Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99ffa238-9133-4fa5-ad84-49e67d34854a.roa
File: 99ffa238-9133-4fa5-ad84-49e67d34854a.roa (raw, json)
Hash identifier: yGM9aT8XQ+GUIhJ9XJe5NQvFtddKrlq2uLjI1I2xpYo=
Subject key identifier: 8B:F0:81:F0:62:D1:3A:93:4A:AC:0D:D3:4E:9B:11:AF:39:0F:2F:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C6D7140E20CF24CA9C7A54089EEE8EB8639920E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99ffa238-9133-4fa5-ad84-49e67d34854a.roa
Signing time: Mon 26 Oct 2026 04:31:10 +0000
ROA not before: Mon 26 Oct 2026 04:31:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02a::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6d:71:40:e2:0c:f2:4c:a9:c7:a5:40:89:ee:e8:eb:86:39:92:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c1c977f30d5fc719c837fc79859e3c00fe46ddfe6ece91405e2ffb9b8d362a22, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:73:c6:a2:c9:f0:45:21:6d:a0:b9:6d:ed:
40:68:30:97:1c:f7:bf:82:7a:05:be:eb:23:73:4a:
6d:f7:8a:c4:03:85:65:da:77:26:88:5d:6a:86:e8:
25:a5:f6:d8:c1:ab:3e:54:49:4c:7a:1e:43:bb:5c:
4d:7b:86:fa:e2:37:6e:1d:fc:fe:48:b6:7b:1c:8f:
42:52:b1:7f:71:67:39:70:43:ee:0e:9c:d4:f1:bb:
eb:98:ac:60:7f:c8:ec:8e:80:f4:09:0c:69:cb:af:
93:80:1f:e6:d9:01:cb:f9:7a:09:ab:3b:77:69:4b:
ea:47:97:d5:96:d8:0c:8d:55:7e:49:70:3c:a1:19:
e5:7c:f1:6f:bb:68:7a:c0:98:5f:f5:23:f8:43:93:
84:87:03:ea:3f:b0:42:55:9b:fb:96:89:4e:5d:42:
68:c8:80:24:2d:aa:10:5b:dc:be:f0:6e:1b:2a:ab:
1b:a9:5c:59:7f:d2:62:08:ea:22:41:d8:9e:c0:48:
8b:06:ef:de:b3:96:3f:ba:ba:0d:4c:44:c9:5b:ab:
0c:93:27:e1:aa:b6:42:d5:f7:56:21:f8:88:5f:eb:
d9:4d:29:32:78:94:d7:38:57:f4:d6:fd:8d:1f:34:
1e:b4:ed:61:b1:39:f4:7a:cb:8a:60:f1:20:f9:7c:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:81:F0:62:D1:3A:93:4A:AC:0D:D3:4E:9B:11:AF:39:0F:2F:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99ffa238-9133-4fa5-ad84-49e67d34854a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02a::/36
Signature Algorithm: sha256WithRSAEncryption
68:92:66:86:0f:4d:4d:96:52:c1:5d:48:9b:96:8d:d2:2c:4b:
50:23:f6:4e:10:73:e9:80:17:59:51:64:a1:20:33:4e:aa:55:
99:79:81:9e:ec:40:f1:32:2a:ea:d5:b9:13:ca:38:0c:0a:3c:
f6:a4:c8:85:4d:89:ba:68:c7:6f:42:8a:19:30:6e:ea:da:26:
79:90:d8:dd:9f:fb:15:77:c4:5b:25:f2:07:cd:19:0f:13:73:
47:ba:1e:81:49:4a:5b:42:02:f4:53:85:80:3c:3f:95:62:92:
70:02:cd:4e:74:5f:91:ba:63:0c:12:fd:b8:6a:03:65:57:f2:
3a:92:76:34:89:da:8e:d4:9f:58:5b:e4:d7:8a:5d:53:91:12:
b7:dc:0e:22:1d:64:eb:20:7e:87:24:f6:63:c4:c7:0e:df:7c:
69:23:bc:28:04:9d:d7:76:de:90:65:e8:11:48:01:28:f0:8f:
28:8f:f2:99:5c:78:4d:42:a7:9f:58:69:4d:85:6c:db:43:38:
69:04:2e:32:b3:64:49:ad:ce:26:ea:a5:69:6a:7c:71:1c:87:
8e:24:14:1d:2b:8e:80:26:30:41:7e:ae:38:c3:5a:49:05:32:
6a:97:c3:f7:b3:4a:02:9f:f8:f6:3f:f3:ad:f6:f4:25:cd:16:
b0:50:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:58:54 2026 by rpki-client