Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6864e70-6344-4d22-8906-e50f6b49b7d0.roa
File: e6864e70-6344-4d22-8906-e50f6b49b7d0.roa (raw, json)
Hash identifier: uC3WnxkwLaSoqeuEHSBKXksEXHtQiq/Qi3zkBuPCoHs=
Subject key identifier: 56:63:54:CC:4C:91:A0:AD:EB:80:09:94:75:D8:86:8E:00:12:F0:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12CA308D398E56D7609A7C799568CE1DE7AE894F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6864e70-6344-4d22-8906-e50f6b49b7d0.roa
Signing time: Sat 07 Nov 2026 01:02:25 +0000
ROA not before: Sat 07 Nov 2026 01:02:25 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ca:30:8d:39:8e:56:d7:60:9a:7c:79:95:68:ce:1d:e7:ae:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:02:25 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=eac037de2628f88444210bb342dfba58a68df8f96d93c8642664cdb354a95dd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:04:d1:93:ca:6c:5c:8a:d2:23:29:d0:8d:
27:2d:b8:fe:16:e1:ce:59:46:12:e3:1e:d2:7b:c4:
5f:3f:24:f7:82:24:18:03:27:a2:b1:dd:94:dd:62:
08:0c:a5:3b:61:b1:fd:53:a8:8b:1d:ea:39:bc:6f:
68:ce:9b:b2:2d:36:50:cc:f7:ef:f1:05:c2:2e:ce:
85:37:58:71:ad:75:cb:15:70:7b:6c:75:1a:e4:98:
a0:83:50:40:76:d9:d5:b2:75:7e:3f:56:b8:19:9d:
a8:76:3f:4c:29:d9:fb:e6:3f:4f:db:42:9d:5a:6f:
8c:1a:72:88:b3:51:c6:17:89:b2:ca:63:d6:5f:7b:
2a:0f:42:b6:f8:b8:78:51:2d:05:61:ce:56:5e:2d:
46:79:00:87:25:10:4b:c5:cd:90:4e:f6:e2:63:34:
f0:96:11:d7:a3:8c:6d:c7:79:03:69:8b:cd:a1:f4:
0a:10:5f:d8:c7:37:8a:a9:27:fa:c3:3d:d4:1e:d9:
fe:6d:1d:39:8b:8a:d2:cb:02:63:f0:b3:ac:e8:a0:
38:ab:07:f4:22:01:27:74:d9:6c:a3:e0:d0:7e:50:
74:67:90:8f:60:6a:9a:99:9d:3a:54:0c:a0:fb:9d:
aa:bc:38:54:e5:77:d7:6b:53:f5:38:99:06:94:f9:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:54:CC:4C:91:A0:AD:EB:80:09:94:75:D8:86:8E:00:12:F0:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6864e70-6344-4d22-8906-e50f6b49b7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:6040::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e3:6d:2a:0f:4e:52:a6:56:02:86:cb:b0:25:b6:dc:94:5c:
72:a5:da:da:c5:4d:d2:6b:86:75:be:df:c0:5e:40:d4:00:0b:
53:5c:9a:51:26:d0:ce:71:65:79:e6:b4:da:28:3c:a4:e4:9e:
53:f8:29:2e:a5:e5:4e:36:f1:39:fc:b9:1e:f6:34:bf:71:ae:
b5:f5:18:dd:4c:83:84:55:6d:5a:d5:7b:61:be:11:e7:da:f4:
96:d2:b6:63:6f:7d:c2:5a:55:83:93:b5:d2:dc:5f:91:96:20:
7b:d1:7b:d2:6d:43:1a:d6:4e:26:3c:3a:2a:5f:96:92:81:73:
c1:8b:aa:e3:5d:06:b6:2b:50:0c:8e:60:ed:a9:57:36:d6:4c:
8a:c1:1b:ab:1c:10:ef:3c:2b:e3:5c:e4:ea:8c:f5:91:d3:cd:
54:7f:95:dd:80:f9:64:e5:92:da:8b:c1:fb:1f:9a:81:e7:e1:
d8:21:d6:1d:4f:ca:7d:fc:72:22:a1:97:53:89:fb:59:d9:7b:
a5:fc:a7:6b:79:51:2c:2e:6d:88:9d:a7:30:87:52:03:02:9e:
59:60:1c:6b:c4:1d:8c:71:e9:75:c4:28:c5:c0:1f:1b:bd:a6:
42:7c:23:3b:46:31:e7:39:d0:c6:6c:bd:58:20:27:75:e5:36:
8f:a0:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:42:36 2026 by rpki-client