Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
File: 0f3fbd71-85b4-48a7-8479-e942c9578262.roa (raw, json)
Hash identifier: z/d77UyWqLPV278MN6hAJAwc4kZHpjYFYRdBmHY08yU=
Subject key identifier: 5C:2E:84:49:6A:AC:DD:DE:1E:BC:86:8A:C1:B0:82:BD:0E:4E:EA:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2011019BBE1C52BECB58FC8669BCD877237C8564
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
Signing time: Mon 26 Oct 2026 05:20:47 +0000
ROA not before: Mon 26 Oct 2026 05:20:47 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:11:01:9b:be:1c:52:be:cb:58:fc:86:69:bc:d8:77:23:7c:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:47 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8e4fe923fb01bfc432c33f25aa1ebc384265d367aa9b1e8c22560026f1f472aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:ad:cc:d0:82:1d:f5:3d:61:31:29:c0:89:
d4:33:fc:ec:18:13:60:d2:05:0e:51:b1:cb:6f:93:
35:f2:45:82:8a:c6:f0:a4:c4:56:23:16:13:90:16:
a8:4e:2f:77:92:d7:8e:30:3b:bc:1c:e2:4a:61:be:
19:7b:cd:1f:51:1c:47:53:0f:72:05:3e:e2:84:78:
30:38:48:b6:da:68:bd:f0:cc:5f:6d:67:56:23:b2:
06:73:d6:3e:57:6c:7d:ac:e0:f9:5e:93:45:fa:e6:
11:af:90:8d:e5:c6:2a:c2:a9:d1:1c:89:60:f3:9b:
2a:c5:7e:1f:3d:f7:97:14:ad:a0:df:86:be:4a:bf:
f1:bf:0d:b1:08:03:8a:d4:c4:75:02:4f:f1:c1:19:
d9:4d:98:c3:05:03:37:4a:0a:25:bb:71:b4:5f:ce:
f2:b9:15:f3:d0:06:7e:c6:b9:83:3b:bb:a7:29:ef:
54:e9:04:de:ae:de:c0:7c:42:bb:17:38:8a:6e:31:
f9:82:76:c3:57:1b:02:62:43:70:32:39:9b:6c:6c:
2f:af:29:d2:41:3f:a6:5a:47:fb:81:36:05:05:28:
7c:13:ce:fd:ed:07:a6:2e:27:ad:64:05:04:45:66:
2c:cb:f3:f1:b5:53:db:b3:b8:d1:30:1f:5b:74:f0:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:84:49:6A:AC:DD:DE:1E:BC:86:8A:C1:B0:82:BD:0E:4E:EA:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:1000::/40
Signature Algorithm: sha256WithRSAEncryption
11:b6:06:78:43:ab:9d:08:9d:fc:8a:d9:10:aa:01:e8:e9:c6:
b5:fe:17:99:5d:78:02:10:16:e4:22:b7:ae:45:13:11:72:eb:
41:c4:ca:48:d9:8f:10:43:37:3e:84:6c:89:8c:33:cb:ff:f5:
45:95:52:2a:40:42:8a:ef:e8:8b:42:ad:bd:40:e5:43:12:16:
ac:0f:1b:aa:87:87:65:ea:31:f3:fa:29:41:36:4d:31:6c:97:
5d:ea:90:10:e0:c8:74:15:86:dc:4c:49:b3:92:1c:64:be:5a:
5a:96:1e:4e:f0:60:dc:33:8b:43:50:98:fc:9e:c3:b3:68:5f:
03:f8:e4:79:ae:4b:c8:56:52:28:09:fe:28:c5:90:2a:0c:a8:
43:f8:2d:b5:42:ef:b6:57:54:b7:39:b0:4d:1f:fb:72:43:ea:
77:e1:11:6a:d5:f1:9b:7a:28:df:db:de:f6:3c:c9:02:fe:fe:
fd:d3:cf:7e:5e:bc:ac:a4:19:c0:07:e5:2b:95:b4:41:6d:de:
68:2e:bd:35:57:4e:67:f1:46:f4:0e:f4:f2:a6:c1:ae:ee:bb:
32:fc:59:f6:24:f3:8c:e2:23:6c:5c:a2:aa:1e:67:b3:43:ed:
7e:8b:80:cf:ad:71:86:b9:17:65:16:2e:99:b5:9a:4e:4f:fb:
c3:15:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:14 2026 by rpki-client