Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e41fe22-1acf-4f67-8baf-dcfe52d1ab17.roa
File: 1e41fe22-1acf-4f67-8baf-dcfe52d1ab17.roa (raw, json)
Hash identifier: DSGatLMaNdgv+gbfetyZoJjuG29cjrQ9917mdXCF6Uc=
Subject key identifier: 2F:86:D6:ED:C6:8D:07:79:71:44:A1:8B:A6:F8:EF:C3:D5:E0:32:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B8A31D7ED7BDAEA2E4CE674A3C7465E2D05C275
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e41fe22-1acf-4f67-8baf-dcfe52d1ab17.roa
Signing time: Thu 29 Oct 2026 00:50:06 +0000
ROA not before: Thu 29 Oct 2026 00:50:06 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8a:31:d7:ed:7b:da:ea:2e:4c:e6:74:a3:c7:46:5e:2d:05:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 00:50:06 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=750ed40523402d84180c60f897bf6238900948f13dd66e2f17864015b0ab4e2b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:75:a4:83:6a:e4:f1:c3:63:6f:c4:c1:82:
02:30:1d:4c:ab:05:83:a6:77:8d:c7:46:31:ba:89:
6a:4f:be:c5:eb:8b:9a:67:d3:85:e0:a3:bd:ec:39:
e9:d5:98:07:ca:db:7c:c8:fd:5e:b7:0d:ec:c3:14:
51:3e:a9:88:ea:e7:75:01:8f:cb:88:35:2c:a9:c1:
ff:50:65:ed:4f:a6:b5:79:9d:ad:eb:12:40:b8:34:
b7:9e:ef:41:be:b0:f4:6b:70:c0:65:0d:4a:4d:4a:
bb:c1:3b:6c:fb:90:ed:85:73:93:21:cc:87:0f:f2:
68:4a:b1:91:15:53:67:8a:9b:65:bc:a0:b9:2e:0c:
69:34:9f:98:0b:74:4d:5e:19:71:7f:4f:f4:ef:4e:
ec:7f:36:ea:d9:18:15:37:7d:4f:d6:a0:2f:5e:3e:
94:e3:77:00:44:62:26:c7:7f:80:de:56:71:16:45:
93:48:2c:dd:df:21:46:54:b3:7d:fe:98:3f:8b:44:
9a:35:e5:38:68:48:e1:d7:eb:ef:b8:99:60:1c:65:
7e:10:17:f5:49:4f:3e:8b:88:08:b9:08:58:98:18:
7e:a1:42:dd:22:e2:06:36:43:24:68:76:cc:58:12:
d1:dc:f2:97:75:03:02:b7:76:21:2f:80:6f:51:eb:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:D6:ED:C6:8D:07:79:71:44:A1:8B:A6:F8:EF:C3:D5:E0:32:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e41fe22-1acf-4f67-8baf-dcfe52d1ab17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a080::/48
Signature Algorithm: sha256WithRSAEncryption
9c:aa:a5:ff:fe:25:78:ce:58:0d:d3:3c:01:69:c2:65:79:53:
73:96:46:3b:0f:c6:e5:30:0f:a3:37:da:b1:35:93:36:d0:d2:
3b:e0:63:c6:31:05:80:46:e7:64:10:1a:a5:60:3b:fa:65:cc:
7a:5d:b7:b2:fa:9d:06:ee:eb:ad:d0:a1:0e:8a:c6:87:eb:11:
b4:87:b9:56:0b:c5:5b:de:28:54:96:85:df:eb:a7:f6:bd:13:
a5:27:cc:24:51:54:92:b5:e2:e7:e4:68:6c:a4:29:1c:5b:c9:
f8:3e:73:90:56:f6:ee:7d:61:57:1d:fd:12:e6:b3:1e:be:31:
9c:b5:6d:c5:65:59:4a:7f:ef:2e:8c:10:00:1f:fe:63:d1:37:
9e:5d:88:e6:fc:98:dd:e4:4f:dd:b0:3d:8e:73:6e:41:12:8c:
0f:ae:8c:4a:5c:38:5f:b7:4a:f3:91:64:60:d5:1e:6a:95:16:
fc:55:a9:28:14:bc:b5:20:b3:76:ea:fc:1e:43:fd:82:b0:55:
75:86:ff:6e:c6:c4:fd:5e:f6:c0:2e:a5:41:b0:34:f8:71:ce:
48:6c:97:07:98:19:18:68:cc:53:90:5c:7a:a7:fe:8f:91:6e:
bc:c9:8d:9d:57:91:ec:05:50:36:09:f0:b2:0d:32:d7:d1:34:
b1:61:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:03 2026 by rpki-client