Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/182e091e-259f-44bd-bb67-c5e36fa6958b.roa
File: 182e091e-259f-44bd-bb67-c5e36fa6958b.roa (raw, json)
Hash identifier: YxCibgATRhHN03HBW3dRSmtf7YrZdkfafDpqEim4F2A=
Subject key identifier: 17:E2:F7:A7:34:A3:F8:9E:BA:15:71:8A:DC:8C:A2:FE:50:D8:D2:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3379C45C0CF526713EC0386968DD7F658CF17338
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/182e091e-259f-44bd-bb67-c5e36fa6958b.roa
Signing time: Mon 26 Oct 2026 05:10:54 +0000
ROA not before: Mon 26 Oct 2026 05:10:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:79:c4:5c:0c:f5:26:71:3e:c0:38:69:68:dd:7f:65:8c:f1:73:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c56a262375751246129c811abe5f26cf2c02305b5833d18cb32c68c9781b1fa7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:62:15:bd:78:e5:f8:67:ec:2c:02:7f:58:
3a:38:88:58:15:e5:f3:16:5a:eb:60:4c:d4:f2:52:
4e:33:69:55:94:ff:fa:da:ad:95:f5:bd:8e:75:ec:
4b:6f:4e:1b:c9:bd:6c:1e:96:ba:c3:cf:ad:2f:b0:
e8:c7:fc:ee:45:d3:f5:c7:da:0b:5f:51:9a:34:ab:
f8:8e:28:3e:97:57:41:34:ac:05:f9:10:74:ef:a7:
d6:df:28:3e:5b:7c:ce:08:a4:9c:cd:0c:03:12:7d:
5d:a8:15:f6:8e:32:b8:5f:f1:57:32:be:47:15:f8:
44:0d:27:89:82:be:e5:a6:2d:8c:55:5a:3c:57:09:
69:49:9c:a6:12:96:0c:58:b2:0e:9f:dc:cb:24:9d:
26:43:a7:25:2f:bc:d5:8b:aa:10:05:14:b3:1b:2c:
ff:3c:ac:35:9b:1a:19:6e:86:c0:86:9c:ba:aa:31:
42:9c:90:2a:a7:72:a6:df:d8:a0:23:50:e5:04:42:
fc:ee:89:a1:34:99:89:b4:00:26:f4:0c:d1:f2:5e:
f7:d6:10:97:ec:2c:2c:97:46:08:53:f6:86:68:b2:
3d:4c:37:66:89:f7:cf:5f:73:96:57:01:f4:51:28:
ba:ce:86:10:27:de:ee:d0:0c:78:64:fc:31:67:52:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:F7:A7:34:A3:F8:9E:BA:15:71:8A:DC:8C:A2:FE:50:D8:D2:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/182e091e-259f-44bd-bb67-c5e36fa6958b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:400::/38
Signature Algorithm: sha256WithRSAEncryption
ad:42:54:80:5f:74:e5:b0:4b:14:19:f6:9b:52:e2:2a:89:e9:
a1:41:bc:37:28:c2:6a:e6:c4:5d:82:2d:d8:35:dc:66:b1:2a:
2b:a9:bb:70:a2:a7:1f:d3:c9:9d:ec:f0:54:2c:f3:bd:ee:37:
a7:26:b2:cc:a6:78:b9:24:1a:96:d9:fa:07:16:da:a2:c2:b2:
9c:85:ec:94:8c:70:4f:7e:c0:6f:7f:11:48:5e:e7:51:f2:08:
d2:2d:bb:bc:ef:00:ea:b5:c5:cc:86:6f:2b:ce:dc:83:42:89:
be:e4:9f:d2:68:b5:5d:58:e8:87:f2:2b:ae:c4:79:5c:13:3f:
67:9f:6e:c9:e0:b9:10:81:70:97:5c:4b:6d:3c:a5:4e:de:5b:
0f:3b:f2:e1:4e:5b:55:c8:4d:da:fe:6e:13:7f:4c:7e:f6:52:
72:14:ca:b0:e4:8d:b4:b3:14:21:ca:7f:fc:03:01:b8:59:c9:
3e:0a:9a:6a:3c:7e:e0:93:24:41:18:fa:24:e1:32:ed:29:7a:
26:06:f3:ff:a4:5f:62:de:f2:90:1a:79:0c:36:d6:cf:56:f3:
39:1f:1b:af:75:72:d3:30:90:48:72:74:38:e9:75:8e:19:98:
9c:ed:66:28:72:d4:dc:1a:16:88:2c:88:d3:86:65:a8:5e:4e:
8c:2f:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:11 2026 by rpki-client