Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec1483dd-dd3e-4566-b286-4cabe956cc89.roa
File: ec1483dd-dd3e-4566-b286-4cabe956cc89.roa (raw, json)
Hash identifier: n3QLVSzNxW0z0uCuX+zs8gRa2y2T0GtRJFGRGuVsz0A=
Subject key identifier: 6A:64:DE:12:75:13:4F:B5:2F:72:ED:7E:7A:7D:32:46:C2:77:14:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71A3A8C77AD936B744ED9B98C977BC5BDCCA6636
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec1483dd-dd3e-4566-b286-4cabe956cc89.roa
Signing time: Thu 08 Oct 2026 17:24:36 +0000
ROA not before: Thu 08 Oct 2026 17:24:36 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a3:a8:c7:7a:d9:36:b7:44:ed:9b:98:c9:77:bc:5b:dc:ca:66:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:36 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=1c9d2b326db52d41b54ef04cacc8126222e328c0934198423b9317ecee460531, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:e6:68:26:b3:ab:46:c2:b2:e9:5b:ad:d7:
7e:da:eb:ef:c0:11:6d:12:6f:cf:60:d9:d0:1f:d6:
eb:06:e8:12:05:fe:4d:d5:96:25:af:f4:96:a4:e8:
cd:fc:f9:15:9b:5c:bd:83:e4:06:87:76:69:d2:07:
d1:0c:58:d9:b7:dc:2e:54:e2:30:9e:79:3c:94:5e:
78:00:3c:bf:a3:f4:f5:75:ed:69:80:d6:9a:b1:ca:
8f:2a:68:6f:40:14:c7:66:7a:1f:a8:90:1b:57:81:
67:93:02:c8:2b:90:82:52:cc:36:77:3e:c9:e3:f0:
79:54:49:6f:3e:04:0d:25:52:8a:62:6e:a7:51:41:
40:f5:a4:1b:62:3a:78:ea:2b:ad:0d:07:c3:f5:31:
c4:94:06:0c:8f:b0:59:be:1c:95:20:0c:16:ab:77:
87:77:7d:4a:28:7c:e5:84:fa:c2:97:4e:4b:c9:5b:
a8:e8:35:c2:e1:ee:5b:46:dc:00:05:79:2e:72:05:
a2:e3:a0:2c:06:00:d7:13:33:10:71:f1:57:88:29:
db:69:52:fd:c7:dd:f1:b6:d7:ba:9d:af:49:cc:bb:
9d:0f:ff:9c:d0:d3:62:f0:df:6e:51:96:d1:f2:2e:
34:05:8b:60:a9:54:c2:a7:3c:13:8b:73:d8:c4:af:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:64:DE:12:75:13:4F:B5:2F:72:ED:7E:7A:7D:32:46:C2:77:14:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec1483dd-dd3e-4566-b286-4cabe956cc89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:8000::/40
Signature Algorithm: sha256WithRSAEncryption
60:a8:42:ba:99:d6:81:c8:af:73:bd:af:89:56:15:21:61:ba:
68:ed:50:09:68:4f:ba:14:bb:51:8b:44:80:16:f6:68:f4:d1:
25:40:34:36:85:6b:58:b7:65:9f:d9:a6:14:9a:11:0a:1f:a6:
ef:bf:87:7f:80:63:d4:78:39:5d:83:28:0f:1f:f5:28:a2:cd:
51:31:f1:a3:bc:71:53:8c:92:e6:d7:e1:48:fc:3b:62:d5:d1:
3a:fc:13:d4:86:fe:75:fa:34:70:a6:fb:56:a8:17:35:f1:d5:
56:fa:1d:60:cd:80:ca:04:8e:c6:e8:43:59:35:ec:9a:9b:40:
2f:a4:db:96:9c:0c:59:b0:2a:da:40:8c:25:6f:44:72:f4:1c:
5b:7f:b2:09:42:b7:cb:c3:34:8a:2e:05:1b:1c:57:22:aa:d8:
19:25:4e:b6:e6:99:60:65:fb:ee:ff:65:bf:be:8c:d0:01:95:
69:ef:a3:ef:1f:d3:54:11:30:9f:d0:06:3d:16:69:00:c4:ac:
ac:ad:2d:97:07:ea:71:80:b9:bd:9c:ca:cd:1d:72:ee:9a:51:
98:34:54:96:61:bb:c2:8e:4b:a7:9a:3f:aa:8e:b4:5d:e3:81:
17:b0:d9:4f:19:1c:4d:c5:4a:53:1f:ae:c1:9b:37:bd:08:c0:
ff:d6:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:27:24 2026 by rpki-client