:d8:23:80:8d:bc:b7:8d:05:e7:8c:
76:79:45:cb:61:cd:47:70:5c:5b:49:4d:16:6e:eb:
27:8c:bc:c5:a5:dd:b0:97:d6:3b:28:17:99:d1:0b:
b5:e8:66:90:1f:a7:50:54:fb:28:c3:f4:78:d2:77:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:15:13:0B:37:49:C6:A1:DA:BC:EF:5A:5F:24:8B:4A:E6:A7:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:9080::/48
Signature Algorithm: sha256WithRSAEncryption
0e:bb:19:f2:13:8e:c5:73:e2:0b:c2:89:1a:fc:ba:67:0f:41:
70:6f:81:a0:19:b3:4e:0b:ca:cd:24:a6:b5:13:50:4d:0c:07:
14:80:cf:45:d3:1b:7e:66:67:e8:72:bb:87:9e:6b:fb:9a:35:
3c:54:1d:cf:33:a0:48:99:d8:d5:ea:2b:c7:60:22:30:d7:52:
c9:a8:fd:74:a2:f3:62:99:7b:1c:d9:ee:18:f9:fc:88:06:ab:
5c:3f:ec:cd:70:9c:7f:14:75:f5:bf:52:52:50:8a:fd:00:7a:
fd:f9:1b:fa:e1:e9:92:aa:7d:c4:98:52:91:9c:f3:71:3a:c6:
31:e3:4a:15:0d:4c:ff:e0:40:33:8e:f7:04:38:53:3d:56:f5:
33:ba:73:a7:d1:25:6d:6c:0f:b8:0b:fd:2b:b1:1b:62:33:75:
03:b0:ae:39:5d:f9:89:76:d5:c4:f4:3c:c0:02:f3:a0:9e:58:
39:02:d2:66:d0:01:bd:17:eb:94:c3:e6:eb:07:86:54:4e:96:
69:18:13:de:aa:cd:f4:37:14:dc:a2:b7:bc:77:75:cf:41:69:
c6:fe:f4:c5:0c:d3:86:81:bf:ef:37:24:1c:a5:6e:41:58:18:
92:89:93:c0:5a:01:97:6c:71:1d:b8:17:42:2f:d1:e1:26:ae:
10:74:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:14 2026 by rpki-client