Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
File: d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa (raw, json)
Hash identifier: 4aHHBNkZW0Ai2VtI901uVAhlAQdDuYaxYfl1DWYvB+c=
Subject key identifier: 12:78:C3:44:2F:69:E3:5E:75:54:FF:A7:F0:AD:FB:DF:1F:EA:72:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 246BECAC075DAF186C54C30F319AC0B67E558CA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
Signing time: Mon 26 Oct 2026 04:50:27 +0000
ROA not before: Mon 26 Oct 2026 04:50:27 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6b:ec:ac:07:5d:af:18:6c:54:c3:0f:31:9a:c0:b6:7e:55:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:27 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8268c19bfbcb22c9dd3e415d0c6cbb7b231d85c01b73c1a2ecb467a3b5b13798, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:83:ed:7b:c7:60:ef:d8:2b:25:36:5a:03:
d7:6a:75:c0:7b:55:94:e9:ea:b0:b7:56:aa:92:59:
82:0b:47:9e:cc:4d:fc:bd:7c:c1:52:51:e0:d9:e6:
dc:61:ec:58:5b:71:95:22:3b:b8:94:0c:47:46:ee:
61:0c:94:05:71:41:ea:76:46:a8:72:cd:7f:31:5d:
4f:23:0a:68:6e:00:0f:56:63:51:b2:9c:a2:70:e4:
02:51:62:5a:0f:53:11:4e:71:fb:c2:36:ea:f2:5d:
be:20:77:56:f8:f2:4f:fe:3b:03:4e:08:87:df:fb:
fd:0f:52:d3:2f:43:9c:0e:ba:50:8d:c5:ec:79:57:
78:d0:52:45:62:cb:d2:c9:15:a5:c2:86:cb:fc:be:
c5:73:48:9f:1a:b8:5f:6d:c4:8c:87:96:9a:d3:c3:
4d:e3:c0:c7:84:05:2b:24:3c:8b:2c:4d:0c:08:c9:
b9:27:62:45:21:ab:40:11:62:36:47:88:70:f6:df:
c3:42:61:c7:a8:00:6d:59:bb:fe:46:50:c2:f8:5c:
64:1b:26:9e:86:db:b3:0b:22:b8:60:f1:ec:e6:47:
4f:9d:2d:d8:5c:e1:02:38:8f:57:a4:41:9e:72:43:
0e:ff:cb:cd:e3:80:c9:7e:90:0d:1a:2f:80:44:3f:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:C3:44:2F:69:E3:5E:75:54:FF:A7:F0:AD:FB:DF:1F:EA:72:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:400::/38
Signature Algorithm: sha256WithRSAEncryption
10:39:c4:02:3d:e9:a6:71:18:40:69:80:54:a5:b7:74:0a:30:
62:ab:47:f8:40:45:ef:57:1a:41:8b:e3:9a:87:51:f5:d4:92:
65:77:88:d1:fa:27:7f:bc:40:53:84:f9:e5:ed:7b:ec:cb:73:
82:44:4a:75:c7:7a:d9:a3:55:34:36:c2:da:ba:ef:ff:8c:9a:
67:fe:1a:2b:a8:2f:18:5b:7a:4f:15:8f:08:e2:4b:0e:8c:b8:
44:9c:cf:bd:46:77:c1:d0:b9:84:5d:eb:fa:21:15:0c:87:1b:
45:83:75:08:30:ec:ff:ac:5b:9e:73:b6:17:03:b7:d2:43:71:
c3:5f:01:fb:44:d0:6e:c3:66:ab:88:75:49:e1:77:cc:52:d2:
0d:9d:3c:06:9d:0b:dd:f6:63:00:b7:61:af:8b:53:13:d5:1a:
05:28:37:c8:3f:5d:80:26:3f:56:1f:31:1f:e4:bc:f0:f1:4d:
21:cc:86:aa:61:bb:d4:7c:58:5c:d7:6e:1d:f8:99:5e:fb:23:
be:c8:ad:04:c1:48:98:98:42:f7:3f:0a:56:40:f4:7a:18:b4:
0a:25:dd:37:97:58:02:fe:79:c4:69:cc:15:a5:c9:71:a1:f3:
02:22:19:a5:e4:69:2a:aa:51:e7:67:48:08:88:cb:75:6a:9b:
7b:c8:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:52 2026 by rpki-client