Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f67554-ef04-4edc-997e-0a2f920a8c91.roa
File: 03f67554-ef04-4edc-997e-0a2f920a8c91.roa (raw, json)
Hash identifier: iwz5OO+E5S+HUGpyo7gAsCfl/ZIMxIIap85p7j+ChpM=
Subject key identifier: EA:3D:15:76:9D:F1:8C:8F:5D:BB:8A:D3:1A:E0:FE:4B:1B:FA:06:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35C87194F4D2194029585C128FC7E4207B9BC721
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f67554-ef04-4edc-997e-0a2f920a8c91.roa
Signing time: Thu 29 Oct 2026 01:02:16 +0000
ROA not before: Thu 29 Oct 2026 01:02:16 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c8:71:94:f4:d2:19:40:29:58:5c:12:8f:c7:e4:20:7b:9b:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:16 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=5dec6fdc0540fda966266109c8dcccfff70c82134c490ce764feb489825e3e70, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:8f:74:2e:83:a9:bf:0e:ce:6b:07:6e:a8:
0d:bc:d8:8c:a0:6c:83:61:b8:00:b4:5e:1a:4c:12:
2c:b4:8c:d4:75:e7:80:3e:c7:d6:a1:50:cf:4a:96:
ba:b1:fd:50:fa:57:54:ef:2f:92:83:e5:99:13:0d:
d3:e9:71:47:9b:09:c9:de:aa:b6:ee:cf:04:e6:1f:
10:f6:e8:d9:86:72:09:47:ca:6e:d2:a7:19:83:e7:
cd:75:a9:2f:c9:11:2a:7e:01:91:e5:5c:e8:2f:d1:
09:ae:11:45:1b:fb:4a:6f:d5:d7:e6:97:94:4f:19:
4c:e5:c6:37:af:a2:83:d6:78:a9:3e:18:9d:6e:ae:
f5:eb:3f:81:5f:9b:c0:49:56:b8:8c:7a:e0:78:36:
78:44:df:b3:15:12:bd:94:cf:6f:21:e6:dc:46:67:
21:ad:76:d9:5e:20:89:94:65:b1:69:04:4b:80:8e:
a3:b9:73:46:3f:f4:47:52:14:c2:b1:1c:76:f8:f2:
e8:b7:64:73:26:bf:f0:ec:f5:f1:62:b2:1c:5d:cc:
0b:05:f8:c2:0e:ed:22:f5:70:d9:e6:6e:dd:5b:0f:
e4:9b:ea:f1:3e:af:cf:d2:f9:49:41:33:94:16:e9:
ab:c3:6c:0a:34:c4:50:79:b7:85:22:93:70:6e:08:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3D:15:76:9D:F1:8C:8F:5D:BB:8A:D3:1A:E0:FE:4B:1B:FA:06:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f67554-ef04-4edc-997e-0a2f920a8c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:4080::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0c:01:75:c4:f7:0a:e9:91:62:cf:21:cf:e0:23:b7:1d:c2:
10:11:18:43:f4:59:d8:39:bd:1f:e9:e2:05:f6:ed:94:8b:75:
6d:51:e1:26:0f:d9:6a:44:3e:c4:03:aa:e2:96:62:e4:99:85:
42:ae:ae:dc:04:37:cb:a5:e8:24:87:f4:74:bc:2e:dc:cf:91:
10:7b:bf:91:90:76:c2:31:ce:04:ad:d4:4d:3f:e1:ac:c2:eb:
91:62:9c:cd:63:fc:a0:92:46:9d:06:29:74:b1:0a:8d:69:ec:
82:4e:5e:2b:d5:89:7d:3e:1c:24:ca:fa:85:70:6a:4a:eb:23:
f5:0d:7e:12:b3:b2:b9:42:21:5c:6b:84:24:e7:8d:09:db:f8:
1a:c9:55:ec:11:4f:c0:cb:1c:48:2e:b0:7f:f9:67:e5:0b:83:
aa:f4:60:4c:2c:c8:87:5b:5c:f9:6e:1f:d0:c9:6f:f2:ae:bb:
f6:8f:35:1b:98:0e:92:3c:28:8b:2e:27:79:be:26:6a:59:ef:
f4:8b:78:30:bc:44:f7:67:69:2f:bc:67:d8:be:84:fd:01:0b:
8d:99:63:b5:4e:13:16:b9:34:1a:78:0f:79:99:4d:c3:27:39:
26:de:b3:ec:d4:54:35:e9:13:f4:a4:50:23:37:1a:67:f8:30:
46:5e:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:18 2026 by rpki-client