Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
File: d5fc0fee-af50-4f94-a822-c9f3238359cf.roa (raw, json)
Hash identifier: DPD/Kwzynr0NsGyw/zVr7nSQqeF6mxmywzff59Eb7hg=
Subject key identifier: 22:D4:53:EA:FF:91:47:8A:7B:D6:5C:B7:79:83:7A:09:3D:E2:95:EE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D45F099E38C4D9BA9EB15B5FF06B76E50380459
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
Signing time: Sun 11 Oct 2026 15:20:20 +0000
ROA not before: Sun 11 Oct 2026 15:20:20 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:45:f0:99:e3:8c:4d:9b:a9:eb:15:b5:ff:06:b7:6e:50:38:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:20 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=7a75b2557c467b46b3911f59ec593890e87b34d8cef96f97e068f3fedeeb1f35, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:9b:36:d2:b2:4d:06:b3:60:63:9a:95:3a:
30:fe:da:34:83:32:17:6d:71:c9:1d:02:c7:6a:66:
f9:10:18:f9:a5:23:5a:b4:56:30:26:08:88:15:51:
59:31:c0:ea:b5:1e:63:fb:51:a0:f1:80:e0:88:13:
61:a3:33:61:d5:16:b5:68:79:94:7f:64:2a:9e:bb:
09:43:87:70:6d:70:b6:88:94:d3:30:9f:c0:0e:9e:
f7:31:b0:97:25:71:ed:50:a2:04:53:eb:c7:81:27:
1a:0a:48:5c:32:63:71:07:f8:99:b4:cb:b4:10:dd:
79:38:cf:47:32:dd:fb:92:04:ed:92:e9:68:05:5b:
61:e2:d6:72:48:d3:84:65:60:37:70:a8:6f:cd:70:
70:fb:d8:c6:89:15:bb:b5:60:13:de:ae:09:ae:97:
e3:e9:ca:86:54:ed:23:08:39:61:9d:83:1b:d0:1e:
a5:e1:e1:51:a1:a6:2e:23:a6:0f:77:62:08:b5:6c:
fc:1f:80:eb:12:aa:18:18:c6:cf:91:3d:31:5d:a1:
67:65:61:c6:e7:73:05:0f:2b:ab:01:4c:71:c4:ab:
6a:92:f8:ea:70:c7:a4:fd:62:ec:35:45:62:de:3c:
5e:6e:fb:a3:dc:ec:01:45:66:da:48:bd:ed:1d:e0:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:53:EA:FF:91:47:8A:7B:D6:5C:B7:79:83:7A:09:3D:E2:95:EE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2000::/40
Signature Algorithm: sha256WithRSAEncryption
99:7e:24:c7:71:41:16:d5:62:22:34:b8:8f:69:d8:37:5a:7a:
4e:58:2b:8c:08:f6:d6:2f:00:3c:c8:1a:82:7f:8a:5a:be:50:
17:49:88:dd:a5:1d:bb:5e:46:31:24:03:aa:8e:d0:03:80:24:
12:04:11:df:2f:99:41:41:df:81:b1:f4:25:3d:da:a9:39:7a:
e2:76:78:b4:b2:61:92:8b:94:25:3e:7d:81:2e:23:0a:92:94:
bd:9b:14:61:50:5c:3a:ef:48:31:ca:91:9a:2e:e6:bd:0f:f0:
1f:c4:7e:87:37:90:5e:5f:fa:c0:da:c4:bd:a1:46:88:92:cb:
06:8e:0d:c4:c2:55:18:e0:19:80:a3:6c:9b:4b:76:87:5b:83:
61:8c:74:4c:b3:16:24:8a:84:3b:45:4b:20:ca:5e:94:29:f6:
da:d7:57:4c:8f:d3:d2:2e:02:70:45:e5:b8:9b:ba:3e:18:62:
1c:57:a4:d9:e2:e9:60:d2:ad:2e:79:ea:b9:3e:74:97:d4:36:
0d:0f:7c:72:f2:7a:d4:fb:46:0b:99:2e:98:de:7a:0d:fd:b4:
8b:7b:85:92:20:26:45:aa:5f:2b:eb:bb:8f:54:f7:f9:61:61:
78:95:c2:71:88:ed:24:ef:b5:1b:4a:2b:76:cd:41:c1:5c:28:
58:49:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:52 2026 by rpki-client