Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa
File: e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa (raw, json)
Hash identifier: bHVSic9dt6my0dBGQ1yLogBNg8ttpexI1tEpSs9a/Vo=
Subject key identifier: 98:61:5A:49:59:5D:5C:41:AE:60:FF:0B:CF:B2:93:A8:0C:86:C5:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65C5AC5A8339BB83A4FD27687E6130B375A05CCD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa
Signing time: Sun 11 Oct 2026 15:08:13 +0000
ROA not before: Sun 11 Oct 2026 15:08:13 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:50c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c5:ac:5a:83:39:bb:83:a4:fd:27:68:7e:61:30:b3:75:a0:5c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:13 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=66c7ebf046882493fc1d33e3fe7d8d0df68eada5095f19fdc4c701aa20f433d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:59:1d:e1:7e:a1:80:e8:c5:99:f7:f1:0c:
c4:11:6b:18:54:15:1b:a4:0b:cb:1d:ed:02:36:ab:
97:6c:35:59:02:f2:f5:20:c7:05:9c:44:ef:aa:df:
da:59:a9:c1:17:dd:07:99:c5:05:00:ae:88:21:fe:
5a:49:87:d7:55:f4:74:b0:66:aa:db:95:b7:1d:eb:
c8:bb:bf:d8:19:59:d9:cf:0a:c4:f0:40:92:04:fd:
37:9a:20:c5:de:47:5e:bc:7f:69:8a:d9:11:7d:3b:
3d:b6:d7:9e:6f:4f:05:20:62:d6:d6:e3:cf:cf:d6:
b9:e1:30:6d:13:e4:1c:ff:13:81:60:ef:7b:18:15:
83:da:59:43:67:5f:fd:8d:29:f0:c9:a9:7c:0f:cf:
1b:eb:ed:fe:34:50:e1:ef:66:fb:b2:91:9c:38:83:
42:26:84:a1:94:d6:34:e6:43:16:7b:62:3b:c0:5d:
7c:4b:42:4c:92:26:c3:84:25:ff:ab:e7:94:66:ec:
d1:bd:aa:51:67:9e:87:b8:66:03:12:36:18:aa:41:
c9:35:0b:15:b2:0c:1c:0b:4c:02:c0:71:c0:44:26:
f2:19:63:cf:5a:6b:70:15:05:e2:49:36:f3:13:2c:
50:4d:a4:79:e4:cd:f3:bc:dc:c7:32:f2:b0:e9:e2:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:5A:49:59:5D:5C:41:AE:60:FF:0B:CF:B2:93:A8:0C:86:C5:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0f2e0c7-6d9c-428b-85e5-6a924e7414db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:50c0::/46
Signature Algorithm: sha256WithRSAEncryption
17:f4:82:04:1b:70:0b:16:1b:0b:ef:3b:a8:61:bf:85:40:ac:
9c:17:6c:e3:ba:d0:71:89:5d:40:6a:c8:c2:77:48:8e:ae:30:
c2:c5:01:ba:74:58:26:fb:b3:8c:f8:be:26:b8:4b:62:37:54:
39:e9:0f:d6:0b:ef:cd:11:22:c7:b9:1b:b2:47:23:d3:c7:e6:
8e:72:21:be:11:e2:08:1f:1a:80:a2:3a:1c:be:12:21:7a:2b:
ae:48:3c:c8:83:d1:ad:f1:3f:9a:6e:ef:33:92:e9:e0:64:da:
2a:46:ed:3e:53:fc:b0:7c:df:f9:60:66:58:2c:02:93:95:a6:
22:cc:ee:28:a9:d7:cb:54:bc:1f:75:f4:70:70:dd:5e:c5:0f:
3e:5d:9f:aa:25:9a:ff:ca:7a:85:b4:84:98:29:52:7f:88:7e:
fb:ca:79:0c:ef:6c:86:1a:c2:2b:29:36:27:6b:c0:97:dd:38:
f1:11:47:03:13:fe:d1:59:8f:cd:27:d7:94:7f:32:6f:35:d7:
9b:58:a0:1b:da:b5:d8:b5:2d:d2:cb:f2:07:21:cb:95:d6:0f:
3c:e2:39:27:cb:78:41:65:64:23:b7:68:ae:9d:22:1d:a9:ec:
46:91:58:a8:6d:35:95:b1:2c:d0:d0:ae:fa:1a:6c:8a:ad:f0:
d1:b9:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:51:45 2026 by rpki-client