Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ec007f6-6684-43b6-8751-2e5b258a98b3.roa
File: 1ec007f6-6684-43b6-8751-2e5b258a98b3.roa (raw, json)
Hash identifier: wp8fxD+vhGAd8Chg4+yJT7rGbsmd1MwIwm34tw381ds=
Subject key identifier: 27:05:C0:D8:A9:BE:54:6F:C4:4B:75:46:2A:35:35:A4:95:3D:B6:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 790C2B1AA6FA4E9DD34C33AF8066198B2A0DD57C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ec007f6-6684-43b6-8751-2e5b258a98b3.roa
Signing time: Mon 26 Oct 2026 04:40:19 +0000
ROA not before: Mon 26 Oct 2026 04:40:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0c:2b:1a:a6:fa:4e:9d:d3:4c:33:af:80:66:19:8b:2a:0d:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e5483735345ab2104f96531e650832bc55b6e2f0ab77551e962fa5666c27cb08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:c7:1b:14:3e:66:98:90:78:17:b5:3c:56:
86:c8:72:91:f9:4e:36:39:41:89:5f:3a:bb:b5:3e:
d4:08:6b:a4:2c:26:8c:21:54:46:a8:2a:ac:93:fc:
a4:db:83:ad:7f:43:e5:20:24:e4:74:c9:20:4f:e6:
7b:70:37:a2:0e:24:69:19:95:22:af:c7:b9:3e:a1:
5a:ed:12:40:c2:85:b9:8a:d9:6f:19:46:51:45:4e:
c2:48:05:fd:80:19:fe:77:bb:a8:c8:11:ea:3a:65:
26:13:c8:4c:20:70:a6:c3:18:63:a3:c3:f6:9e:77:
ba:b5:4b:29:42:75:93:2b:e3:02:08:da:2d:e5:13:
2c:ff:cb:ca:eb:2d:28:17:04:87:37:b3:9d:a4:52:
b6:6f:f1:7d:b3:e4:28:a6:de:ef:7c:3c:65:1d:4d:
d4:e1:ff:ab:57:12:7f:13:80:ea:4e:b5:81:ab:d5:
4c:71:31:9c:c9:ef:3a:97:08:82:5c:56:32:34:56:
6a:13:bb:cd:56:de:82:bb:45:41:c9:cd:8d:9f:30:
73:f5:6c:7f:f4:9d:db:6a:5b:34:4d:32:eb:58:94:
76:dd:f2:04:96:82:a5:7b:c1:31:16:87:7e:aa:0b:
74:66:43:09:d6:dd:4a:26:88:69:a4:a6:2c:c0:34:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:C0:D8:A9:BE:54:6F:C4:4B:75:46:2A:35:35:A4:95:3D:B6:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ec007f6-6684-43b6-8751-2e5b258a98b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:2000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:2e:7e:b9:88:96:5f:92:3f:92:a4:fa:b8:d0:12:bd:85:77:
b5:3b:81:50:8a:00:9b:f2:d2:ca:ff:b2:0e:ff:e3:8c:53:f4:
5e:70:f8:23:f7:b7:a5:35:6d:84:17:2a:b5:be:71:85:f5:88:
b2:ea:b6:58:44:c6:88:f3:d3:5d:a8:17:5e:97:a5:7f:1b:6a:
10:2f:12:a3:e6:25:98:1b:ac:80:4d:fa:22:2a:a9:fc:b9:66:
b1:65:c9:ed:1f:32:57:18:be:8a:69:62:98:1a:6a:1a:cb:0f:
f8:95:b9:34:55:b2:db:81:c5:b5:69:8a:12:42:bc:13:a0:98:
d0:14:61:e0:a6:7b:65:65:0a:16:62:13:05:ca:cf:9f:8e:23:
37:26:08:f8:58:5f:2d:d0:d6:a3:87:46:f2:06:5f:5d:1f:5c:
47:c5:05:0f:c0:9c:5e:f6:e2:88:f5:00:1e:87:63:5a:86:85:
f9:ba:8f:db:2d:b0:96:66:2f:08:cf:c6:3d:ff:ce:4d:34:ca:
ea:3c:54:f0:8b:15:57:0c:d6:21:f4:dc:d1:05:cb:9b:53:03:
f2:76:a1:cd:d6:19:9e:a1:9e:38:a3:6a:c2:51:72:c9:0f:66:
43:6c:09:6c:f1:cf:2e:37:22:8d:4a:b4:c2:42:18:d0:99:ef:
9f:0f:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:35 2026 by rpki-client