Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
File: 01309cf4-63f2-4f18-9689-8db4888bbe62.roa (raw, json)
Hash identifier: u9u0nw7eaSBk1uZfo6jTQcSBSaVVVyghEqEr6/5WY3o=
Subject key identifier: 2F:A4:53:B5:87:46:CF:1B:46:E6:01:B9:DE:69:0A:85:13:21:42:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 383088CC07533512CA9E4C629DD689A16D182BF3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
Signing time: Thu 29 Oct 2026 01:02:49 +0000
ROA not before: Thu 29 Oct 2026 01:02:49 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:30:88:cc:07:53:35:12:ca:9e:4c:62:9d:d6:89:a1:6d:18:2b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:49 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=e42826b6544477e52c5a504b22f4bf77606d629579d57780bd50e7c96da885a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:23:d7:83:02:f4:f4:95:5f:c6:ab:75:ac:
69:01:f6:fe:f7:cb:ea:6a:ca:70:31:c1:b7:9f:39:
13:33:40:8b:00:6e:e6:a8:a1:91:94:48:b5:9e:5b:
f0:c9:df:b6:0c:6a:2d:87:22:cd:df:a5:c4:52:3f:
ca:6f:8c:5d:d8:4c:d7:c2:8f:cb:d8:92:cb:9c:a7:
44:5d:26:80:48:0f:3a:6f:02:ed:49:2a:1a:f3:43:
97:2c:58:bc:01:e2:84:75:b4:5c:14:3e:23:24:69:
aa:6f:ce:81:5d:25:5f:ea:a1:7e:fa:d2:59:eb:01:
47:5e:91:d4:e1:8a:d6:90:a7:ae:9a:9f:5a:c2:5e:
0d:8f:5b:38:45:5e:a6:9d:3a:38:c3:cd:c4:63:ab:
a5:e0:69:e2:79:eb:29:de:84:59:35:ad:38:d4:f0:
1e:47:e2:2e:c5:4a:54:e5:fb:2b:79:9f:bf:fe:b4:
61:0c:2a:12:3b:76:c6:4e:97:aa:3b:35:da:11:3c:
cd:2a:ef:ef:20:2c:fa:0d:21:29:a4:dd:0f:b8:b7:
f4:6f:43:92:05:e7:85:84:fa:d5:7f:80:51:b6:de:
eb:a6:0f:34:ef:4c:ec:34:71:5c:5a:30:bf:a5:b8:
6c:80:cf:f2:1a:b0:94:7c:72:d1:42:92:9e:12:86:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:53:B5:87:46:CF:1B:46:E6:01:B9:DE:69:0A:85:13:21:42:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:5040::/48
Signature Algorithm: sha256WithRSAEncryption
4b:47:46:91:c3:c8:6c:6d:a5:7c:91:69:30:7e:b0:4c:06:e2:
3f:50:bd:bf:6c:83:d2:b0:dd:05:83:38:c8:69:13:b1:cb:81:
7b:b4:f1:29:2b:75:ee:13:13:e8:4b:e4:9f:70:5a:ad:06:70:
a9:d1:09:b1:9f:fb:1a:bf:42:32:14:42:13:3b:bd:73:0f:01:
58:7a:60:76:da:db:43:cf:6a:9e:39:f8:e6:07:2c:33:08:d4:
ae:95:b8:05:5b:10:d9:e8:fc:bd:a3:ab:03:47:84:67:95:97:
56:ee:ff:a9:19:7b:f9:e2:1f:84:da:29:c2:1f:92:3f:5e:d5:
19:42:38:0a:f2:42:82:d4:a8:8b:7c:56:f6:11:a0:68:61:96:
46:13:d6:98:24:de:4c:f3:fd:f4:eb:4c:8c:13:e0:d7:be:c3:
3a:61:51:4a:6f:ec:07:12:2b:b8:47:b1:31:12:a7:59:7c:d9:
97:2b:7e:27:b3:9b:fb:ff:5e:f0:4e:a0:a6:a1:39:9b:e0:5c:
52:b5:2a:4a:69:30:6a:f7:93:ae:a8:cd:14:61:83:7d:6b:c4:
85:e7:e6:f8:7e:cf:e1:f7:ff:3f:59:0a:17:27:d9:1a:4d:32:
40:52:c5:77:d7:bf:ba:86:dc:2e:5f:93:52:69:f6:6f:a3:73:
df:cc:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:51 2026 by rpki-client