Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa
File: 3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa (raw, json)
Hash identifier: 513poFgSuky4A6rJCWzFmM6HtCCtb1DwytiU0f0HxPg=
Subject key identifier: FB:B9:96:F6:27:6E:F0:53:62:5F:5E:51:E9:06:3D:0F:A1:F5:82:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 510D1A1AABF39CFFC02AB1E625A4C84860515B90
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa
Signing time: Fri 06 Nov 2026 00:10:27 +0000
ROA not before: Fri 06 Nov 2026 00:10:27 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0d:1a:1a:ab:f3:9c:ff:c0:2a:b1:e6:25:a4:c8:48:60:51:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 6 00:10:27 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=c6cc78354ea9d70741e4f00295e42ee3050b2bf01e7f3fbecdf90d4b835ba624, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:42:11:8e:b3:11:0f:52:bd:0f:d1:e9:96:
e4:23:6f:65:32:98:15:3e:e7:73:26:cc:8e:c0:a3:
07:e9:4c:32:b9:9c:97:57:be:12:01:5f:2a:df:ec:
b8:63:e9:1a:e0:49:bf:8a:6a:38:9c:52:56:52:1a:
75:26:68:45:bb:80:7c:65:c5:f2:e1:9a:e8:77:15:
89:32:64:8b:6c:c5:c5:73:0b:ae:a5:89:23:b5:5e:
19:15:ac:81:96:65:f3:57:be:3c:2a:02:06:2d:33:
ea:97:50:62:75:d7:ca:35:85:58:6c:38:9c:bc:90:
bf:ab:e6:3f:09:74:cf:9b:36:af:ed:ed:86:5d:db:
50:37:55:65:a0:e0:9b:d7:36:5e:8e:a3:b8:f3:4a:
cd:cd:e9:15:64:1d:f7:ab:bf:b2:be:f6:b4:7c:6f:
0b:8a:fd:26:e9:89:13:ff:9a:6d:12:1c:14:e8:3c:
eb:34:b1:e4:62:57:24:c1:1a:af:a3:4d:8e:6d:a0:
e1:be:5a:8f:5b:84:f5:01:70:cb:41:3f:ee:69:03:
fb:d4:1a:4a:1d:fa:4c:37:6f:7b:12:9d:97:b6:05:
37:98:15:1f:b6:90:a3:e9:a5:13:e5:ad:7a:b3:0c:
32:af:9f:e7:bd:bc:0e:76:c6:d7:81:08:0a:16:38:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:96:F6:27:6E:F0:53:62:5F:5E:51:E9:06:3D:0F:A1:F5:82:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:c000::/40
Signature Algorithm: sha256WithRSAEncryption
25:03:3d:7c:9e:aa:e3:ee:14:bf:d0:39:50:16:55:fc:f0:cb:
ac:50:8f:cb:81:76:a0:b0:20:32:69:10:46:0a:69:50:8a:8f:
37:36:94:6d:9b:a6:8b:e0:9f:2a:20:d4:b8:e6:a6:fc:7a:b6:
ba:bf:26:24:7c:18:ec:e6:c6:31:6f:e9:9e:70:6f:44:2f:15:
6e:55:3d:0d:2a:d1:08:0b:4c:9e:7d:9e:7e:a7:d2:09:6c:42:
e4:09:e1:bb:63:ad:d6:12:18:63:5c:bc:1c:df:e7:14:5a:df:
b7:20:19:b2:8d:c2:62:f3:bc:2d:d2:d5:b0:37:99:e8:4f:43:
1f:0f:79:f1:ad:52:c0:ae:df:8f:08:3f:42:4a:e1:27:a2:a8:
be:4d:fc:ef:a5:cf:54:6b:25:49:16:96:ea:0a:d3:15:6b:0c:
13:ee:a7:18:28:a0:64:aa:54:9a:5a:77:5f:1d:38:4e:ca:2d:
f7:97:eb:c0:b7:f6:28:d1:6e:de:ce:40:75:3b:01:d8:8d:f1:
9f:64:51:a7:72:fb:4b:3f:ff:be:3b:c0:67:0e:76:e5:ab:60:
95:f8:7d:e1:04:5c:00:80:4e:ee:79:b8:d7:22:d2:5b:99:1a:
e1:74:d8:b5:2c:63:8b:f2:3e:c8:37:e8:a6:15:b7:cc:c9:48:
7b:66:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 12:13:40 2026 by rpki-client