Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86da4413-78aa-4722-a1a2-1b8c81e93a74.roa
File: 86da4413-78aa-4722-a1a2-1b8c81e93a74.roa (raw, json)
Hash identifier: 6MhzkkDL4FDMdAEDKkMajmGbD3htHC2j/ZdHqRZU0Io=
Subject key identifier: 2F:41:65:9A:97:CE:0F:FB:63:36:3B:A0:56:44:E5:D0:20:EF:A1:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FAC187927E6F69FADC73841FA0F8863E0B9E6B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86da4413-78aa-4722-a1a2-1b8c81e93a74.roa
Signing time: Sat 07 Nov 2026 00:30:12 +0000
ROA not before: Sat 07 Nov 2026 00:30:12 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ac:18:79:27:e6:f6:9f:ad:c7:38:41:fa:0f:88:63:e0:b9:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 00:30:12 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=21acf2fc535adffcf34272ca7bfdd60236b40bb65a42f57be1832a2661b8f174, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:f8:21:cc:ac:35:ec:94:72:18:ab:0d:05:
e1:3b:b3:3d:68:5b:2d:9e:9c:a1:69:f5:30:d0:b4:
68:ab:90:5f:8e:b2:44:e5:59:a2:82:a9:39:f0:10:
5e:5a:8a:eb:6a:38:4b:35:44:84:95:d5:a2:89:07:
8c:6a:21:32:f1:62:34:eb:db:b1:36:88:46:60:8f:
17:49:9b:bd:a3:d2:83:54:66:54:03:f8:29:c6:88:
9a:ab:81:ed:e3:15:1b:4f:b9:46:12:fd:aa:b4:b1:
1a:08:15:e9:94:86:c2:68:d9:fc:1b:2f:58:99:40:
9a:b9:07:6b:49:ef:41:b3:94:4a:0a:0c:63:4e:dc:
92:01:9b:b5:d7:07:f8:77:f2:79:9c:b1:24:f3:3f:
55:45:2e:38:ec:5a:df:34:e4:1c:ef:7c:70:c4:3e:
e1:cd:06:42:52:3e:6a:13:f8:ed:f2:b1:b8:75:94:
f4:18:6a:a8:b6:af:da:50:b4:b8:51:5a:4c:4d:ae:
67:f5:43:e0:2f:16:4f:8b:29:1c:82:2b:c1:46:9b:
c3:40:c8:a0:29:ee:30:db:2f:9c:bd:3f:75:90:b5:
ef:4d:ab:a4:6f:df:0a:3f:8b:16:81:d8:ba:1f:af:
29:4f:df:20:88:06:b2:73:0b:76:12:90:c2:ff:29:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:65:9A:97:CE:0F:FB:63:36:3B:A0:56:44:E5:D0:20:EF:A1:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86da4413-78aa-4722-a1a2-1b8c81e93a74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:c0:83:7f:f2:05:d8:d4:c2:45:50:4e:71:7f:63:14:42:fc:
c8:2e:e0:df:ed:f6:3c:0b:32:87:46:14:5d:14:8c:f8:94:49:
49:87:17:6a:79:68:7d:07:92:a7:b9:de:99:a5:79:00:c7:99:
df:8f:7b:b2:9a:09:c0:0f:a5:a6:ec:7b:88:b3:7c:e9:3f:8b:
d7:78:e5:aa:8e:26:6b:5e:03:a1:39:3d:52:d9:40:aa:c0:65:
82:54:96:21:fd:61:08:4d:61:e4:24:f3:19:cc:42:e5:80:5b:
4d:64:d3:65:75:f0:fb:af:4f:8b:da:fc:cb:c7:4d:d6:72:3d:
5a:af:e4:85:0a:87:ac:d9:a3:2c:0d:e3:e4:0e:d8:7b:7d:d5:
65:54:7a:94:2c:1b:85:70:64:7d:24:2c:29:df:f1:70:94:a1:
08:07:8e:54:86:70:9d:a6:92:62:7d:b8:05:0e:89:f8:52:f4:
e6:3a:28:3d:f0:43:7e:4e:9d:aa:bc:0e:50:f1:24:3b:65:ac:
82:c2:ba:d9:d2:f4:e3:cd:98:64:92:57:43:7e:4a:94:73:32:
12:43:2c:3b:ee:54:9f:ea:eb:1e:61:d5:7d:5f:56:1f:8a:b4:
82:d5:fe:93:08:ec:ab:72:ca:75:ab:ce:56:c9:6d:95:1c:da:
6a:0e:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 09:11:17 2026 by rpki-client