Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fe9c713-6ad8-4458-bc10-d02ce3425f8e.roa
File: 1fe9c713-6ad8-4458-bc10-d02ce3425f8e.roa (raw, json)
Hash identifier: 9LRfcTERg4w97heZ9mUMMGaBpNbj7luMwWA6RQxxkoA=
Subject key identifier: E2:C3:B3:FB:98:1D:E5:5D:44:8B:F9:B9:B1:59:00:38:5E:7E:30:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5942BE6CAB6A162C8DB51974A923B984A68BE14A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fe9c713-6ad8-4458-bc10-d02ce3425f8e.roa
Signing time: Thu 29 Oct 2026 01:03:01 +0000
ROA not before: Thu 29 Oct 2026 01:03:01 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:42:be:6c:ab:6a:16:2c:8d:b5:19:74:a9:23:b9:84:a6:8b:e1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:03:01 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=efe280c1ad5ad4c9e9fdaf9ba237c690bf7862a7e8280bf7694d17aa5982292b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:f4:b7:12:36:1c:a7:5c:aa:ef:40:6d:d8:
9f:a4:7a:06:cb:4a:bb:23:60:0d:9d:8f:59:81:82:
f6:2b:52:fb:ac:0f:0f:a4:b0:49:e5:7b:c4:2f:39:
76:48:32:4a:f8:5c:09:62:41:40:01:39:07:0d:5e:
2e:2c:ea:fe:4a:7a:88:a5:c3:98:f8:ab:db:4b:bd:
ec:2c:f8:cc:aa:bf:4d:35:07:ea:2b:d7:27:2f:bf:
88:b2:9b:1d:73:73:f6:90:5e:ea:3c:e3:ab:24:be:
76:aa:68:78:a3:bd:5a:3e:9f:03:17:0d:f1:25:e1:
f5:2d:ad:8a:98:4f:26:ff:1a:5c:54:e6:d9:7e:31:
6e:4c:11:d4:9a:af:2c:88:45:c4:e7:94:9e:8c:79:
06:21:15:14:bd:4f:5a:a9:14:02:53:96:c5:8c:a9:
08:55:29:ad:b1:a0:bc:8c:05:67:a8:94:f6:ab:9e:
af:3f:39:b1:77:c7:04:95:80:34:d7:f5:1a:27:d5:
61:6e:18:5b:db:9f:e6:5f:49:e4:1e:a5:7d:bd:92:
c4:23:d7:8a:ee:e7:5a:b5:c7:7a:fb:1e:02:ba:04:
76:a1:21:e2:27:a9:24:38:a8:fd:b4:09:20:9e:94:
77:ae:5e:48:99:d2:e5:97:50:9a:d7:78:85:5a:ba:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:B3:FB:98:1D:E5:5D:44:8B:F9:B9:B1:59:00:38:5E:7E:30:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fe9c713-6ad8-4458-bc10-d02ce3425f8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
1f:fe:a3:1b:2b:a9:72:bb:1d:6e:f0:85:27:50:96:7c:56:e5:
2c:75:a6:a1:b8:d3:18:ea:05:d1:33:bf:36:8e:ad:85:e4:89:
dd:8e:01:dd:df:e1:ee:79:cf:0e:e1:65:b3:05:f3:0a:ad:fe:
75:ea:89:d2:3f:ef:50:c2:44:fb:07:77:24:bd:03:37:3d:b0:
90:85:d4:d2:bd:a1:94:eb:82:62:59:2e:3a:6d:64:27:11:fc:
a6:df:93:7c:17:fb:90:3a:00:3e:f3:db:ef:3a:80:e8:5e:2c:
b1:42:10:1e:bc:93:63:7c:d2:93:51:d6:7a:57:ac:26:2f:45:
b9:de:2c:41:4d:12:a6:8f:4f:1c:38:cb:47:6d:93:90:0e:e5:
26:7f:1e:ac:5f:ce:f1:b3:21:0d:4e:32:0b:c0:23:4d:b2:9a:
e6:e8:15:f9:41:ea:39:59:7a:48:32:04:9f:27:50:8f:46:88:
e2:7b:aa:79:db:21:99:55:f4:d6:b3:55:93:c2:fc:dc:77:86:
7e:61:b2:b3:6c:2f:34:31:e2:c7:66:2f:36:85:6d:9c:d9:7c:
43:59:11:26:7a:8a:e0:2e:81:33:20:8e:b8:2c:f8:69:1e:4e:
c0:cf:de:ed:df:09:04:df:79:d8:26:dc:2e:a1:b7:3d:2b:51:
c5:a3:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:49:02 2026 by rpki-client