Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa28b33-3f9a-49b3-8a33-b3862f276aa1.roa
File: 4aa28b33-3f9a-49b3-8a33-b3862f276aa1.roa (raw, json)
Hash identifier: Wr22oCI5CK/eoipfJr4ZHt/4NNJHbYgwKVgp5lNCzQY=
Subject key identifier: 0C:B2:18:61:6D:9C:59:DF:52:F4:01:90:A2:66:9A:5F:19:26:25:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BD1BDDBAC937595F115EFD928FE27EF1A1CD3D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa28b33-3f9a-49b3-8a33-b3862f276aa1.roa
Signing time: Sat 07 Nov 2026 00:30:13 +0000
ROA not before: Sat 07 Nov 2026 00:30:13 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d1:bd:db:ac:93:75:95:f1:15:ef:d9:28:fe:27:ef:1a:1c:d3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 00:30:13 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=20d4e418e008d01a45914cb282828a889dffddbcc597a32acbcd23c18790a177, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:1a:3b:70:94:78:2f:fe:63:e8:b5:da:7b:
1d:c7:bc:82:22:80:d5:36:7f:3c:8f:9c:20:05:8d:
f2:bf:91:61:8c:68:00:56:b8:2b:21:49:aa:73:11:
c5:10:a3:c8:3a:98:df:e3:77:e1:01:3e:05:d0:7a:
db:5a:3a:66:5c:48:4d:ce:61:93:9b:94:b0:46:7a:
6e:3c:6e:3a:c7:1b:5d:2c:58:02:3c:ce:57:a5:f0:
16:f2:8f:95:a0:70:7d:77:22:7c:c4:81:0a:37:8f:
b5:e3:d5:6f:6c:34:fd:b3:c8:a6:cd:96:e0:f1:da:
bb:0c:13:37:4d:fe:37:b5:fd:7e:f0:75:8e:9f:a1:
1a:0f:9d:92:4e:d5:da:fb:08:41:44:1b:2d:c4:77:
8d:d1:54:5a:31:fe:fd:00:e0:28:9f:eb:51:46:43:
cc:ea:e5:4d:62:fd:e2:41:85:55:06:fb:9a:d6:14:
9d:4c:38:02:c4:24:1f:d6:9e:18:51:b7:da:fe:a2:
69:70:8c:92:bc:0d:4d:1f:50:3d:86:8e:c2:31:a6:
d8:7c:81:9c:19:a2:2d:10:bd:65:ba:de:8f:d0:5b:
d7:2f:35:74:98:46:c5:b3:1f:55:b1:40:38:19:16:
70:44:11:64:0e:f0:6e:c0:c1:4f:1a:8e:d3:5e:4e:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:18:61:6D:9C:59:DF:52:F4:01:90:A2:66:9A:5F:19:26:25:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa28b33-3f9a-49b3-8a33-b3862f276aa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:49:42:8b:21:72:3e:c6:1a:2f:5f:f2:07:78:21:fe:cf:b2:
b5:56:2d:77:06:c3:21:ed:d4:87:99:ea:7f:39:cd:a0:2c:66:
f6:47:31:39:85:6e:6d:ab:ab:cc:64:1e:f6:e5:8b:b5:bf:da:
50:9f:06:ef:fb:e7:d0:c5:89:f5:27:e2:d5:55:8d:f2:7c:cd:
c5:41:c0:ee:91:b5:69:d0:9e:5b:9f:00:df:d6:27:11:64:fa:
cb:b8:d8:c3:02:62:9f:1d:68:0e:18:3a:5f:d2:13:c7:54:da:
30:b1:4d:83:82:2e:de:2f:22:65:83:a1:3a:be:63:e6:b9:45:
23:64:9c:44:e4:c4:14:0c:4a:03:99:03:31:7c:3f:5b:31:41:
43:14:b8:29:51:d7:e2:a1:21:b3:6c:ed:77:b7:90:20:00:ba:
f7:b8:e1:e4:f4:7d:3f:d0:48:28:ad:d1:14:c4:7c:68:19:22:
9d:05:f6:91:c9:01:29:cc:21:3b:72:85:a7:36:cf:98:b4:73:
bc:01:0a:b8:d0:b2:48:bf:24:10:7b:a4:77:92:56:c6:d9:7f:
3f:42:21:8a:bf:cb:fa:48:4a:95:2e:c9:61:81:19:a6:1b:d3:
c2:d2:86:0a:e9:48:f2:42:2f:3b:0e:0f:97:72:25:07:2a:c7:
82:c4:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:06:00 2026 by rpki-client