Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
File: c9cee224-c41f-451e-ba80-f0bceb6623bc.roa (raw, json)
Hash identifier: TXyI0Wgn3B9ZedCA2ZIPwGOLItvb9rTwjOz2oRjUnm0=
Subject key identifier: 2E:39:B8:22:00:3C:8F:69:34:B2:86:89:98:03:31:3C:B0:A5:33:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C30D6A4D4006D68AE2B4A4C05C5B25ADA2C4A17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
Signing time: Sun 11 Oct 2026 15:08:12 +0000
ROA not before: Sun 11 Oct 2026 15:08:12 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:30:d6:a4:d4:00:6d:68:ae:2b:4a:4c:05:c5:b2:5a:da:2c:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:12 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=819af8129265404bd33ce40238164fd6afb3171fb3c72eee2225f49a6b146732, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:4b:7a:21:0d:91:ae:a8:d6:26:9c:19:97:
5e:d4:8a:35:a3:3f:39:8b:9a:54:79:04:73:f9:9b:
dc:fa:51:16:84:e9:b0:25:ba:40:7d:61:6f:4f:bb:
bb:35:60:95:5f:63:5f:af:d9:0d:4b:5a:38:2e:4d:
57:ea:d7:b1:24:0a:53:8e:86:79:5d:89:c7:16:9e:
ab:3f:c2:77:1f:5a:67:7b:88:01:2f:77:a1:f4:30:
28:73:ab:17:64:37:cc:ef:ff:39:98:34:c1:68:f3:
8c:c0:b6:64:ae:61:21:ba:55:a7:e5:89:82:a2:ca:
76:af:ad:b7:6a:e9:f8:f5:df:eb:0c:47:02:6b:a1:
67:0c:a0:29:db:0a:34:97:9b:de:b8:10:a6:a6:65:
c3:c3:78:83:4f:d6:e2:a9:ee:65:4a:61:1f:b0:94:
5b:5f:f3:9a:b2:e9:d5:02:fc:96:8f:49:48:cf:81:
99:2d:c8:bc:d3:99:0b:41:f5:27:e1:ca:36:10:75:
18:f3:f9:bb:cb:51:8e:2b:2b:7e:74:5a:3c:e2:53:
d8:69:ec:93:e0:2c:e5:0a:78:fb:d2:d4:67:8b:b2:
02:24:db:41:b9:8e:3a:a1:9f:16:84:a3:39:ba:8e:
a9:66:d1:9d:8d:9d:e6:67:8b:d9:0b:6e:12:73:44:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:B8:22:00:3C:8F:69:34:B2:86:89:98:03:31:3C:B0:A5:33:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4080::/46
Signature Algorithm: sha256WithRSAEncryption
28:d7:3d:57:d0:99:10:df:94:b8:64:3d:5e:53:c0:26:93:28:
86:98:c6:da:01:53:26:4c:a9:0a:e1:3f:26:db:b2:18:2a:9e:
76:a0:0d:63:04:b8:9b:b0:1d:d2:72:49:84:4e:7c:cf:c6:79:
75:d9:0f:f4:1f:3c:43:a8:5c:81:d4:ab:fe:f2:34:78:02:5a:
ec:cf:26:fb:bb:ce:15:be:5b:ba:5e:d5:53:9d:53:9e:96:a3:
19:80:a4:31:a0:e7:8e:58:a1:bf:2c:ef:e8:a3:f5:45:d3:4b:
95:37:4a:bf:21:ae:ec:49:5a:fe:8b:76:a0:ad:af:e3:cd:76:
cf:76:2f:7e:8b:44:8c:09:7f:19:37:8e:8c:b5:73:05:45:c2:
a7:99:27:d5:1a:0b:28:8a:cf:d5:25:1b:b1:30:05:64:d5:50:
f7:15:5d:5d:f8:3b:57:f9:e7:78:d4:c5:1d:6a:b4:d4:98:2a:
0d:b8:ca:4f:6b:dc:46:7d:29:b5:10:ca:92:c4:66:c1:1d:bb:
3b:45:73:af:39:70:5b:4c:87:cd:b5:a0:9d:4f:1e:3d:5a:7d:
a0:1a:47:b6:7c:4d:4b:97:ee:3d:13:48:65:55:70:55:77:f1:
6d:2c:09:1f:a9:ba:e9:17:fb:05:29:9e:5a:27:29:17:10:05:
c6:f3:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:27:03 2026 by rpki-client