Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd129ecb-5978-40fd-ada8-5ab27adcb622.roa
File: cd129ecb-5978-40fd-ada8-5ab27adcb622.roa (raw, json)
Hash identifier: s3RWLfuvPaFGM9S+6HQp9/bbnc5GqTO88TOXi16mC+Q=
Subject key identifier: BE:2D:DE:C8:9F:26:33:37:A3:D0:0A:86:AA:62:7E:81:9F:35:1B:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67429392B80FF08CBC3EE36EFF20F0DEEC6CA5E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd129ecb-5978-40fd-ada8-5ab27adcb622.roa
Signing time: Mon 26 Oct 2026 05:20:24 +0000
ROA not before: Mon 26 Oct 2026 05:20:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:42:93:92:b8:0f:f0:8c:bc:3e:e3:6e:ff:20:f0:de:ec:6c:a5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=676cc15c7058855395a2f054c82b655ea8e4d3c7dd1432ad1676ce3dbbe0a9c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:50:4d:65:a2:7a:16:06:55:b0:17:5d:4e:
e9:72:9d:40:39:8b:b2:12:dc:27:c6:33:6c:1d:af:
e6:04:35:bb:19:4d:c7:d5:13:c5:c9:a4:e9:64:eb:
48:bf:42:e4:f8:2e:ff:d7:28:ad:41:7b:22:d4:66:
b6:57:af:9f:85:04:22:ea:6b:44:bd:c5:b5:68:50:
b1:fe:d8:69:fb:96:c4:63:34:2f:62:56:65:9a:72:
a6:35:3f:71:83:60:c6:b1:59:98:d6:c2:b6:3c:72:
3a:55:20:03:08:09:e7:fc:a5:32:35:fc:3e:c4:02:
01:66:7f:d5:dd:d8:5f:03:84:27:f5:e5:58:4f:f5:
3d:e6:db:84:5b:40:db:fd:54:3e:45:1c:f1:e1:37:
62:81:aa:0f:71:6b:79:50:b2:90:b2:39:c9:81:d2:
fc:20:cc:d4:e0:d2:1e:8d:2a:90:86:83:45:34:95:
ad:bf:e9:c7:47:d4:f5:51:c6:b1:92:ff:e4:13:ba:
3e:04:14:2e:79:92:e3:97:a2:5b:de:75:59:a9:4a:
e9:f9:50:b6:b1:d1:c9:88:c5:03:b3:1f:80:39:65:
e2:73:70:f7:16:82:1a:7a:30:50:de:40:9f:a1:59:
72:30:72:67:5f:53:ad:d3:c8:11:eb:6c:9e:e9:78:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:DE:C8:9F:26:33:37:A3:D0:0A:86:AA:62:7E:81:9F:35:1B:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd129ecb-5978-40fd-ada8-5ab27adcb622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
34:9e:e9:57:4c:8c:7f:50:79:fb:39:a0:77:a8:90:5c:04:fd:
80:8d:9a:10:38:37:d6:32:17:da:16:31:ba:03:f1:d0:0c:0f:
c0:61:49:44:2b:ce:83:f6:d2:45:d5:87:5c:45:b8:d4:c3:83:
60:4d:65:a2:6f:3d:35:21:f0:ee:07:eb:54:da:f7:e0:5f:db:
0f:53:3a:50:31:4d:14:66:c7:66:6a:b3:f0:b2:d6:f3:a8:ba:
48:72:ce:18:2b:86:44:4d:ed:d6:eb:cf:93:23:27:e7:99:90:
07:a3:1f:bc:d9:ab:aa:2e:11:b6:ff:5e:81:14:58:31:fd:10:
e6:be:67:83:70:ea:a2:b4:66:93:2c:0a:f6:0f:38:d3:26:c5:
af:fb:67:2c:4f:af:5a:57:2a:be:fd:a6:47:f1:fb:bc:39:e5:
85:41:63:5a:73:d6:c0:f0:d0:35:7b:6e:3d:c6:f5:62:ec:38:
42:24:93:b0:30:8f:4c:4f:0d:37:4d:23:67:08:9c:49:73:91:
8b:4d:58:29:be:3c:2d:2b:84:9e:3e:72:23:96:9c:be:ae:f6:
68:89:47:1b:83:d2:a5:07:92:51:d0:c4:5d:82:46:00:d7:e4:
f3:7c:52:bb:96:4d:2a:10:d4:4b:66:5e:b1:5b:fb:31:4b:84:
a9:bf:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:38 2026 by rpki-client