Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
File: 11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa (raw, json)
Hash identifier: JEmGMPj7v7cYDYLtoThjJ/JoD+mA3Jp8NjnOfFY5nos=
Subject key identifier: C5:74:95:6F:EB:C7:4E:AD:90:C9:5D:40:EA:3F:1D:34:83:07:79:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5258C4988FB5D1F507E324A58985DBA348CBE3E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
Signing time: Mon 26 Oct 2026 05:31:06 +0000
ROA not before: Mon 26 Oct 2026 05:31:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:58:c4:98:8f:b5:d1:f5:07:e3:24:a5:89:85:db:a3:48:cb:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e98e65925eb858a89eb7e8a3409e77bc4963836757acc78d0da4937aac5763d1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:05:12:fa:f0:6b:0d:76:89:54:a0:ab:fe:
34:d5:3b:e6:18:54:f3:ff:26:e8:f4:f0:41:12:60:
ff:06:7b:4a:f3:b8:b9:35:30:a9:8e:84:56:b7:7f:
c5:f9:8e:5d:f9:5c:cc:a0:bc:da:c5:53:be:e5:7e:
cd:69:57:6a:0f:63:5c:e1:0d:65:77:33:97:6a:e6:
dc:76:ec:9d:dd:25:f7:bc:1d:b0:0f:4b:99:1a:21:
d3:05:72:3b:89:20:0c:71:37:38:38:35:0a:5b:2b:
d7:91:bb:15:52:11:ae:38:4e:28:ff:7f:9e:93:1b:
6f:61:6c:79:bd:b5:2d:96:46:6d:33:0d:09:1a:63:
3c:50:e6:e9:b1:d1:f2:a8:62:55:4d:84:ae:6f:65:
e3:88:33:1d:f7:31:cd:50:d9:20:be:55:9e:10:ae:
2b:97:7d:3e:c9:76:36:dd:d0:e7:57:87:a9:d4:87:
24:87:eb:92:12:b9:1c:80:5b:84:b4:77:ee:bd:e7:
81:3b:3c:01:99:1e:35:5e:a3:63:f3:d5:e2:bb:6f:
9b:92:2a:3f:59:16:d0:28:0d:25:a9:43:4a:54:7a:
2c:e9:63:ea:a5:69:8b:cb:8b:af:c0:c5:92:59:db:
4b:50:64:de:fa:c7:eb:fd:f0:96:fc:07:ac:bf:1e:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:74:95:6F:EB:C7:4E:AD:90:C9:5D:40:EA:3F:1D:34:83:07:79:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b:800::/37
Signature Algorithm: sha256WithRSAEncryption
72:3b:83:18:91:4a:f0:ef:65:e5:d6:69:a5:d8:cd:9b:d3:14:
09:8c:9d:e6:cb:fb:62:e2:d5:d1:41:48:26:ca:2a:d1:9b:fd:
ab:93:42:d6:24:e8:48:15:19:1f:bf:4b:46:82:ef:6c:05:96:
47:c7:9f:c6:38:5a:e9:10:cb:d9:a6:e6:91:54:04:0a:b3:5e:
22:f4:1f:a0:0e:61:be:c2:c1:36:80:6d:8b:de:fb:f3:dd:e2:
77:34:48:75:36:78:73:53:bf:fa:d5:10:c1:93:8e:33:03:cc:
34:2c:9a:74:e6:05:19:ba:45:0f:a2:7f:b1:d1:35:47:33:bf:
b7:81:23:03:76:36:67:82:f3:03:b9:55:5d:4b:65:94:f2:fb:
ec:22:82:03:09:a0:e6:2c:96:8f:0f:90:6e:20:8e:36:1a:fc:
60:87:72:e4:66:e5:ff:5f:f3:e8:14:ec:74:c9:51:a7:b2:57:
cb:e6:1e:fa:4c:e2:69:8a:26:28:e3:75:43:b7:c2:cd:f7:21:
36:bd:5c:02:a1:6e:65:88:c7:8a:2d:22:5e:30:b5:09:b5:b7:
4c:24:64:46:83:25:50:90:92:0c:3f:c1:fc:69:1a:8d:7f:11:
33:a3:f9:c5:ae:6f:59:04:fb:2f:ad:94:09:e7:cc:ab:7a:3c:
62:46:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 03:21:11 2026 by rpki-client