Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
File: e5179068-cbcf-4f9a-864d-3c97430c84f4.roa (raw, json)
Hash identifier: 3ww6ZRG056Qq1qHkiIPWBIS8e1oDcXM7P8qgsWEHZRE=
Subject key identifier: C8:DD:F8:C0:5C:8D:CF:F0:23:07:21:5E:4F:F3:EA:46:A5:42:6A:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F7B716643E083A051034355271CC9DAEDA72E09
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
Signing time: Mon 26 Oct 2026 05:30:29 +0000
ROA not before: Mon 26 Oct 2026 05:30:29 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7b:71:66:43:e0:83:a0:51:03:43:55:27:1c:c9:da:ed:a7:2e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:29 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=03af692544dcc7ac854f17aaafb5429faee5b629d2193a06e3ed4eb6edbe1fe7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:e2:fb:aa:7e:29:04:54:b6:62:82:68:a7:
a8:7b:e4:a6:39:07:21:fa:4f:1a:49:58:c8:df:a8:
b5:9f:4c:ba:26:fd:ab:55:f4:f0:f0:bd:25:42:9f:
e0:1e:7a:70:83:4e:57:d5:3b:ca:80:84:bf:57:a5:
c4:df:d4:9a:be:b9:15:3f:ee:2a:17:13:de:ab:95:
e0:14:c9:70:99:35:0e:95:4b:91:e5:cd:94:e9:95:
fb:7b:4e:03:4b:4a:36:c2:71:69:d5:e4:89:f6:b0:
c5:88:15:93:68:ef:39:6d:32:7b:7e:9d:05:ae:9c:
f2:0c:bf:22:5c:45:6b:0d:4c:f8:4c:4f:10:7f:0b:
74:f4:e7:42:08:de:23:99:0c:5c:1d:ef:80:9f:a7:
19:b2:7d:b0:c6:bc:d0:e8:82:2b:22:ee:65:7a:1e:
b6:1b:81:7a:07:1a:2f:2d:b7:f7:00:86:5c:c1:e7:
d3:04:3e:c9:9e:81:3c:bc:bb:27:df:8a:b3:2b:cb:
3c:00:28:cf:97:07:c2:17:10:8a:b6:62:42:66:c7:
23:82:da:d4:b2:ea:9c:1d:27:84:48:4e:b6:d5:25:
15:31:18:37:4e:95:71:c8:63:45:0f:b1:ea:d6:c8:
22:9a:03:ea:54:f2:10:47:48:e2:77:19:7e:b7:cc:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:F8:C0:5C:8D:CF:F0:23:07:21:5E:4F:F3:EA:46:A5:42:6A:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/38
Signature Algorithm: sha256WithRSAEncryption
b0:64:26:bb:bd:4e:a0:d9:33:1b:2e:12:93:2f:44:6b:f7:ad:
ee:b8:c7:ca:8a:0e:67:b8:19:d0:0a:cc:a8:0f:f6:75:13:86:
2f:7f:26:ad:7d:a3:59:58:ac:a3:4d:1b:07:19:ef:69:5f:41:
24:ce:26:cc:9c:e0:36:fa:fa:37:b4:00:c2:82:66:0e:cd:3b:
34:9c:6a:a6:ba:5d:5c:51:b0:ef:3d:04:57:e3:2e:7a:01:d0:
bb:b2:14:e6:90:06:80:6f:8f:45:0b:9e:2d:7a:20:d9:d7:c8:
64:cb:49:6f:f4:26:af:33:6d:e5:e2:86:ea:c3:97:ba:44:aa:
01:2d:f6:9a:a0:66:f1:24:8d:2f:98:84:de:de:cc:bc:81:9e:
58:3b:1b:6f:72:f9:5a:03:31:a5:7e:cc:fb:b1:2c:b8:ed:de:
73:df:f6:b1:59:73:a2:c1:b2:a0:16:92:07:d9:43:1d:cf:a9:
3a:41:b1:28:02:b0:d9:8d:35:66:50:65:41:9c:d8:c0:e7:e9:
ab:78:2e:47:3b:81:3e:69:23:ac:70:e6:77:c0:62:fb:1e:bf:
85:63:ec:85:62:2c:e3:9e:b4:ce:20:98:db:2f:25:e2:f0:75:
d3:85:6f:3d:ff:12:97:07:f9:7f:e3:46:93:45:76:6f:b0:71:
93:dd:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:48 2026 by rpki-client