Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
File: 5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa (raw, json)
Hash identifier: rPRI78kBH9pFvjKRhdPY+uqXhBlJWJNDF/4CKEkQglY=
Subject key identifier: 0E:10:D9:89:DB:C8:84:8B:66:CF:7A:03:C9:25:70:5C:BE:86:04:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5678382969F5A0E6E2EF4179258F6EFE6AFBCDAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
Signing time: Sun 04 Oct 2026 00:30:45 +0000
ROA not before: Sun 04 Oct 2026 00:30:45 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:78:38:29:69:f5:a0:e6:e2:ef:41:79:25:8f:6e:fe:6a:fb:cd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:45 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=0a13ff5e7ca45e461af0b976631c2ae07e10023d25d129637afed0f3fafd1ab1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:3f:f8:d4:4a:0e:c5:5b:61:21:9b:79:f6:
f5:25:ed:fc:6a:8b:06:1b:f7:30:3d:3c:ec:47:a9:
8a:05:55:4e:e1:d1:ae:10:c6:52:14:0e:08:a3:60:
8b:b4:89:9b:03:dc:d0:dc:db:69:ea:4a:f4:b9:e7:
d1:34:6d:7c:ae:98:9c:c4:e1:84:e9:2b:2b:9b:50:
4b:69:dc:25:60:64:e7:b5:33:cd:0f:56:65:ce:00:
f3:d5:18:13:19:48:ae:6a:73:8b:59:79:80:b0:6b:
a7:a7:0c:d8:5f:16:33:ff:11:66:9b:14:05:90:eb:
dc:08:72:86:5c:02:61:39:cc:2f:6c:29:6d:00:18:
24:eb:f5:8f:da:c8:9d:be:d1:f2:82:1f:31:6c:98:
45:ee:e0:45:c1:be:13:65:ba:40:34:0a:13:0b:fc:
2a:0c:f8:68:44:c7:27:7b:bf:bd:9e:d8:21:d1:e7:
1d:75:86:ad:9c:ba:15:b3:11:c7:66:c6:88:e0:16:
31:5a:ec:07:fe:04:20:28:e3:98:0c:bc:aa:89:c4:
14:1b:e7:78:ba:d9:d4:59:cd:84:ad:3b:aa:2f:33:
47:f9:42:44:ad:75:b8:5d:17:57:5b:26:07:a9:a4:
6a:5b:f5:0d:df:de:fa:f5:2f:e5:72:ba:08:39:ad:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:10:D9:89:DB:C8:84:8B:66:CF:7A:03:C9:25:70:5C:BE:86:04:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f3054b8-54ee-4b8b-afc8-531f24d59fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8000::/40
Signature Algorithm: sha256WithRSAEncryption
af:94:8f:bd:ec:1f:6e:a3:6e:0b:88:90:77:fc:13:e2:17:f7:
f9:24:4a:d4:f6:96:7a:f1:5b:01:2c:e3:02:36:2a:f2:c1:5c:
07:72:fb:0c:01:62:49:df:19:fa:bd:8a:11:2f:a1:e6:06:26:
78:3d:82:ff:0d:76:8a:7e:e1:45:29:31:a4:e6:08:32:6a:82:
a0:da:9b:ba:d3:16:b7:30:64:1b:fe:b9:c6:5e:33:7a:a5:e7:
92:9b:92:e9:6c:53:20:79:c7:2f:17:e9:20:bc:fb:d1:2a:a1:
db:35:5d:99:60:69:ca:60:85:f2:a3:79:62:d5:70:e2:1a:39:
eb:86:34:b1:07:6f:e2:04:0b:3c:d0:3c:1b:1e:be:6b:ee:8d:
0d:1d:2a:90:ed:f0:ec:3b:a3:d6:38:c6:94:8f:a3:ee:d4:f1:
60:b5:7a:d8:55:b4:df:5d:bd:25:f4:fc:6b:f2:4b:3c:ed:42:
6d:96:08:e0:f7:28:5d:12:4e:07:1d:12:87:90:f6:cc:ab:f0:
c4:0e:51:f8:e1:ac:e8:ef:2f:87:aa:59:c7:5c:f6:54:a8:45:
3f:65:0a:08:a9:17:57:88:2f:8b:6d:18:cd:c9:3c:e0:9b:b1:
ae:f2:74:60:82:27:6e:6b:64:92:a6:bc:87:84:12:12:8b:67:
ac:98:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:11:04 2026 by rpki-client