Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ba2d063-915b-4ef5-b1b8-00d73dc8a31a.roa
File: 1ba2d063-915b-4ef5-b1b8-00d73dc8a31a.roa (raw, json)
Hash identifier: hlJK1qZ7G5wg/ePqq5F50NHavd1jOSLSozeJHkeYgyE=
Subject key identifier: B7:C8:C2:5A:02:E7:C4:83:98:3A:C4:4A:21:BD:BF:D7:34:B3:F2:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4655F9D87FE8DC4E7340019C61EE7D6EC729968F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ba2d063-915b-4ef5-b1b8-00d73dc8a31a.roa
Signing time: Sun 04 Oct 2026 00:30:52 +0000
ROA not before: Sun 04 Oct 2026 00:30:52 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:55:f9:d8:7f:e8:dc:4e:73:40:01:9c:61:ee:7d:6e:c7:29:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:52 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=c88470ea85b99ea8d61231ccbf5a154659db4e01012ef9d7e846e5b4387a5e2b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:53:e9:03:da:72:61:a9:8e:24:b0:fb:8e:
86:67:a8:4a:f1:03:db:fa:95:8e:bc:27:c6:c6:09:
07:9d:7a:44:e8:f9:22:d3:c2:1a:f0:23:94:ea:fa:
8e:f9:41:38:e0:4a:3a:a9:aa:12:9e:5a:9e:2b:c5:
e5:86:87:7f:3d:58:e6:75:ba:b1:a2:9d:a6:90:a5:
42:81:50:0e:7d:92:40:64:e2:de:8a:84:dc:bb:67:
e2:62:13:45:e3:a7:1e:f9:5b:b8:24:67:bc:2d:74:
ab:c6:56:2a:c4:4d:df:bb:30:49:b6:d4:56:2f:dc:
5e:58:76:96:85:0f:8e:ab:cf:f8:01:e4:6f:cd:67:
d5:44:fa:2c:8f:d3:53:fe:7d:00:ed:f6:12:f2:9a:
b3:8b:8e:e6:5d:2e:fd:90:fe:9c:fa:b2:d7:cc:eb:
0d:1a:23:77:94:b7:31:49:51:51:07:20:fa:05:3c:
51:ca:6b:95:cc:06:bf:07:ae:65:52:fc:c8:ed:22:
c0:ce:61:43:eb:63:b6:59:26:be:59:b2:a8:bc:6e:
8e:f0:2c:22:5b:34:21:07:08:24:c2:5d:7c:d0:f1:
f8:18:7d:09:61:18:b2:26:3a:e5:6a:93:a4:93:21:
0c:39:71:06:a9:1b:d9:05:cc:d3:d5:ee:d3:f5:95:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:C2:5A:02:E7:C4:83:98:3A:C4:4A:21:BD:BF:D7:34:B3:F2:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ba2d063-915b-4ef5-b1b8-00d73dc8a31a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:68:73:60:dd:96:5e:f0:92:b4:c5:b6:14:c6:2a:c9:ee:c9:
e4:c8:ce:dd:07:46:4f:ff:6f:54:3f:ef:88:3c:ce:26:50:7f:
e8:b3:13:25:62:95:73:c5:f2:c5:f6:49:11:05:1a:23:63:fd:
4d:a4:da:e8:ed:1c:a7:6e:e7:d6:dd:ca:06:da:63:6e:ca:53:
be:43:c1:a6:7c:9b:3c:91:00:2a:8f:55:46:f8:1e:b3:4e:0c:
65:09:5e:6a:1a:2f:c7:be:c6:1d:40:34:e1:7e:e2:9f:ad:46:
4c:ba:ed:9d:b8:4f:25:87:c5:65:b8:d4:94:b8:8e:46:c4:80:
38:db:a1:ac:e4:d2:29:9a:9d:cf:e9:93:b6:7d:f7:9c:02:44:
06:4a:02:d0:05:c6:b5:4e:55:7d:04:b9:0c:dc:a8:5d:43:cd:
eb:69:f9:08:23:b1:75:2f:5a:56:ad:dc:c4:3d:59:87:5e:d1:
8d:72:6b:d9:0f:c9:e9:be:82:4f:02:35:94:6c:2d:b8:dd:e9:
ad:51:44:76:0c:36:27:12:85:be:6a:9b:82:c2:51:d0:eb:67:
43:5c:17:0f:b5:29:53:7b:77:a0:26:85:1e:45:d8:ed:19:d0:
d5:8a:2a:9d:9e:22:0d:1a:24:c5:c0:52:69:43:39:97:a9:35:
79:90:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:42 2026 by rpki-client