Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
File: 73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa (raw, json)
Hash identifier: D2MN518lgTuov7rH84nCJyDGRCUxr0j17rxEqfe9X/A=
Subject key identifier: 06:20:5A:C5:D8:B2:FC:43:DF:32:19:C2:36:55:91:62:95:D7:90:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18BFCCB4470DB433E4214A82AE7CBA68FF0C2D33
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
Signing time: Sat 07 Nov 2026 01:02:01 +0000
ROA not before: Sat 07 Nov 2026 01:02:01 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bf:cc:b4:47:0d:b4:33:e4:21:4a:82:ae:7c:ba:68:ff:0c:2d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:02:01 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=0020d9191aa0e4e5b165ce02d5f97c280c04efb92865bbb3d4cc2556c0af7c20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:2f:ea:27:58:cb:e3:02:a8:aa:7d:7d:c0:
10:a6:7e:8a:92:c0:37:a8:db:6b:90:a9:44:52:94:
e1:99:7e:04:5f:18:3f:47:d1:fb:64:b5:b0:41:d6:
bd:e1:95:40:2e:1f:d1:bf:00:ed:0b:12:0e:91:62:
9e:55:13:ad:33:54:e6:f0:95:fc:29:d7:37:ec:80:
a8:b4:8d:08:7a:d9:48:30:9a:a6:92:8f:1d:37:3e:
b2:57:a9:bb:5d:e1:9f:2d:c8:0c:87:b4:e1:76:84:
bd:af:ef:41:67:fb:50:b6:d2:59:19:a3:f2:6b:0b:
c1:e7:14:f3:b5:c6:81:ed:c6:9a:0f:b3:b3:ef:cc:
e8:5d:96:06:8d:82:54:1f:f9:c9:80:95:cb:fc:1b:
8e:4f:13:4f:9f:21:b2:61:56:95:83:18:23:c1:26:
25:ed:80:8b:9f:f0:56:de:73:58:c7:af:9a:16:37:
a6:99:5c:fb:ca:a5:37:a4:5d:3a:1d:fe:9b:ba:f0:
3e:9e:05:8f:5c:ca:ff:09:8d:11:a3:7b:31:7c:d6:
a2:bd:9e:ac:1b:4a:75:3b:7b:74:6c:ac:dd:ff:4a:
b6:5d:90:a3:16:ef:f7:c9:36:81:f2:6e:76:cd:f1:
f3:a1:3c:19:6e:fb:fb:0d:05:16:ad:a9:7d:92:23:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:5A:C5:D8:B2:FC:43:DF:32:19:C2:36:55:91:62:95:D7:90:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73d32a7e-651e-4ae6-b0c4-d847af22fc9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:6040::/48
Signature Algorithm: sha256WithRSAEncryption
28:55:61:ca:fa:69:3b:75:de:8b:3e:7c:ab:2e:d1:f9:3f:f9:
58:f5:78:60:37:76:3e:36:f7:1d:26:4e:60:3c:c4:ac:a4:2b:
30:76:d4:3c:8a:20:1c:cb:f2:7c:46:cb:c0:0c:d3:f2:aa:2c:
90:b7:e4:21:c2:63:a9:40:44:47:65:5e:e7:30:51:60:cf:21:
b2:03:d5:4f:51:5c:66:f4:95:2c:0b:9d:62:2c:3a:ef:e8:79:
0f:99:75:9d:6c:2c:24:42:b1:cb:90:53:2c:dc:23:3e:13:e8:
db:19:0c:de:28:59:88:5e:b3:3c:65:4c:00:38:2a:45:60:bf:
22:df:40:6d:81:4d:86:62:13:1a:4a:5d:55:00:e6:4b:6d:35:
13:00:e3:20:ee:da:d9:9c:b5:cd:21:a1:bc:dc:7e:fa:a0:da:
83:d5:87:a2:95:93:aa:d8:de:38:d8:ee:43:0d:97:86:be:e7:
5c:08:fa:1a:8e:a5:46:a3:3e:9f:e8:48:c6:f5:55:8d:b1:ad:
1d:ab:c6:30:3e:df:1e:a5:98:4f:e7:6a:c6:5e:5b:5e:dc:59:
be:a0:93:79:0b:df:95:ba:cc:be:97:e3:09:5d:1a:a0:c4:b8:
a6:2c:d6:5c:bd:a2:9b:d6:b8:d2:f8:a4:45:a8:21:49:60:cc:
0a:5e:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:05:59 2026 by rpki-client