Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa
File: 0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa (raw, json)
Hash identifier: WTW+TfyNuK/cCFi/xQgLxV6dinwVM8yxX2noN2DLgOs=
Subject key identifier: E8:83:CC:EA:C4:28:C1:9E:36:4E:40:48:DA:15:59:2A:C6:4C:D4:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A1526811C95A65242EA6203989D80DA773EEEEB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa
Signing time: Tue 27 Oct 2026 00:02:23 +0000
ROA not before: Tue 27 Oct 2026 00:02:23 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:15:26:81:1c:95:a6:52:42:ea:62:03:98:9d:80:da:77:3e:ee:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:23 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=dfa6331b47715cfc87a7327926744635977600e8e8063b35252dd8662aa76e3a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:85:89:26:8a:0d:d7:f6:ed:fc:25:fc:a6:
6d:a8:c0:7e:8e:61:1f:46:30:e9:b3:54:3f:b3:bb:
b8:4d:4d:bf:0b:55:a8:6e:0e:cd:ae:12:8d:9e:8f:
78:53:b4:3a:73:5f:8b:16:a8:e3:20:10:5e:8d:31:
45:b2:06:b0:97:02:d2:86:5e:e1:cc:e0:8f:f9:48:
43:49:e6:f5:32:c6:39:f2:78:64:79:d7:88:e0:06:
52:d9:95:2c:9b:82:63:58:69:0e:26:3a:12:26:0d:
05:0f:16:5d:cc:b4:e8:e2:21:d8:e0:fe:13:5c:d0:
4c:bd:a8:89:fd:02:eb:cc:52:0d:ad:bd:85:5b:6f:
9f:c7:62:dd:cf:5e:a1:b5:2f:56:fb:fe:bc:c5:32:
f4:10:4f:69:6b:f3:b5:9f:5c:68:a5:57:10:e2:39:
8b:b5:19:89:95:17:8e:76:ad:6a:05:f3:cd:2a:be:
31:f9:ff:b3:4a:9f:ab:1f:0c:55:86:77:0f:19:1b:
9c:25:ed:38:8e:72:df:e7:49:15:2f:5c:ab:fa:b9:
6b:76:1f:1e:77:b4:34:99:34:de:b5:fe:29:de:bc:
27:f2:ae:da:b2:9e:e8:04:16:da:e6:7f:6c:3f:f5:
b6:ae:d5:0b:c9:08:0f:73:03:b0:0c:e7:75:97:89:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:83:CC:EA:C4:28:C1:9E:36:4E:40:48:DA:15:59:2A:C6:4C:D4:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0fe279cf-b55f-4d96-9958-ec3ecd64b0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1400::/38
Signature Algorithm: sha256WithRSAEncryption
91:a3:2f:07:5e:11:5b:57:50:8e:04:0f:b9:2b:26:f4:b4:01:
05:df:dc:93:d4:f7:22:0c:a0:3b:58:7b:56:85:ef:bb:48:7c:
bd:68:d2:2b:e8:2d:71:68:60:ad:9c:a4:e3:9d:d2:6b:1d:ef:
94:7a:bb:7f:73:51:b1:de:70:dd:29:96:fa:bf:ce:8e:e4:41:
3c:57:33:09:1c:b2:44:73:5b:b7:03:9f:c4:59:a4:60:83:01:
f9:9d:63:ed:f6:ac:f3:73:e7:c9:b7:65:09:0e:d0:63:a0:be:
91:95:b4:e6:39:26:9b:14:05:f6:a4:39:24:f5:00:22:10:75:
00:da:17:70:59:1d:ea:6b:58:49:1f:17:bc:c6:40:47:b8:64:
1c:a2:9d:36:7f:83:7d:a3:26:60:9b:9b:32:f9:10:08:27:38:
75:ce:15:03:c0:c0:72:c7:ce:ee:98:ce:d1:c0:c8:c3:90:a8:
6a:f4:af:38:c1:b4:4f:c3:68:83:3c:70:82:22:cc:fd:63:dd:
5f:85:07:d0:27:3b:32:7a:68:dc:34:f2:8b:dd:b9:45:22:46:
1e:fb:9c:ea:2b:72:f0:b1:b5:19:e8:41:7f:ae:f7:c2:ce:72:
2e:26:d8:08:42:51:21:f7:a4:a9:9a:6a:70:7f:46:1a:65:56:
da:02:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:40 2026 by rpki-client