Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc5fb3d8-fb65-4df1-84a6-38b19e109822.roa
File: fc5fb3d8-fb65-4df1-84a6-38b19e109822.roa (raw, json)
Hash identifier: 3gdFb0Yc1QyBM7sCjXyI4398HF3HKjnt94vUeV0Xueo=
Subject key identifier: 9C:36:5E:C9:57:F3:60:90:EE:6D:0B:62:ED:0D:94:41:16:6B:74:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0567FA6B7BE885F3059ABC1EEDB8B49A46893ECF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc5fb3d8-fb65-4df1-84a6-38b19e109822.roa
Signing time: Thu 08 Oct 2026 17:24:39 +0000
ROA not before: Thu 08 Oct 2026 17:24:39 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:67:fa:6b:7b:e8:85:f3:05:9a:bc:1e:ed:b8:b4:9a:46:89:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:39 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=378522a6dc9ff72a6185bb9e95eebb148e86af0e8a520bf11d18b4acf4d6f983, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:6a:ea:d9:ee:1c:6d:d5:7b:5c:a8:20:ae:
86:64:4c:77:eb:bf:be:37:92:49:58:da:0a:0d:56:
79:81:2a:b2:ee:76:a4:b9:de:5d:31:44:9e:5c:67:
4a:8e:fa:d8:1d:42:29:f0:64:30:44:de:f5:24:40:
a4:01:4a:e5:07:6a:11:d1:e7:1d:fb:12:0b:36:77:
9a:73:d1:00:a4:6e:33:05:59:d5:b6:20:75:09:d3:
a5:c4:6e:29:c3:e2:a8:fd:3a:08:d3:97:3c:80:7c:
e6:bb:08:a7:4e:1c:b5:f0:0b:a5:f7:7c:11:a6:c2:
60:fc:34:74:30:f9:3b:75:7d:69:4b:a4:bc:fd:44:
7e:a9:c8:9f:01:29:fa:aa:3a:8c:df:ee:06:60:c7:
af:50:1a:4c:55:56:9b:8d:c3:32:67:07:89:49:14:
66:6e:7b:93:ae:fc:08:42:ef:ab:21:1d:3c:d3:a7:
06:e4:55:1a:5f:ef:b5:ad:70:61:01:e7:49:37:fd:
95:ce:f3:bc:c3:5d:b3:6f:0b:7f:3b:96:7c:df:60:
4f:d1:a5:e8:9e:71:08:a7:83:a7:94:7f:21:8e:09:
7c:c4:de:47:92:61:06:da:aa:c5:f5:a9:13:1d:26:
a3:c4:cf:fe:df:94:cd:b2:4e:cc:0c:17:27:a9:41:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:5E:C9:57:F3:60:90:EE:6D:0B:62:ED:0D:94:41:16:6B:74:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc5fb3d8-fb65-4df1-84a6-38b19e109822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:b7:08:ee:23:17:dc:3e:10:eb:15:77:2f:28:b3:c8:4d:65:
09:a3:9a:8e:ca:10:44:68:b9:52:41:35:10:b0:24:6e:d5:55:
32:cd:86:1a:d1:48:c0:61:60:eb:1e:68:ab:45:1e:79:22:93:
de:a4:d5:03:0c:fb:46:b0:33:55:e3:97:45:c4:7c:a8:09:12:
33:f4:a3:d2:3d:16:74:8a:9c:d0:cd:0b:32:7b:e9:0c:ee:80:
9f:b8:81:ca:78:16:e0:4c:e6:dd:d1:20:33:ee:79:d6:fd:53:
35:65:15:0a:47:7d:b2:78:8a:1a:10:5e:f5:f6:85:5a:fa:00:
a0:c5:9c:13:a6:67:2b:41:95:3b:5b:98:44:46:25:5f:4f:0e:
4a:03:40:3e:2b:15:77:76:6c:a6:a2:15:51:a5:6e:96:97:57:
10:b8:5e:6e:38:d2:b0:3b:48:7e:ae:3f:bf:20:71:d1:d9:d0:
67:fe:18:44:c0:94:02:16:0e:76:cc:87:40:13:33:40:a0:88:
3e:37:95:df:89:b0:8f:1f:32:5d:7b:3c:54:c8:6b:0d:24:2c:
fc:ae:b2:54:9c:c8:ea:d5:69:56:b2:8c:f4:94:7b:0b:a3:03:
4c:5a:55:df:db:65:5e:ca:e7:9b:f5:8b:e6:5d:eb:c2:df:b6:
67:0b:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:22:22 2026 by rpki-client