Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
File: 0141b806-c012-49b3-a8da-73590b0cd2b5.roa (raw, json)
Hash identifier: edUybx5WzuJsVQ3upVvUevhtLh9EiH8kZJ7UnPMWO1M=
Subject key identifier: 2A:4F:5F:47:B0:79:7F:C8:26:D8:5B:4A:AB:CA:E4:28:9C:92:01:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2482EA9402170003976B5980F9C2E85CE4C8F510
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
Signing time: Mon 26 Oct 2026 05:10:27 +0000
ROA not before: Mon 26 Oct 2026 05:10:27 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:82:ea:94:02:17:00:03:97:6b:59:80:f9:c2:e8:5c:e4:c8:f5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:27 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ce17280c1ea53d36b3c0e0025d631b41e0ecccba194842dd2012d8f19ea56377, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:9c:2c:c5:26:de:92:8e:2b:2d:2a:d5:16:
c4:17:68:d0:9f:79:c2:6d:fe:98:01:ba:6f:0a:63:
6f:d1:c2:56:98:ca:56:b8:55:56:52:c1:f3:f9:22:
36:34:56:f5:56:fe:db:04:57:38:1e:36:16:76:ac:
7f:3a:0d:47:28:a3:b4:79:7b:27:64:51:0b:1a:84:
da:13:9b:07:df:3b:5c:fa:ff:42:34:f5:d0:bd:2e:
ce:ea:e8:17:e3:2f:23:10:6c:44:51:20:b5:53:a8:
32:a6:8d:6f:0e:0d:3b:17:e1:aa:0b:d4:f9:da:d0:
86:f7:27:92:df:d4:57:c8:3a:55:36:61:3c:78:c0:
ad:b2:87:fc:7a:f8:89:76:c5:51:f9:d7:f1:9f:39:
ce:a7:76:cd:83:d6:32:1b:ba:6e:02:a5:f1:dc:82:
c0:14:ef:99:e6:cb:b4:ec:9a:56:df:77:11:0b:1d:
dd:a1:3a:55:8e:9a:c2:30:5e:23:ac:e4:14:08:4a:
18:25:10:fc:fe:1b:de:3c:d2:a6:ba:23:f2:0b:f8:
5a:94:a6:8c:46:87:c3:f8:8f:bd:cf:b5:76:0f:8a:
8a:2d:1a:bb:9e:93:3e:18:b1:a1:20:88:56:10:ff:
d8:ae:33:6d:56:3a:54:c5:d2:98:fb:8c:37:a2:05:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:5F:47:B0:79:7F:C8:26:D8:5B:4A:AB:CA:E4:28:9C:92:01:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
88:89:05:b7:d0:33:82:90:2e:21:7e:82:a4:a7:0b:56:a8:80:
4a:5e:08:d8:54:f7:9d:4e:d0:2f:51:4e:e0:91:3b:de:36:55:
06:5f:d4:a7:57:c0:e8:df:1f:6b:ee:db:f5:b0:5c:df:0c:4b:
f8:a8:28:48:1b:20:0b:5f:12:47:8f:fd:75:54:20:e1:b8:5c:
fb:09:00:30:05:78:86:5b:c7:a8:6c:99:ff:fb:8e:0e:da:9b:
7d:73:ba:89:cf:45:82:ba:1e:90:f5:3c:eb:4e:95:ff:36:0c:
11:b7:dc:82:5b:47:b5:0e:68:82:a5:2e:17:7d:0d:27:a5:96:
77:a4:57:34:22:e4:65:fe:96:df:71:d6:5c:db:4d:c9:5a:15:
1b:2f:97:68:ce:d2:bf:9c:a7:a9:40:51:8e:22:9a:98:23:f1:
fa:ab:9f:b0:bf:c9:b7:a8:d7:13:b7:10:7d:95:c6:a1:6a:a0:
cc:02:55:47:80:4d:99:3d:6b:f2:a0:b0:d6:c8:06:f5:6a:c7:
0c:5d:eb:c3:e4:fd:8e:b6:58:73:a5:d8:9e:67:3b:5b:25:c3:
96:ed:73:8e:b3:b3:0a:6f:ce:d7:d7:f7:60:3e:3c:75:8f:e2:
a3:f2:9f:73:00:3e:83:4f:6f:2c:36:38:41:70:f6:40:b9:db:
94:36:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:09 2026 by rpki-client