Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
File: f33bbfc1-aae8-4484-ae82-14a752715759.roa (raw, json)
Hash identifier: +1cPEwu6+uuNSVgOZm1bNhl3IQaokpsMK5wbB3F04GA=
Subject key identifier: C2:69:AB:0D:10:AB:AC:4B:A0:C0:1D:40:23:30:2D:CC:20:B5:92:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33571705D07536B7D40771CDBF3992CEF5FB1040
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
Signing time: Wed 04 Nov 2026 00:02:32 +0000
ROA not before: Wed 04 Nov 2026 00:02:32 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:57:17:05:d0:75:36:b7:d4:07:71:cd:bf:39:92:ce:f5:fb:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 00:02:32 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=0a32e0a994dc19cf45b3389caa55be22f1b83f53335b76f4e860e7766d44ac14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:01:d0:77:d8:25:3f:f0:dc:c8:c3:96:fe:
f1:78:a7:e5:5a:b7:73:36:8d:a4:71:8b:2b:48:cd:
e8:b0:1a:82:a7:86:5f:e0:c2:a4:51:b0:46:f9:2f:
94:08:eb:f7:80:34:c4:31:ac:41:f9:3d:d3:ad:d6:
cf:02:bd:ce:33:df:a8:6d:4d:a1:bd:2d:e1:47:61:
32:1d:ef:1f:4f:b5:70:7e:80:6e:d4:79:a9:c4:64:
62:18:33:5f:6f:75:98:e8:3e:aa:c7:45:07:8c:a9:
d5:7b:2a:de:15:cb:66:0e:71:cc:31:56:4e:d4:e1:
b4:5f:2d:42:d3:db:c8:07:a4:8d:07:ac:49:82:9a:
95:75:95:71:54:f5:39:d4:1b:0b:38:66:00:65:87:
2c:04:dd:0b:a3:88:22:5b:43:64:14:af:e0:c9:23:
8c:2e:f4:bb:29:78:d8:1f:e2:c5:96:51:dc:8f:e7:
7b:ce:31:f2:0e:0d:d8:7c:af:96:7c:f4:8c:aa:d0:
97:12:75:42:5f:d2:4e:01:c2:08:c9:2b:25:ac:53:
fa:12:49:0c:5d:d4:f5:0b:71:55:00:a3:ed:ba:37:
c6:6c:92:7e:73:f1:d8:2d:db:1c:73:98:db:40:ea:
ed:22:6a:8c:27:46:87:16:e5:59:8b:6e:c6:dd:f8:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:AB:0D:10:AB:AC:4B:A0:C0:1D:40:23:30:2D:CC:20:B5:92:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f33bbfc1-aae8-4484-ae82-14a752715759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e::/32
Signature Algorithm: sha256WithRSAEncryption
1d:a6:5f:8f:99:ab:51:23:8b:a3:19:53:48:2d:d0:a1:0f:fd:
94:f5:6f:b4:73:41:7a:d0:1a:19:bb:07:11:2f:2d:54:a5:96:
1b:53:3d:a9:4d:26:71:97:fe:3a:17:e3:fb:c2:83:04:f3:7f:
16:9f:7c:9d:bd:b4:34:6e:ee:a0:71:3e:1c:b7:fe:5b:6b:49:
33:c0:fc:be:61:5d:62:6c:2b:47:72:44:ac:9e:5b:73:c6:dc:
33:7d:24:d5:12:56:6d:3d:14:84:66:c7:1a:74:f5:c1:ac:08:
5f:fe:4a:ec:3c:6e:88:95:40:28:17:ca:24:4d:f1:f6:3a:e4:
fe:d1:ea:05:dc:1f:77:6a:87:55:f9:20:92:67:d7:97:61:4b:
24:84:62:67:c5:63:57:5a:a1:72:88:4d:ef:07:5a:4c:10:42:
8d:62:46:a3:c2:1d:92:5c:2d:ac:29:db:4b:7c:c2:44:ab:9d:
11:2e:4e:34:a8:f5:c7:c8:5e:18:72:0f:2d:e8:b1:69:f1:99:
cb:39:bd:0a:9b:ac:7b:c3:6b:4a:64:67:f8:bd:0a:9d:4a:1b:
df:5a:5c:e0:cd:91:c2:01:a4:ca:6d:a5:e6:03:5c:b5:dc:3e:
36:f6:c9:65:61:96:d1:54:cb:5a:10:e6:5b:80:14:13:78:03:
22:ae:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:20:54 2026 by rpki-client