Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
File: 11758a9b-0e07-4929-92b2-ff867af4fa4f.roa (raw, json)
Hash identifier: O7ecLl68MFB1kzH2yCyqepFMQKhCmvr7I1syJ/24oYA=
Subject key identifier: 13:26:70:4D:4B:0D:D4:F4:C5:C4:F9:6A:52:6C:F5:8A:67:28:2D:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F10ED1A1D3665D75E58012E02872160BD0DFAA1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
Signing time: Sun 18 Oct 2026 01:20:22 +0000
ROA not before: Sun 18 Oct 2026 01:20:22 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:10:ed:1a:1d:36:65:d7:5e:58:01:2e:02:87:21:60:bd:0d:fa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:22 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=3c00e841f69cf98541f6ebe9e981c1c8454782f57e32bf8b1fb26695dca83f95, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:33:c9:36:22:55:db:f6:30:b5:fe:c9:8f:
93:33:26:72:f3:a4:c2:47:a7:08:6b:d9:16:97:a4:
03:db:fa:94:ce:de:b5:bc:ad:bf:12:8c:11:a5:e8:
c5:10:1d:76:2d:a3:69:0b:cd:0a:3d:d3:3b:fd:f4:
7f:6c:a5:51:74:ad:3f:70:7d:64:ad:0f:16:51:e7:
49:1f:06:d5:eb:a5:ff:3f:a9:b9:29:fb:d9:29:bd:
11:70:6d:8e:67:56:12:25:72:db:15:18:19:28:ca:
57:50:35:a6:64:a2:e7:2e:d1:f4:ba:bf:23:57:76:
9c:a2:53:cb:e5:dc:ee:85:85:84:07:dd:c9:17:9f:
60:6b:61:4e:e6:6f:e4:ff:91:50:33:5a:fb:ac:c0:
99:57:0a:67:42:b7:43:2e:41:29:96:96:96:5f:39:
47:a9:6f:07:aa:4f:f5:54:0a:5d:aa:2c:97:a1:87:
fe:3f:59:e7:a5:75:ff:8d:31:d6:82:2c:25:5e:df:
93:60:eb:77:7b:5f:8f:a9:1b:b1:d6:87:6d:fe:79:
62:fd:5e:58:1a:9d:2f:8f:4f:b2:90:15:48:a1:d2:
31:71:7a:80:bf:f0:14:c6:52:04:52:2d:71:7a:ba:
18:1a:04:13:d3:23:f6:46:3f:fd:b8:c4:24:17:69:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:70:4D:4B:0D:D4:F4:C5:C4:F9:6A:52:6C:F5:8A:67:28:2D:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:21:68:0d:37:b5:5d:a4:03:42:4d:5b:56:ab:22:68:57:09:
95:7e:20:e1:01:74:86:0e:d1:ed:4c:b7:e5:b7:8f:68:e5:2b:
8c:2d:23:a5:7d:89:4e:4a:b1:2c:eb:3c:07:90:ec:12:6e:84:
1a:74:1d:51:b6:fd:c3:0b:ab:64:29:60:8a:d0:2c:c7:89:0e:
f4:05:fa:1c:48:22:3b:60:0d:93:27:89:fb:37:f5:7b:b5:bd:
9a:a8:c8:6c:5a:00:2c:ca:7a:4b:c5:00:89:66:3e:e4:f1:16:
d8:4a:01:53:fe:62:47:1d:8e:b3:16:ec:14:04:eb:4a:12:5e:
ae:6d:0f:91:8d:21:28:66:73:2e:a5:1e:a1:fa:27:bc:22:11:
cd:86:6f:30:55:05:d2:f7:40:0a:44:ba:4a:55:42:5e:ef:8f:
dd:45:e6:e9:30:6a:a8:54:f1:4c:7d:c9:32:e0:f0:ed:3c:ab:
2d:e2:cd:2f:bb:9a:7b:2d:df:b6:da:bd:1d:c0:4b:71:f4:4f:
db:6e:57:6c:04:4c:34:0a:9b:80:70:37:d1:19:8f:96:1c:aa:
69:c5:56:b4:1b:2a:66:9a:dd:94:02:4b:7f:44:9d:a3:62:f8:
96:4b:d5:1e:17:f8:df:6b:12:de:a2:a6:6a:cc:dd:98:14:ff:
0a:32:02:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:44 2026 by rpki-client