Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa
File: 0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa (raw, json)
Hash identifier: krxS7hYsEtSP/i1deaqk2bygGFqnOi+tNAcGlpvCLzw=
Subject key identifier: 6C:DA:39:31:4E:28:55:9D:01:83:5C:8F:37:2F:E1:18:91:0C:06:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 658DED63E8E08698335256E9E6AA690E41CBA030
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa
Signing time: Mon 26 Oct 2026 05:40:05 +0000
ROA not before: Mon 26 Oct 2026 05:40:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8d:ed:63:e8:e0:86:98:33:52:56:e9:e6:aa:69:0e:41:cb:a0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:40:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=d641c82a2d9f9ce0926c8e24013b7a5f39c04ab548bf9f626983cb6dda454778, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:da:e6:ad:be:b5:9f:13:81:a2:76:8f:65:
66:19:fc:37:10:b9:d5:04:78:54:e2:b3:aa:d0:dd:
22:f8:73:3b:90:a7:39:2d:3c:76:86:5b:a0:66:e7:
2a:dc:0c:7e:93:b0:29:bb:31:33:3e:17:ba:73:8e:
bb:cf:1c:79:30:1e:25:a1:05:d8:9f:1c:9d:37:bc:
93:5c:a0:84:35:b9:a1:18:d2:f4:76:88:7e:b7:0e:
07:47:a9:67:4f:17:ec:ec:c1:4b:83:d5:a5:63:7e:
11:c9:5e:a8:fb:90:84:3e:8e:ca:ee:52:c2:8f:2c:
c3:b7:36:83:2c:94:8c:e1:cf:6d:9a:c6:36:5b:db:
23:1d:29:15:2e:85:2f:52:2b:82:4c:d6:e2:e0:1c:
12:63:ca:b7:d0:43:e6:8c:8f:e1:f9:a6:b1:02:8d:
c4:fb:7b:c8:77:06:7f:38:15:0b:b3:66:98:62:8a:
92:26:c4:16:86:f8:34:67:4f:9e:6f:42:33:4c:fa:
5f:73:6b:ca:a8:e9:2e:29:49:82:0d:4d:18:3c:45:
36:f6:fe:4c:4d:27:86:6c:c4:e0:9e:9d:dd:d2:0a:
b1:00:59:4f:90:fb:6a:3b:11:5b:bc:b5:ec:00:07:
8f:4d:15:ed:12:54:be:b3:3f:8e:a0:2f:9e:b4:ea:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:39:31:4E:28:55:9D:01:83:5C:8F:37:2F:E1:18:91:0C:06:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e082537-6e36-474a-9ff8-b7d3bcaabb64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:0e:88:d4:a7:c2:be:ea:1e:7e:e1:7c:39:ee:fc:c2:18:75:
2d:3d:d4:75:26:96:ac:ea:3e:e3:08:57:91:97:0b:0e:db:a0:
b4:ee:e8:03:ff:14:ed:11:07:e2:de:51:e6:e8:0e:e4:0c:37:
13:28:2e:6c:fb:ba:10:fa:6b:84:0d:5c:c9:d1:d0:20:7a:38:
08:a5:e6:af:29:4c:2f:2f:19:74:23:89:ce:7b:cc:e9:8a:59:
16:60:93:c2:3c:e6:f3:8b:f8:2d:fc:33:32:71:f1:97:cb:17:
50:cb:3a:a7:fc:02:89:d0:06:fe:97:08:fc:b3:53:b0:68:d7:
47:be:d9:9c:c7:de:ce:eb:f6:dd:fa:c1:0e:b1:8c:61:ac:3e:
93:9c:b7:4b:8c:0b:d4:32:a6:ba:d0:f4:f2:51:4d:2c:f0:85:
6c:6a:32:f4:a7:88:02:bd:99:67:c5:55:86:ef:89:e0:d1:c1:
82:6f:8c:ab:2c:e5:3a:a3:99:1d:d0:29:de:8d:fe:4c:b1:20:
85:6d:e9:fc:52:35:f6:38:bf:cd:2c:a7:90:be:92:3d:84:02:
09:bc:a4:22:cf:73:72:25:29:b4:49:fe:8f:fb:7f:53:ab:5d:
d7:71:98:06:74:e5:43:71:0f:ea:d2:94:8b:78:ee:c3:35:f9:
ce:8e:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:41 2026 by rpki-client