Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json)
Hash identifier: FW5xCO1Oe9ReIxjq6AHxWgwlPAKGK3jDgA11cIjxYes=
Subject key identifier: 34:AF:FB:69:B5:98:4B:3E:3A:1A:8E:53:DA:B3:3F:C7:EC:26:0E:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 43774BBCAD3EF14ABC13C62C21CD68CED993DA1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
Signing time: Mon 26 Oct 2026 04:31:08 +0000
ROA not before: Mon 26 Oct 2026 04:31:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:77:4b:bc:ad:3e:f1:4a:bc:13:c6:2c:21:cd:68:ce:d9:93:da:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=94233a9a396c4b42d0bf6216c36a5132e8f5eb63e0fc775abd34fd988b17f1c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:15:da:25:a8:70:e7:86:34:06:08:e5:34:
86:c2:1f:04:6a:3a:af:34:f6:b5:74:f4:d0:d9:11:
27:4a:a5:f9:bb:da:c6:b9:0a:92:13:b4:27:14:da:
ce:1d:f3:d4:42:bc:20:fa:b4:a6:9f:ed:c6:09:8d:
34:10:48:41:93:9b:4c:1a:05:25:ac:71:2b:1e:65:
ee:33:dd:5e:15:3d:70:2b:b1:4b:bb:5e:81:bb:50:
3a:c1:ab:82:d6:2d:7c:ee:8f:2c:5b:1a:63:76:e3:
8d:8d:1f:4d:55:b4:8a:86:8d:cd:61:01:0c:7d:ed:
e8:c5:d3:f6:59:70:f5:6a:23:e4:e9:49:cc:c5:c5:
cc:6a:38:5d:4a:80:b3:84:f2:50:f7:e9:83:47:e0:
05:72:d9:b2:90:a7:ec:7d:76:8d:a7:6a:6a:78:d4:
12:b1:e9:7f:45:d8:d8:a1:da:da:2b:fe:c5:c2:0e:
61:b8:04:74:84:01:54:e2:92:8c:66:8d:99:a2:ae:
fb:a0:52:39:c8:36:b5:19:13:08:fd:46:dd:c4:33:
fc:b0:de:de:7d:1b:41:68:57:37:19:d4:e1:b7:cc:
e5:38:bd:32:c1:a4:78:01:91:d0:53:98:44:0e:0c:
69:e7:b8:44:42:1c:f8:f9:b9:8d:c4:d3:b6:23:7f:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:FB:69:B5:98:4B:3E:3A:1A:8E:53:DA:B3:3F:C7:EC:26:0E:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:aa:a7:eb:4e:8f:71:47:35:f9:9e:29:13:cc:a1:6a:5d:83:
ff:b5:ce:44:cd:dc:b2:11:d7:58:83:d9:89:8d:6f:58:ef:3c:
99:fa:cd:23:d0:3d:08:85:88:f9:fc:94:ef:67:62:23:6e:54:
c0:31:d2:b0:91:07:51:8b:4e:54:8a:fb:3e:0e:ff:10:1a:65:
5c:90:f5:ad:2c:01:c2:da:36:54:a4:44:84:fc:f8:c5:c8:a6:
28:2d:83:99:31:bc:5a:13:ac:1c:c0:90:17:e3:9f:a5:12:29:
c7:27:45:db:aa:b1:57:2f:67:f9:31:3a:14:5d:12:34:63:a0:
c3:d6:25:a0:62:9f:40:46:5e:64:82:b2:e5:be:9a:c2:c7:d6:
78:0d:66:19:3f:79:1c:a9:36:cc:b4:a1:e2:2f:a6:7f:1b:9f:
30:62:25:75:6a:dc:10:40:6b:f5:62:eb:58:98:a6:57:11:25:
b6:65:66:65:19:5d:8b:d5:65:77:2f:55:3e:ab:e8:31:f2:8e:
06:d6:da:27:c6:0a:14:34:f4:de:2d:8d:82:08:1a:13:f3:de:
5a:45:88:11:4f:c6:b5:32:b8:bd:95:7e:e2:ab:b7:12:a2:2c:
71:80:64:2e:38:77:9f:a5:ed:64:3f:a1:14:2a:a4:b8:d6:4d:
42:b8:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:40:17 2026 by rpki-client