Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
File: e84166dd-4497-414d-9864-983017c7c326.roa (raw, json)
Hash identifier: hgBpWss8qD+XDITQQaU1STrCSDvTbiDqJK6mIYZmJbY=
Subject key identifier: A2:C2:25:F0:61:36:F1:92:3C:C8:C0:23:94:09:A5:70:D5:F5:02:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FB1E84DDE0731A0EABE1D012974C82274715912
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
Signing time: Mon 26 Oct 2026 05:20:18 +0000
ROA not before: Mon 26 Oct 2026 05:20:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b1:e8:4d:de:07:31:a0:ea:be:1d:01:29:74:c8:22:74:71:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=554d7f1cdf944e35914792280a04ec2858827346918cf49cc0637c8019401988, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:ed:02:57:ae:8f:bf:8b:33:9c:42:13:78:
07:36:35:83:89:d7:8b:49:9d:b6:12:e4:73:d8:51:
3d:00:8e:6b:b5:cf:f6:89:56:51:f5:0d:aa:62:1e:
b7:b2:d4:2e:4f:81:10:77:4f:12:30:d0:c6:8c:d3:
9c:50:95:8b:c6:bd:0c:e3:14:5b:23:5a:57:ad:5d:
40:c6:cd:df:b7:98:f2:73:5b:c1:c3:4f:bf:3b:ed:
c4:01:0e:13:71:e1:a4:f3:26:a7:0b:5c:8f:79:fe:
17:55:c8:93:93:92:b5:11:00:a0:25:49:89:c8:e6:
b4:f0:68:68:70:66:19:5e:c1:0f:7d:b2:6d:1f:50:
44:31:1d:f0:73:6c:8f:68:d2:10:92:38:5b:45:0e:
f4:03:90:eb:83:7a:67:5c:25:0a:05:2d:6b:31:a9:
f9:dc:8d:f4:de:60:2f:78:af:f3:5a:9f:42:da:74:
e2:12:03:da:85:5c:13:12:59:3d:c6:7c:1a:2b:65:
9f:b0:42:0d:f0:a5:03:34:8b:d5:8f:62:7d:90:fb:
da:2d:b1:4b:7b:ac:a7:4e:c2:22:5d:d4:8c:38:2b:
29:c9:a7:a2:3a:e7:b9:9a:56:40:8b:28:6f:8b:2c:
51:25:c9:07:a7:ec:62:24:af:5f:da:34:40:f8:90:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:25:F0:61:36:F1:92:3C:C8:C0:23:94:09:A5:70:D5:F5:02:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:5000::/40
Signature Algorithm: sha256WithRSAEncryption
10:25:cd:28:fd:e4:ed:24:9c:8b:28:4a:7f:48:c7:ce:54:52:
21:e7:09:1d:9e:7a:a0:04:b0:61:86:4d:d2:d2:94:49:c6:57:
ef:3f:fa:4c:29:a0:36:35:64:e6:dd:4e:b9:f8:a8:21:0b:13:
44:f5:0c:e7:d4:39:84:81:80:0c:35:44:4a:9d:e3:b8:07:ea:
1a:af:b3:37:9d:52:44:33:47:97:8d:76:3a:17:2d:59:49:5a:
35:ca:71:97:7e:3d:8a:3d:80:36:a5:67:cd:87:25:31:0f:8c:
4a:62:7b:a3:e2:24:a2:2c:42:47:6c:fb:a1:8a:17:e7:8b:02:
47:b6:fc:96:f6:9f:c4:2e:2a:f4:0c:43:44:4d:79:87:9c:45:
70:23:cb:7b:1a:77:1d:32:b1:bf:31:81:ea:af:c8:72:04:f9:
ca:08:2d:96:e4:b3:be:75:b6:6e:62:31:af:a1:e8:b0:b7:b9:
70:bf:59:68:94:d9:6b:d4:93:5e:d2:6a:1e:c1:4f:0a:47:ff:
5e:36:12:84:5b:f6:65:6b:4a:ac:8e:9b:a8:61:01:97:f5:8d:
ca:cc:5d:21:9b:88:9e:30:4f:da:76:db:d7:2b:4b:16:eb:41:
31:16:a1:06:8a:71:e1:a5:ee:78:0c:76:6b:93:1b:56:34:95:
40:34:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:58:37 2026 by rpki-client