Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: Q4iGWETh2y6R3vDuEQOdTmZ0n3hdd9DDJslP13XuaIc=
Subject key identifier: 12:C1:FA:9A:03:FE:67:9F:CE:A7:41:2F:0E:20:96:54:79:77:D4:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3EF5740F6BF9B8759F276C397357CFBFD8F94294
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Mon 26 Oct 2026 04:31:10 +0000
ROA not before: Mon 26 Oct 2026 04:31:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f5:74:0f:6b:f9:b8:75:9f:27:6c:39:73:57:cf:bf:d8:f9:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=af11fbeac82a9687d48fd318f4082a1410a9a7948c4b8a2fbc766c2a75af3e42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:8f:80:f9:67:c3:64:85:bb:f1:c8:a6:c1:
d7:8a:ab:82:5b:ff:b6:0d:e7:03:04:00:8f:69:4b:
8b:6a:5f:ee:0d:56:1d:1b:ad:fc:11:0d:4b:95:dd:
b4:6b:1c:ef:cd:02:86:91:c9:a0:e7:a0:8c:2d:00:
9b:5b:ef:9a:35:a7:06:39:af:d1:3a:12:d0:a9:31:
e4:2a:a2:7f:06:26:13:01:50:bf:99:1b:33:50:b6:
aa:1c:6e:21:31:4b:4d:34:90:49:3c:fc:33:39:bf:
96:1c:2d:31:02:9e:37:91:f7:83:65:29:4c:42:5e:
81:bc:1c:fb:78:ec:31:d8:48:38:e4:94:02:15:67:
e5:c5:ac:09:dc:99:be:78:4e:78:b7:58:96:6b:8b:
3d:9c:5f:05:d5:4b:5d:da:8a:d8:93:db:3a:2d:af:
63:57:28:12:e2:8a:2e:f6:e6:12:3f:b4:7b:1e:aa:
9a:06:98:e0:73:b3:76:94:d0:9f:31:98:65:06:9b:
63:30:db:79:f6:92:c3:55:8d:26:e1:a8:d4:cc:8d:
f0:7d:58:48:c1:49:dc:18:9e:88:ca:d8:a4:46:26:
51:30:af:aa:40:36:6b:9c:d6:bb:11:6b:e8:42:33:
fe:44:df:f3:57:78:1d:3d:49:1b:ce:96:6a:7f:4a:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:FA:9A:03:FE:67:9F:CE:A7:41:2F:0E:20:96:54:79:77:D4:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
88:bf:dc:db:78:68:52:ed:34:8f:5b:27:73:29:50:18:0a:1f:
6a:c9:2f:11:fd:09:ee:d1:a1:b9:97:4f:bd:ea:0f:54:58:96:
46:d7:d0:40:ee:72:e5:5d:9e:5d:4e:81:b5:00:cf:b5:ac:6a:
c7:4f:4f:dc:85:78:5b:3c:d9:f8:c8:a9:16:e2:96:b9:b6:71:
80:65:9d:84:b2:f8:cd:63:f7:86:76:3f:59:2b:e2:cc:be:0b:
0a:5b:07:2e:15:1a:16:fa:13:15:b8:fc:d9:e0:cb:42:4b:aa:
31:69:e8:1e:07:d6:3b:e7:03:17:65:32:1c:ce:0e:1c:ae:45:
9b:16:03:ff:2b:75:8c:1a:da:67:91:44:37:98:fe:70:e7:dd:
72:6c:75:e5:b4:c5:66:33:21:39:5d:2d:88:6a:14:df:b2:9e:
d1:f0:c2:fe:b9:4c:60:92:4f:d3:70:28:22:9a:4b:81:b0:4b:
ee:29:db:c8:45:4e:a6:6e:29:db:71:cd:e9:9b:8b:37:d1:2a:
5e:d0:67:3f:4d:1c:ce:7c:d2:ac:b5:fc:12:db:55:3b:c9:51:
42:37:6d:5a:82:03:ff:c8:80:61:e5:7b:69:5d:15:b1:bb:f4:
40:03:71:a1:c3:cd:a0:d3:cb:d4:30:65:c4:41:93:ed:fd:1d:
a4:61:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:55 2026 by rpki-client