Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
File: d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa (raw, json)
Hash identifier: vDMG/8266+5ysl77v7Xe5ljkot6tZl0suPf1RoqQCxI=
Subject key identifier: 22:1C:67:8D:42:D4:77:D1:90:26:D9:AC:52:85:82:59:B8:CD:EA:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CAC049F6202696BA92E684D85F5EEC7D8F2000C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
Signing time: Sun 04 Oct 2026 00:30:44 +0000
ROA not before: Sun 04 Oct 2026 00:30:44 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02f::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ac:04:9f:62:02:69:6b:a9:2e:68:4d:85:f5:ee:c7:d8:f2:00:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:44 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=9d41777fd0ade4f75ba451c676274d3974f82f3f89d163da77e9decb850c0b73, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:47:04:aa:2b:09:4c:48:75:19:16:7d:27:
d0:eb:75:40:8d:fb:43:5d:bc:38:b8:cf:08:f3:78:
08:d9:03:67:fb:23:e5:33:ce:29:98:80:c9:9e:68:
c5:b6:b4:eb:20:5d:be:86:5c:3e:4e:6e:d5:69:26:
37:69:23:c5:a1:e0:01:2f:a1:ea:f4:ef:48:85:a7:
59:8b:7c:5a:64:5a:57:4c:77:8e:4d:4b:a5:71:6d:
96:e9:a3:52:73:09:bb:29:17:77:bb:44:ad:d5:98:
04:85:a5:5a:26:a7:17:27:52:de:3a:cb:01:c4:a2:
00:6c:84:82:d8:6a:0d:7e:63:d0:d6:93:01:e2:27:
62:a8:f6:92:cb:01:f4:9d:45:b9:8f:5c:86:80:01:
53:e3:a6:16:d9:a5:e9:7c:bc:7a:a3:16:1d:3a:8f:
94:a7:4a:a1:3f:94:03:1e:8e:d3:ee:d0:84:d3:c9:
57:6d:8b:4c:0b:ce:a3:3a:fe:73:9b:60:5a:ab:3d:
d1:55:bc:bd:44:ce:8d:6c:61:8e:8c:ac:a1:89:cd:
1e:f8:4e:bc:a3:46:d2:48:15:2b:3b:ab:3f:eb:af:
0e:0a:60:f7:d0:58:8f:3f:f0:d7:0c:f4:58:5b:aa:
9f:2e:42:46:37:e7:cc:cc:4b:6c:87:85:8b:b9:51:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:67:8D:42:D4:77:D1:90:26:D9:AC:52:85:82:59:B8:CD:EA:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02f::/37
Signature Algorithm: sha256WithRSAEncryption
9e:f1:d5:79:41:fe:5a:d1:f4:e1:07:65:a2:74:df:9e:0a:a1:
fb:f4:05:21:07:6e:5d:15:24:e7:6a:a4:00:2f:c6:25:d8:fa:
dd:1e:94:ae:88:68:9b:b6:db:5d:fc:fd:fa:ef:d1:3a:bb:94:
f4:73:a3:eb:d7:d0:67:ae:0b:4b:bd:c1:ad:1e:78:87:86:88:
77:3a:f8:5f:c9:c7:21:d9:ee:f9:ad:a0:a0:d7:f3:3c:50:a0:
b7:93:3f:5e:24:dc:e6:aa:8b:d1:75:84:78:e1:12:6c:c2:0b:
ac:65:39:bf:f6:3b:49:ee:04:91:0f:e2:e1:d6:0e:08:bd:ea:
0f:bc:51:f2:96:ac:ee:cf:d6:ec:d1:aa:b6:07:e4:f1:68:ba:
83:ee:24:db:29:a5:4f:30:98:a1:1f:58:7a:22:86:8a:e7:14:
ed:58:58:85:9e:39:f7:19:96:31:43:84:bf:3f:d0:e7:27:56:
53:35:80:35:ee:c3:0a:94:f7:59:a8:6f:fa:28:70:7c:eb:7b:
e4:74:df:a0:55:28:90:ff:99:2a:18:05:3e:79:18:61:d4:36:
34:81:1d:ae:be:da:f4:89:a1:2c:b8:99:1e:55:c6:c4:f7:d9:
28:f8:8d:09:20:db:f3:a8:be:64:36:d8:f7:2e:1e:49:08:85:
99:5b:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:45 2026 by rpki-client