Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/012c9415-fd75-453f-91b6-b57a394d548d.roa
File: 012c9415-fd75-453f-91b6-b57a394d548d.roa (raw, json)
Hash identifier: tUMJ+knZDoaDvidLx63mQ9u4xXLEZn0d8SmDaHifdWg=
Subject key identifier: 88:76:D3:E2:45:9C:00:75:EB:19:56:CF:0A:04:BE:54:34:08:DF:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3840408025134BACA3EDD9FBE80DE7E8847DF37B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/012c9415-fd75-453f-91b6-b57a394d548d.roa
Signing time: Thu 22 Oct 2026 01:40:08 +0000
ROA not before: Thu 22 Oct 2026 01:40:08 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:40:40:80:25:13:4b:ac:a3:ed:d9:fb:e8:0d:e7:e8:84:7d:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:08 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=a92a3531b3c00c8ae58abee6abc5f66e53d106af509ea1edde4ca25614963544, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:32:71:79:1c:27:a5:19:8e:17:e0:69:97:
d5:a3:30:2e:3b:ad:7d:ea:69:d6:e9:08:d0:a9:7a:
0a:bd:4f:b7:31:9f:24:1a:ba:55:a3:9c:2c:56:27:
52:00:1c:08:cc:89:f9:ef:a8:52:f5:be:85:5c:1d:
77:20:6b:bc:e4:8c:32:f9:16:dc:33:d4:74:6f:d4:
07:8d:00:10:a2:2f:d4:74:e0:11:fc:c7:3d:97:79:
2d:a9:ef:14:38:fb:07:7b:5a:11:6b:d1:db:48:4c:
3a:0d:83:41:26:4f:b1:ba:cc:ed:f9:e4:96:a8:2a:
88:72:ed:db:29:68:e9:50:52:0e:6e:83:7b:fd:c8:
b5:51:b8:75:76:20:fc:0d:0f:95:81:95:03:b0:95:
16:03:68:cf:af:99:94:f4:30:4c:9b:12:0d:54:0e:
18:14:05:7e:fd:dd:ca:c4:52:88:93:ec:da:1e:05:
a5:30:65:78:04:0b:6a:8c:5c:0c:ca:e7:68:75:13:
3a:b8:16:2f:ad:0c:db:9d:39:ff:58:b0:f4:e5:3e:
55:d8:d0:e7:b9:d5:f4:e4:c0:57:5a:cb:1e:84:45:
27:89:4b:aa:3b:8a:8f:fd:3d:df:cd:77:35:0c:19:
04:14:7e:72:bd:15:74:86:a8:d2:1b:2a:96:43:75:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:D3:E2:45:9C:00:75:EB:19:56:CF:0A:04:BE:54:34:08:DF:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/012c9415-fd75-453f-91b6-b57a394d548d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:6000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:c3:49:9c:1d:75:78:90:1e:a5:69:23:2c:7b:c7:ad:51:b3:
7a:65:cb:9e:37:ae:b6:9e:55:24:e6:be:cc:83:d1:4c:db:18:
9a:55:4f:a5:ce:60:31:eb:32:d9:e4:76:f6:1a:90:37:78:1b:
1d:10:7f:12:9d:0f:20:ea:19:13:0e:47:a7:6a:82:b0:cd:a8:
fc:ff:ec:a7:58:b6:29:ea:57:09:9f:45:bd:b1:c3:fd:48:39:
34:9e:f3:38:70:e3:e2:7c:05:3a:b9:b2:49:ca:93:35:e1:e8:
a5:1b:b9:99:89:f7:81:19:a0:81:3a:bf:9b:65:76:db:bb:80:
45:c8:51:ac:6a:a8:24:dc:56:80:4e:47:99:a3:2c:80:e2:17:
91:24:69:05:0e:7e:ec:14:be:17:15:41:98:c8:2d:46:f8:a3:
ce:68:c0:db:a1:c9:7d:10:43:d8:c2:42:f2:63:cd:a4:5a:ae:
ff:ae:4d:17:2d:3f:f7:0d:9c:8a:c2:fc:84:a3:ce:ba:72:bf:
b2:54:a5:83:6b:5a:61:e3:21:b3:25:50:0f:70:bf:93:65:6f:
a3:5c:fd:f1:23:d7:64:fa:19:33:e1:1a:a0:e7:fe:3f:89:b4:
8c:11:8a:7f:f1:a8:e8:a0:2d:44:12:7f:64:09:89:38:5a:47:
88:aa:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:54 2026 by rpki-client