Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9753974-947c-42c4-885b-aa94c43c56a0.roa
File: f9753974-947c-42c4-885b-aa94c43c56a0.roa (raw, json)
Hash identifier: mvGYsrTPpAEmP+uRu9ufTclYJSs8BUzFmP8c5UOpjNI=
Subject key identifier: CC:8D:1A:AA:90:69:93:47:6B:98:FF:F7:37:41:D7:D9:F4:47:D9:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 598DEB866AC6D9CB1FD0790FB8841B4DB1EDC0E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9753974-947c-42c4-885b-aa94c43c56a0.roa
Signing time: Mon 26 Oct 2026 04:30:28 +0000
ROA not before: Mon 26 Oct 2026 04:30:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8d:eb:86:6a:c6:d9:cb:1f:d0:79:0f:b8:84:1b:4d:b1:ed:c0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=be2ee0bd08fe03845503dcd096a80e203c467c67c1d5fcf8610e77ac9c659b43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:70:56:b3:73:e6:5f:e0:f7:e2:e6:f6:4a:
29:38:7e:f4:c1:a1:71:3a:66:43:36:b7:cd:55:09:
ea:6a:21:6e:28:69:60:86:f1:80:8d:7e:b2:b3:51:
d6:fe:1d:48:a2:41:27:d1:49:df:b3:1c:b8:9f:83:
4a:2f:ba:0f:ac:89:c4:65:24:3b:83:6d:6c:5a:2c:
ce:4e:7e:47:42:63:73:17:a0:c2:47:7f:9b:29:55:
ce:32:0d:78:09:f3:03:05:b2:7b:1b:09:08:5d:a2:
16:5d:24:12:72:75:dd:80:07:db:8b:4c:72:36:13:
47:cf:a5:69:54:d6:0d:45:13:82:c8:9d:4c:be:02:
35:73:a6:7a:29:08:68:02:91:22:da:ef:84:0f:a6:
ab:dc:d1:7b:9a:2b:e1:98:81:c5:c6:30:6d:7b:9c:
ef:91:2d:69:90:9f:f2:4d:2c:2a:5c:41:58:0a:28:
b6:55:4f:87:34:3a:90:0b:f1:4c:6b:12:d2:9d:96:
9f:14:68:aa:64:d4:06:47:3a:65:91:90:4f:2c:55:
d1:43:e7:7c:03:0f:2d:46:c3:1d:61:f7:50:61:9d:
40:30:4d:e0:02:88:6a:a9:77:f0:c8:0e:33:b2:5d:
29:96:bb:0c:8b:f8:82:8f:85:d4:f9:86:3b:81:4c:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:1A:AA:90:69:93:47:6B:98:FF:F7:37:41:D7:D9:F4:47:D9:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9753974-947c-42c4-885b-aa94c43c56a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
35:94:75:50:66:98:5c:3f:5e:8b:52:0a:b1:38:23:f7:5e:86:
b4:e9:5b:cf:a1:be:43:1d:ed:a8:bb:a4:ea:7a:ad:d8:84:1b:
14:a2:02:bc:01:3c:95:9e:48:14:c8:3e:c8:ac:67:24:c9:29:
a9:b8:09:f2:f5:ed:92:55:8f:ea:c8:e8:92:9e:ef:4f:df:fe:
10:a1:e2:f5:ad:94:f2:f4:1d:fb:67:ec:d0:22:87:84:19:7a:
5f:3a:c2:68:f7:ce:03:28:c1:1f:ee:30:8e:e6:fa:ca:43:18:
68:88:82:e8:b6:2a:37:fa:df:ea:85:07:68:c7:d5:fa:7d:cf:
14:5d:34:b1:9b:99:5e:4a:10:ff:ec:7b:8e:22:88:17:de:42:
a0:14:ff:24:ca:40:a0:3d:30:f8:d9:b0:46:61:d6:a9:f7:cd:
e5:71:c2:e3:86:fb:70:f2:c7:ff:5f:0e:a0:0e:ed:ef:9e:9d:
65:ae:33:27:f9:ba:7f:be:8c:d3:3c:6c:07:ef:13:0c:8d:ff:
2c:28:a4:c5:1f:46:38:a9:b7:5f:44:91:60:ea:d7:94:c8:c5:
30:40:5a:81:1d:49:d4:9d:fe:ba:d2:e9:ad:6c:65:2f:d0:7c:
db:0a:df:6f:34:be:17:3b:b9:50:ff:ea:1a:f6:88:92:ba:3a:
02:71:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:39:50 2026 by rpki-client