Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
File: f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json)
Hash identifier: Dd9a8FDQgDGwfnPC8Kcy2/zGY4lPRmMkTLOK8/edYfE=
Subject key identifier: A4:CF:CF:BB:31:59:4E:FA:A3:AF:8F:BD:10:46:1F:38:AE:F4:0A:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 428BDB00B845F0AB50A374128EA54EBE6625E7D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
Signing time: Thu 22 Oct 2026 03:50:06 +0000
ROA not before: Thu 22 Oct 2026 03:50:06 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8b:db:00:b8:45:f0:ab:50:a3:74:12:8e:a5:4e:be:66:25:e7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:06 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=a4b9602849e8010bd3ed06afce6494f3f678a7c8fe1f584578aa342ac8513588, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:13:c2:f9:06:aa:b9:3e:82:41:1d:10:38:
96:bc:f3:75:37:83:56:a2:bd:cf:fb:f1:5c:b5:48:
b8:a8:8f:db:62:ba:bf:e3:78:e0:ec:e1:da:a7:4d:
0c:2e:11:15:f8:93:6b:43:8a:16:6e:2d:50:8f:20:
3f:99:6e:04:46:af:09:f7:d1:10:45:f0:8f:60:e3:
7a:60:d9:56:f8:cb:cc:12:e7:a2:81:94:37:21:b5:
7b:f8:d2:81:60:a8:72:76:3e:30:96:c7:8a:0a:c8:
86:2c:fe:e4:3b:c0:11:b4:96:d8:9c:ad:42:91:63:
d4:02:6b:fd:8f:73:7b:c8:8d:cd:c4:aa:de:dc:ca:
10:14:fb:af:22:15:14:8a:22:db:ee:1a:2a:69:03:
e4:10:a2:5c:75:6e:1c:26:47:3e:ec:39:c9:4a:81:
b4:91:7e:6c:6e:fb:7f:a0:99:80:58:19:78:f9:75:
d2:31:aa:90:7e:38:e5:8c:45:9d:c5:0c:9a:37:53:
ec:1a:54:e2:fb:e7:19:c3:b0:ff:a5:f2:8e:7e:9c:
a8:16:a0:98:ff:7d:84:bb:57:ee:1e:ee:0c:c1:56:
30:96:7d:fa:39:b0:29:dc:b8:98:78:b9:a8:76:54:
d3:a4:15:85:b7:22:04:6c:fa:a1:7c:7b:e8:4b:ca:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:CF:BB:31:59:4E:FA:A3:AF:8F:BD:10:46:1F:38:AE:F4:0A:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:bc:a7:57:3b:e5:55:8e:b1:71:e0:be:37:d8:61:43:b6:5d:
9e:6d:7d:3d:3d:4e:46:0e:0d:b3:8b:08:f1:2f:97:05:34:fa:
99:2b:6a:70:5f:ee:51:b2:07:7c:83:19:cc:a8:c0:ad:c1:8b:
51:a5:3d:22:e6:d5:ca:d5:76:37:72:17:8b:b1:07:58:75:86:
f5:7d:34:7e:a2:c6:2d:86:b7:e5:11:6e:7c:a7:5f:1f:4f:a1:
dc:99:ec:2d:c6:55:14:30:a2:55:ab:12:32:b3:48:6a:46:c7:
e3:ea:a2:5c:51:ec:ae:d6:47:19:79:4c:f3:98:06:90:25:8c:
ce:6a:0e:ce:56:2f:24:e3:d3:70:70:8b:3c:6b:3e:3f:47:f0:
96:24:d1:0a:76:b5:62:cd:d7:4b:eb:2a:04:95:02:98:ae:30:
85:30:eb:79:28:9b:29:e1:df:c5:83:1a:21:ad:4b:55:4c:25:
6b:92:11:df:c0:77:da:aa:7c:18:80:a3:d0:04:40:cb:5f:0d:
25:87:28:b7:80:2c:36:a2:e0:74:48:06:07:17:d4:79:79:57:
2d:11:dc:e9:b1:8e:dc:b5:4a:ec:47:d3:ae:74:74:4b:f5:b1:
62:0e:c6:5d:97:43:5e:78:ce:6a:3d:80:4d:35:62:74:3e:fc:
7a:eb:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:58 2026 by rpki-client