Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa
File: d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa (raw, json)
Hash identifier: 88fSNIpF1Dv9G31p/V5IAPvnDmmZgamndyhvQ8ZLI1k=
Subject key identifier: 10:02:1E:ED:74:A8:C4:1A:8D:D6:66:59:64:AF:C0:8E:E1:24:29:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 055EB66D3BCA745F793FF6C9E107E1BE81903E25
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa
Signing time: Sun 04 Oct 2026 00:30:43 +0000
ROA not before: Sun 04 Oct 2026 00:30:43 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5e:b6:6d:3b:ca:74:5f:79:3f:f6:c9:e1:07:e1:be:81:90:3e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:43 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=f4d43c61082687708b25ea331df49aa35add575c81aaf1fd6afd24e7f7c5f599, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:41:c9:4c:72:8d:aa:7d:2b:7f:a7:34:d9:
6b:69:45:7c:fa:7e:27:fe:91:7d:2d:c6:46:0c:1f:
85:33:63:75:e5:da:ea:44:5a:fe:fc:f2:95:21:a7:
10:78:6b:6f:6a:5e:0d:4a:f9:25:2c:1e:38:c3:1b:
26:79:b8:7b:05:3b:f6:17:ad:c4:ba:15:8a:55:f5:
e4:33:e5:50:b8:d6:96:08:1f:f5:5e:3c:92:cd:e3:
27:6f:61:46:75:40:26:07:aa:c5:91:c0:24:3b:ac:
ce:93:a7:50:64:d8:48:06:92:df:63:48:65:8e:bc:
b8:f3:aa:69:cb:db:62:f8:5a:a4:18:a2:55:f0:74:
71:91:d7:3c:4f:34:72:1e:c9:0b:eb:0d:4e:6f:92:
9c:09:3f:02:3f:a5:d7:48:44:f9:b9:6e:c2:8b:e7:
4b:ec:35:19:16:98:a0:79:aa:82:78:45:d3:fa:58:
d1:7d:96:a0:77:4d:d4:ec:a4:3a:70:bb:69:bd:49:
bf:90:12:02:10:7e:48:bb:4e:73:d5:60:03:68:7e:
a4:82:d1:b7:45:c7:e2:d1:c7:62:b3:62:0b:a9:9e:
70:79:93:84:58:e5:7c:12:13:a7:8d:ca:f5:3a:13:
46:6d:87:92:b8:1b:5c:1b:05:ef:84:c3:d6:83:6f:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:1E:ED:74:A8:C4:1A:8D:D6:66:59:64:AF:C0:8E:E1:24:29:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e5cd11-e33b-4080-91d5-f550f1d7a0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f::/37
Signature Algorithm: sha256WithRSAEncryption
1f:d9:b0:38:31:8f:4d:a0:33:f1:7c:28:2b:3e:40:bd:f8:16:
a5:54:f6:7d:f1:4e:20:99:36:ae:ab:8c:34:3a:62:5b:75:21:
2c:69:91:53:fe:d9:f6:98:3d:08:6f:fb:ce:b2:24:28:1e:ae:
87:e6:e9:25:c7:19:3c:d3:53:66:14:17:8d:d6:f6:32:bc:3f:
fb:ef:69:7f:9e:b6:76:79:f0:e0:51:27:97:ff:4f:fd:64:02:
66:5a:29:49:25:34:f9:48:bb:93:60:76:11:5b:95:01:dc:41:
f3:40:34:2f:1d:7d:8d:67:46:40:f5:69:8a:5b:df:90:d8:a0:
46:70:47:18:16:17:37:e7:86:77:e2:2f:32:92:01:c3:a7:e6:
4d:ad:d8:60:c8:d0:d0:72:4d:27:38:44:38:e9:c1:c2:2a:0e:
df:97:f8:71:72:d6:1c:aa:b9:fc:cd:a4:08:d1:16:5c:09:d9:
07:f0:7f:63:17:c8:e8:ba:9f:99:ad:7f:48:33:86:41:34:65:
52:45:68:72:10:8f:cb:8a:ca:39:a4:27:72:8d:57:ce:f4:64:
25:fc:d2:d7:68:66:bd:1e:76:fc:3c:91:d4:2b:34:d8:2b:55:
76:23:26:0f:34:48:84:05:df:88:23:6f:97:aa:fd:4b:44:7f:
63:38:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:48 2026 by rpki-client