Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
File: 1366e04f-98da-4078-9b0a-cc452dfb7a22.roa (raw, json)
Hash identifier: rBX99WwiyYI6Sx6TDtWgpk21QA33VE1s4ztdOR61CKM=
Subject key identifier: 4F:22:62:67:28:87:48:AE:2B:97:E7:39:21:24:69:7D:09:7B:E9:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53339FF0C55A00E0174006C78928C199FCF39324
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
Signing time: Thu 29 Oct 2026 01:03:06 +0000
ROA not before: Thu 29 Oct 2026 01:03:06 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:33:9f:f0:c5:5a:00:e0:17:40:06:c7:89:28:c1:99:fc:f3:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:03:06 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=2dfd5dbceba329ce8064f35e552fe48b4d867e4e838bfbf53bbe637496722fc9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:5f:4f:d8:f4:bd:35:16:78:fa:61:5d:0e:
f4:b3:d3:f7:7b:11:f6:36:e9:1f:8f:36:0b:e4:15:
cc:06:06:8f:00:79:63:2f:5a:fc:a1:d1:f3:db:11:
f9:73:d6:61:72:11:12:3c:86:92:de:94:a4:93:c6:
9e:ed:c8:08:a2:c3:52:23:0e:55:77:5a:71:02:99:
41:f0:72:1e:b9:3e:47:d6:6e:c8:40:69:25:97:66:
3d:cc:f0:e6:9c:69:31:f4:cd:76:a3:02:00:88:c5:
12:52:7f:3e:1f:98:38:bf:c2:13:c2:71:d1:d2:7b:
ce:75:51:dd:79:2f:06:57:6f:43:2b:3d:a6:e6:9d:
1e:ac:47:09:05:c9:c2:ab:2d:62:06:1f:0c:8c:92:
b0:bc:71:81:b8:0b:5e:c3:35:c1:a8:14:3c:6c:dd:
00:a7:40:1e:c1:31:6b:f0:f2:cc:3e:94:37:a0:5c:
05:74:32:13:01:fc:64:14:33:0f:4c:5b:5f:b5:21:
b8:42:46:64:14:d4:6d:40:e0:6b:dc:1d:88:92:02:
52:d8:55:c9:f9:04:22:31:0d:67:a4:7a:05:8a:52:
c5:33:d7:20:f5:75:b9:0b:54:39:f6:09:d0:e5:b0:
d5:c9:a1:06:13:76:d7:c9:8e:c6:de:36:5a:dc:3c:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:22:62:67:28:87:48:AE:2B:97:E7:39:21:24:69:7D:09:7B:E9:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8020::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ed:83:3d:14:b9:1f:6e:7b:08:c8:91:79:da:7f:ea:3b:9a:
92:95:63:35:d9:82:49:73:03:e7:63:2b:d1:bc:55:9a:81:3e:
d7:24:8e:d6:64:b5:a4:31:e6:08:c2:ea:73:81:03:d1:4b:6c:
d7:0c:12:0d:34:ba:be:6e:ea:f3:1d:b4:db:c0:76:96:91:4e:
05:b2:a7:7d:d2:d4:9c:ec:c7:45:91:b9:da:44:3a:2f:92:95:
77:ba:a4:38:a4:de:d7:d0:a9:01:43:af:64:84:a5:5a:80:b7:
85:23:82:a3:de:d5:54:35:57:3f:35:52:5f:58:ba:c5:07:f7:
ff:e2:d2:c4:eb:7c:0d:ab:c5:62:99:b7:ed:4b:94:99:4a:28:
ee:d4:4e:16:1a:b4:25:60:87:da:62:8d:35:d4:36:d3:2b:ea:
81:90:96:6a:e2:a8:45:de:98:8b:01:71:ec:3c:ea:59:8c:19:
e9:e0:6f:ad:52:6d:b3:f9:85:6b:61:b3:90:e7:b1:84:73:8f:
52:3a:93:59:d7:9d:3a:f3:52:36:d0:9e:67:ad:fc:c4:81:04:
91:1b:c1:91:27:fa:a2:80:3a:19:cb:59:57:6e:e8:08:67:d2:
8e:33:a2:7f:85:ed:af:af:0e:25:77:7a:00:2d:24:32:ad:5a:
8c:d9:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:39 2026 by rpki-client