Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6c7ad71c-0538-426b-89e3-bf167e9b2077.roa
File: 6c7ad71c-0538-426b-89e3-bf167e9b2077.roa (raw, json)
Hash identifier: v9B4vq6SrfpA9tUOczr9uU0gRZDfZhaihtufzhWNpxk=
Subject key identifier: BE:15:CB:B1:86:19:72:20:1A:39:D0:58:C8:5E:D6:E6:47:03:D5:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5980DA234773E02D95DF35640E31ED14341D5955
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6c7ad71c-0538-426b-89e3-bf167e9b2077.roa
Signing time: Sat 07 Nov 2026 01:10:03 +0000
ROA not before: Sat 07 Nov 2026 01:10:03 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:80:da:23:47:73:e0:2d:95:df:35:64:0e:31:ed:14:34:1d:59:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:10:03 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=b6cebc3aec662faa8bed970a4d11e03ee49920cfc344b8a20aa04f4d3d1e7587, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:e5:44:67:2f:17:02:fe:41:b0:19:b5:00:
f3:6d:54:dc:de:a5:6d:34:83:f5:74:66:e5:f4:40:
de:cf:b6:45:d6:93:12:65:7b:fa:86:9f:d2:94:87:
92:d2:9b:5c:65:5d:e8:ec:cc:a0:e0:8e:38:ce:07:
b7:66:e2:f4:fd:f4:f7:89:3f:4a:2a:11:9c:fe:4a:
d3:94:85:e6:18:c0:be:59:83:a2:3a:95:c9:eb:2a:
e4:b9:d7:02:4b:72:c3:c7:a7:85:89:7b:f9:cb:72:
38:ed:32:95:da:aa:17:d2:e6:92:ec:19:f7:ae:87:
64:62:56:74:0a:ec:77:e7:24:e2:95:19:da:1b:da:
08:f3:74:58:42:a4:0f:25:b9:34:ce:21:f0:f4:d2:
a9:ba:40:51:c8:90:55:1b:3d:4f:bb:81:bc:bf:89:
3a:ae:76:6f:fc:ff:c8:5f:a7:9c:83:85:b9:7e:08:
7e:1a:34:f1:35:31:69:e9:74:04:32:00:9f:b6:5e:
b2:b6:d5:1e:db:ca:dd:31:80:5d:85:cc:de:d9:65:
86:e6:3f:1e:82:29:73:9d:4c:21:6d:27:5f:f9:45:
3f:b0:6d:73:11:41:f7:dc:6c:9a:5a:4f:97:7c:6c:
c7:e2:35:ed:cd:82:59:f8:70:b2:d5:7a:04:e8:be:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:CB:B1:86:19:72:20:1A:39:D0:58:C8:5E:D6:E6:47:03:D5:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6c7ad71c-0538-426b-89e3-bf167e9b2077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5080::/48
Signature Algorithm: sha256WithRSAEncryption
ad:3c:56:57:de:a2:fa:e8:83:91:b2:6f:4a:1a:72:27:74:39:
b7:0a:5f:be:5f:6d:cc:df:41:0c:fa:7a:b0:0b:10:0b:e7:37:
56:dc:1d:3d:eb:15:4c:7a:fa:de:12:c1:67:1f:b7:db:82:74:
c1:51:5d:df:e0:d1:84:2d:30:2b:d8:c5:1d:e1:a8:c6:bb:f6:
95:c3:50:83:f5:03:8c:d7:e4:78:65:21:d0:35:d1:27:f0:8c:
ce:08:67:9e:47:e9:f5:eb:5c:58:43:04:9e:fc:bb:81:ab:6b:
a6:88:6d:38:e5:80:ce:57:b8:1a:dc:c0:5f:f2:1b:5f:18:cb:
3f:be:ae:01:8c:5a:07:cd:0e:2b:a1:43:fd:63:23:66:8b:71:
be:1d:7e:26:7e:6e:96:ce:84:81:fb:e9:5a:04:69:6f:2e:23:
5c:bf:77:9a:af:8c:86:73:df:47:7e:8f:7e:ed:38:d8:64:f1:
13:ec:50:1b:4c:fc:ca:fe:66:47:27:72:4f:fa:0a:c9:61:ca:
33:b2:39:ed:ce:d4:7c:c1:13:e7:a5:9a:11:87:88:21:17:5a:
8b:c7:23:43:7a:3b:30:da:25:92:3d:d1:8b:a4:c5:5c:1e:3d:
5c:ba:dc:54:55:25:11:10:d0:38:b5:a2:c3:52:dc:67:88:47:
52:40:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 14:18:03 2026 by rpki-client