Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
File: 00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa (raw, json)
Hash identifier: A3St2dEQ3FsA+syhXmiQqLbB+r3BaKHE23+9IuHMO9A=
Subject key identifier: A7:5A:8A:93:C2:D3:DB:74:CD:22:C3:EC:C5:51:EF:8D:BA:D8:3D:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36718D3E9C4885677C2C7A33636D2FB3E7E8B3A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
Signing time: Mon 26 Oct 2026 04:30:28 +0000
ROA not before: Mon 26 Oct 2026 04:30:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:71:8d:3e:9c:48:85:67:7c:2c:7a:33:63:6d:2f:b3:e7:e8:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=b7cd505adc7d3fb0f57002a09a69328685d8330a2ec0e9c7e47a4125058f3ca6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:19:40:04:63:c4:b8:f1:a9:bf:1e:35:92:
87:b3:6c:fa:08:8e:08:7a:41:12:ad:7c:72:68:d3:
8a:18:49:2f:81:bd:e0:8c:d0:a0:6f:81:e5:86:45:
42:54:44:b2:df:e1:c1:7d:2c:19:b8:bf:6f:a4:76:
05:70:bb:ed:fa:f7:40:fc:fa:a8:16:74:b5:6b:1b:
a3:9f:1c:de:0c:b5:45:a4:7c:bb:7b:df:19:e1:c5:
6e:ca:0c:cf:2a:e1:0c:89:d1:8e:13:88:0b:c6:2a:
ab:be:a5:e8:5b:bc:ee:00:2a:c5:67:19:d8:8c:63:
02:8b:9d:f8:c8:42:4e:e3:16:cb:60:04:d1:90:58:
19:7a:5c:87:a7:7f:82:c3:a9:b1:2a:d6:4c:6d:0d:
0a:77:fa:d3:48:c9:50:90:39:58:60:28:5e:1c:1b:
c8:bb:0b:5b:66:e1:c5:bc:79:99:04:2f:e6:e7:0b:
b5:69:fd:d8:8f:87:22:75:90:cb:a8:ea:23:13:ac:
39:c1:22:35:56:f2:d4:bd:68:74:75:ba:3e:fa:3b:
6a:aa:a0:a0:58:f9:14:6f:c7:ba:49:34:63:66:c8:
d2:54:69:97:8f:56:cf:56:76:32:d5:e9:b6:b2:69:
22:08:31:fe:45:16:8b:bc:23:5d:ae:aa:f3:b0:71:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:8A:93:C2:D3:DB:74:CD:22:C3:EC:C5:51:EF:8D:BA:D8:3D:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
a4:77:45:aa:45:fa:79:27:6c:ff:8c:18:57:bd:ae:f1:b5:6b:
83:c6:14:94:6b:ca:3a:58:6b:64:3d:56:a4:c4:3b:70:d9:02:
c4:69:07:cc:6f:15:ff:67:1e:d8:a8:e9:73:08:6a:91:40:8e:
51:50:cd:9e:d5:15:66:e7:10:ab:ea:fc:29:f3:b5:50:38:6d:
8b:7c:98:52:55:05:a8:20:9f:37:34:c5:27:25:ce:69:74:a8:
95:10:b9:65:ab:ec:cd:cd:f5:ba:7b:d7:04:c1:02:b6:a7:3a:
85:bc:58:de:cd:6c:64:06:60:45:12:4a:ea:8f:33:66:e3:41:
c8:f8:78:81:42:96:ed:66:3a:3b:86:49:41:2b:2e:58:d6:3c:
4c:ea:d8:e1:ee:86:15:0f:52:64:ee:75:5d:2c:a9:3b:fb:67:
1b:ab:6b:21:61:e2:2e:28:78:d5:99:42:b0:44:37:a0:05:74:
ac:5e:ec:f8:da:b2:ea:70:64:eb:61:11:64:20:a6:95:72:40:
24:1c:da:1d:f2:fc:39:de:d2:73:ba:74:51:ca:5c:ec:02:6a:
54:35:01:79:cd:da:3e:e6:2d:eb:10:04:f7:4c:ae:62:ad:e1:
8d:d7:ba:d9:b5:54:70:6f:24:0d:54:07:12:dd:a0:03:85:3e:
cd:24:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:52 2026 by rpki-client