Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76f3809-62f3-4905-ab42-a5955af4b4f7.roa
File: b76f3809-62f3-4905-ab42-a5955af4b4f7.roa (raw, json)
Hash identifier: KUg21GnvzMnFYgNPWQm+G2jEt6+eDnPToNyWSeTBLh4=
Subject key identifier: 89:82:8D:C3:61:3F:5E:31:ED:30:94:AD:3C:85:21:61:6D:92:C0:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A73DDE8E48753D365F5006B84E3F3A3B515D49A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76f3809-62f3-4905-ab42-a5955af4b4f7.roa
Signing time: Fri 06 Nov 2026 00:10:23 +0000
ROA not before: Fri 06 Nov 2026 00:10:23 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:73:dd:e8:e4:87:53:d3:65:f5:00:6b:84:e3:f3:a3:b5:15:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 6 00:10:23 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=18a508cd5929e24f5cb8ac03d04ce091b852628342987d00b28a2487f9772b85, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:02:32:7f:1d:cc:0b:e6:eb:b9:8a:78:6e:
7f:61:a1:14:f6:b5:56:6d:f6:36:e7:ff:f8:11:d1:
84:2e:0c:a3:51:49:f0:f9:f0:b3:c8:e3:54:ff:46:
84:4c:18:44:3d:4c:08:e2:8a:f1:cd:e4:e4:42:c2:
d1:09:b5:cc:db:e5:f1:b5:20:b4:c0:7e:81:30:42:
bb:24:6e:a6:f4:4a:35:51:57:3a:bd:d1:e0:81:e5:
08:db:a8:a0:40:5c:8a:9a:d8:7e:1f:21:59:44:5b:
95:0f:94:45:be:bf:5d:fc:36:cc:b9:a6:fd:96:3e:
ab:d7:ab:eb:d3:9d:f4:6f:26:c4:0f:a3:1c:19:87:
88:41:ca:e7:34:b0:9f:20:f2:8d:98:14:30:56:61:
4f:e8:2d:22:be:0a:b2:9e:e4:9f:60:64:42:76:87:
0e:3d:94:ce:74:97:f2:fd:5e:ce:03:5c:39:bc:cd:
cf:8e:39:b2:43:cf:56:ac:7c:5b:6b:72:c8:9e:fb:
b7:e3:d7:e9:f6:7c:6e:48:2c:c2:1e:b2:ed:8d:20:
61:a3:4f:f7:91:c1:e9:c1:32:21:73:73:c0:8c:f8:
ad:60:7c:3e:eb:b6:55:d9:f8:0a:a2:4d:75:85:16:
18:df:c9:93:ca:06:9f:45:54:4a:cf:c9:dd:7a:e9:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:8D:C3:61:3F:5E:31:ED:30:94:AD:3C:85:21:61:6D:92:C0:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76f3809-62f3-4905-ab42-a5955af4b4f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:4000::/40
Signature Algorithm: sha256WithRSAEncryption
42:c2:3e:7c:38:ba:f1:34:e2:79:f9:eb:4d:68:95:37:f9:7c:
d7:19:96:49:89:da:d0:4d:e2:8c:6d:e8:24:f1:50:08:f1:02:
58:b1:de:58:ad:1a:6d:c7:28:2e:08:3c:e3:89:e4:bd:bb:61:
cc:10:c4:04:04:11:d2:d6:8d:88:ae:fc:e6:a1:a0:f3:13:f2:
89:eb:34:d2:e0:ba:0a:d0:22:f1:df:9e:57:51:45:99:17:3b:
4e:c2:69:3e:4b:81:33:d7:e7:85:e7:1f:11:e3:c4:10:7d:e3:
6f:05:e0:b7:bf:e2:1d:f2:df:8a:64:62:a0:54:58:1d:7b:30:
45:46:b6:a7:f4:a0:83:02:79:09:0e:16:2d:b7:17:d9:5d:ee:
2f:43:20:f8:15:ae:e3:70:5b:5b:d5:5a:dd:12:c0:88:ab:06:
e9:7c:d9:59:9a:0a:b9:03:18:fe:a4:72:a8:6b:e7:a9:75:d0:
d0:b0:89:16:1c:ab:5c:89:66:81:31:70:82:4b:0f:ba:fe:56:
d4:bf:b5:30:f4:46:27:85:fd:10:97:15:75:5d:66:72:af:7e:
cc:c7:af:1b:32:0a:09:b1:04:18:d4:93:4d:f4:26:81:df:49:
7b:8e:63:fb:10:d5:f7:4d:cc:f1:6c:c2:49:07:03:23:fb:26:
fe:35:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 21:43:49 2026 by rpki-client