Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
File: d7b89972-677a-470e-88ff-f95e3c9a9443.roa (raw, json)
Hash identifier: cChHHKHnkpXLY/UHZhj3VNJvdrypu1pTbfjnvjsoNrQ=
Subject key identifier: 34:75:51:5D:0D:21:F3:B2:EC:59:34:3B:E4:72:8A:C6:0E:51:CA:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32EEA4B9A33965C650AAFE9B55ACCC8C63CB3E21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
Signing time: Mon 26 Oct 2026 05:02:38 +0000
ROA not before: Mon 26 Oct 2026 05:02:38 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ee:a4:b9:a3:39:65:c6:50:aa:fe:9b:55:ac:cc:8c:63:cb:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:38 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=28d0069d9b078bd2ddca9d73df0939d9a5aa099547fb49e386f909a63907c5c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:b6:bd:6e:9b:29:d8:20:51:58:ee:cc:e3:
32:ee:3e:f5:bc:48:ec:7c:7a:6e:8b:78:10:43:02:
fc:b0:f6:1d:2e:0c:52:43:d8:bb:e8:79:5a:43:55:
dd:05:18:ba:ee:60:5a:28:92:20:ad:a0:69:2b:1b:
da:aa:33:26:ab:8c:10:cf:c9:64:e0:7b:bb:d2:e0:
14:20:6c:c3:00:a8:ee:d4:5e:69:e4:5a:30:c4:da:
ae:3a:5d:dc:f7:7f:9b:9e:d6:13:49:a4:b7:32:3c:
c4:12:11:5f:af:aa:6f:d4:0a:86:3e:c4:50:ef:8e:
be:14:23:78:0c:32:44:21:30:28:c4:21:a1:5c:b8:
82:58:58:d1:13:65:f5:4f:d7:ef:c3:e1:75:bc:27:
b0:ea:2e:da:92:32:14:64:39:78:d3:c0:73:22:b4:
93:b6:68:b7:11:77:7b:39:59:cf:c2:77:76:3a:5c:
13:ce:de:89:51:b7:c7:f4:1d:19:50:ee:1e:67:56:
fc:d9:ac:ba:5c:97:6a:20:fb:27:33:59:b2:c2:5d:
33:67:9d:c5:02:cd:c2:fc:24:21:a7:7d:b1:b5:a2:
2a:f7:c3:b4:4f:21:c1:d5:c1:11:f6:24:64:ba:0b:
c6:19:00:e5:46:27:94:7b:15:d1:ed:d0:47:d0:3f:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:51:5D:0D:21:F3:B2:EC:59:34:3B:E4:72:8A:C6:0E:51:CA:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:800::/40
Signature Algorithm: sha256WithRSAEncryption
c8:f5:e1:04:a2:67:0e:08:9c:16:31:44:6c:f3:d4:d3:99:4a:
9a:bb:ca:af:1f:cc:db:24:0a:4a:9d:c8:a8:bf:f6:20:49:19:
e5:e4:2b:47:d9:91:6b:6e:f0:2a:b0:e7:01:63:81:a9:e1:a4:
e1:f3:95:33:0a:9f:c6:34:4f:3b:cf:33:65:2f:76:b4:0b:92:
6e:c8:c5:2a:85:b5:c6:a2:cf:ef:19:20:ab:dc:23:1f:63:76:
18:a5:6f:06:e7:71:a4:35:9f:54:1b:24:40:2a:1f:03:8a:5c:
8b:1f:c0:2e:5d:26:c0:90:c8:e3:e3:fd:b8:a7:c1:f6:f8:68:
7a:67:21:39:cb:92:94:09:8a:a1:21:e6:ca:b0:9b:b2:48:21:
d1:e5:a2:51:98:88:8c:a6:a0:3e:50:8f:0f:f6:11:e9:0a:9d:
ae:b5:f1:e0:7f:e8:99:c7:25:cb:5c:c3:82:db:38:b0:b5:0f:
d6:79:f8:1a:bd:3d:60:c9:ca:88:b3:5c:0d:7c:2c:f4:c3:53:
72:be:56:64:a3:9b:2b:23:89:aa:81:cc:bf:c4:60:00:12:b5:
72:5e:e5:32:15:a5:12:cf:d9:a3:a3:b5:1a:21:91:03:64:3e:
8a:20:86:18:cb:52:62:23:1d:d0:80:75:8d:f6:73:2b:c5:d4:
95:f8:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:57 2026 by rpki-client