Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b335fe6-f4fb-45b7-9424-51f574ab2742.roa
File: 0b335fe6-f4fb-45b7-9424-51f574ab2742.roa (raw, json)
Hash identifier: gjcKzUBcBB7mWh02PYH+fmbfu5obe0pzejfrVGK9WLQ=
Subject key identifier: 09:0F:E1:97:FA:E2:FC:2D:BA:2A:6D:B4:B6:66:39:80:A0:8E:F9:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3841D877558C15D8AE653944FE21380985D94D56
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b335fe6-f4fb-45b7-9424-51f574ab2742.roa
Signing time: Thu 22 Oct 2026 01:40:08 +0000
ROA not before: Thu 22 Oct 2026 01:40:08 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:41:d8:77:55:8c:15:d8:ae:65:39:44:fe:21:38:09:85:d9:4d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:08 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=72c7fab935466c36e0d449ead117fd5f267e90d2c6a875586ba1ea3cdc58a9cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:6d:11:03:4a:f2:81:ba:37:71:5a:57:38:
65:82:f7:86:31:13:21:7e:0e:24:29:4c:19:3e:d5:
00:96:51:9c:6f:c8:d4:8e:48:23:d0:47:e0:3b:77:
f0:66:2d:f2:8e:c3:96:b9:f6:a5:9c:65:9d:7a:52:
99:08:2f:40:25:94:00:ff:c0:1d:60:2a:48:e2:78:
e6:ef:17:2c:ec:1c:65:d4:f1:41:e8:a3:80:80:03:
e9:f0:24:7b:46:c8:7b:5a:5e:a8:9e:0a:12:10:06:
d6:85:f8:c6:06:b7:db:6c:cd:6f:30:69:78:ef:59:
7b:92:c5:90:b6:4d:5c:d4:c6:57:a2:45:e8:19:cd:
e3:80:d7:cd:a3:d5:60:21:d6:c8:fc:c2:f3:1f:e7:
80:10:28:78:5c:ac:38:0c:f5:60:5d:dc:7f:8d:c3:
17:5c:fe:94:2a:b8:c1:19:10:c3:c5:3b:04:70:60:
f3:ad:03:32:7e:b8:60:cd:f8:d3:fe:2e:24:4a:bf:
0c:23:c0:75:74:18:5d:e6:e4:9f:0b:b5:90:94:6b:
0f:2e:64:e1:48:86:ff:4e:41:2d:08:ac:39:7a:7f:
ee:81:d1:5c:89:3a:de:ff:f8:ea:5a:fa:31:4e:1e:
5e:0d:5a:23:d2:9a:53:8c:be:ef:cb:a3:18:fc:a2:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:E1:97:FA:E2:FC:2D:BA:2A:6D:B4:B6:66:39:80:A0:8E:F9:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b335fe6-f4fb-45b7-9424-51f574ab2742.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:800::/48
Signature Algorithm: sha256WithRSAEncryption
ab:5a:d6:a9:f9:b5:02:27:a7:cd:86:7d:61:91:eb:ab:c0:ed:
0e:14:a0:d1:3e:bc:a6:75:eb:13:91:e9:17:af:38:38:7f:e7:
fa:d7:de:8c:2b:cf:4d:7e:8a:c2:8f:d2:28:ea:fb:b7:e0:65:
c0:14:a7:cb:a0:6a:a1:9a:12:15:15:91:11:33:06:9c:d8:a9:
03:c1:46:90:e5:8d:3f:bf:64:68:b5:21:3b:34:b5:ca:5f:1f:
d8:d5:c6:f8:b6:f7:93:db:c0:44:17:ff:01:bd:a5:49:06:27:
56:33:ba:07:28:d1:3d:90:97:93:c2:99:47:1b:0f:7b:49:1c:
fc:fe:a9:41:ab:72:19:58:62:b6:46:b6:e2:e7:87:cf:7c:7f:
ff:70:e8:49:92:cd:93:ef:24:93:57:4c:eb:c6:ab:5f:39:14:
b1:ff:9a:6a:37:c9:4a:9b:27:11:70:24:bd:9c:da:27:80:6e:
5e:f9:32:39:c4:d2:8b:45:8d:d0:9b:62:f2:6c:1d:7e:4d:11:
a8:47:c3:d2:ea:fe:28:cf:e0:bd:b8:83:5d:e0:18:41:39:8f:
4e:a3:2b:f9:4b:61:48:10:7e:a6:cc:1c:7d:ad:e9:e0:ff:36:
f8:85:b5:0e:34:21:af:d2:ba:c2:ba:f5:37:69:1c:eb:ba:8a:
05:a1:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:03:04 2026 by rpki-client