Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa
File: 21442095-1d11-4516-867c-53ad149e6c07.roa (raw, json)
Hash identifier: 4V7x/IPk4VlDm3plokCvgA8AnopVvAz7ouJ85PJS4VM=
Subject key identifier: 76:CC:70:75:EC:A5:FF:EF:D4:88:07:1E:C9:C0:4F:CE:00:A9:4A:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40869613F2BF0948DC98299DEBFFA076334672EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa
Signing time: Thu 22 Oct 2026 03:50:06 +0000
ROA not before: Thu 22 Oct 2026 03:50:06 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:86:96:13:f2:bf:09:48:dc:98:29:9d:eb:ff:a0:76:33:46:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:06 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=1d32b2428d45199256418536c947f72982adfdd5dbb981b9f5e6503acac53cf5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:3d:33:8a:82:7d:5e:71:e5:c1:47:50:72:
81:c3:95:d1:0b:1d:cc:45:16:74:12:23:4b:67:a4:
1c:bc:43:d9:ca:18:e5:7a:4c:02:21:84:1c:3e:76:
20:fc:c7:b8:57:92:f5:d3:6b:f0:ca:4a:b2:a4:22:
79:06:9d:f2:3b:c1:50:e7:c4:ff:34:f3:d9:0c:49:
95:bd:17:f7:41:40:3d:03:92:9b:86:61:96:1f:eb:
33:cc:ff:87:65:74:91:9f:3f:9c:57:ec:22:44:74:
df:16:9f:98:75:22:b1:98:7b:43:e6:cf:84:b9:58:
be:32:d8:78:21:03:91:6c:e5:8d:c7:4a:3d:3a:d7:
51:fe:b0:2e:30:82:b8:b1:d3:fb:fd:d4:0c:72:34:
7a:75:5c:53:65:71:2a:c2:81:76:72:8c:fe:31:9b:
37:20:f9:c7:76:75:a9:71:3c:0b:c7:e3:c5:fa:2a:
44:23:8c:34:6e:0d:f4:2f:0a:e3:56:83:3f:0c:d3:
b9:09:f4:6a:e8:e6:d9:7b:98:4f:37:a6:28:90:c3:
ae:26:21:bb:41:c9:53:b3:27:69:01:16:a8:ad:a2:
31:6a:ca:d1:ca:0d:ef:c6:11:7a:33:a0:56:48:94:
4e:14:f2:cc:a8:fb:09:91:c5:26:2b:56:91:7f:14:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:70:75:EC:A5:FF:EF:D4:88:07:1E:C9:C0:4F:CE:00:A9:4A:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:800::/40
Signature Algorithm: sha256WithRSAEncryption
82:55:0a:ef:f6:4b:7a:1a:c0:6f:56:16:c5:8a:71:77:0f:c4:
a9:de:7e:4f:76:52:a0:91:64:1b:d2:99:50:9d:02:83:50:cc:
e1:20:e0:f0:db:1d:21:d3:da:15:93:0b:ee:f0:d7:df:4d:30:
8e:85:0e:0a:da:81:7b:f7:0e:6b:b4:cc:73:71:d8:91:7e:af:
97:53:7f:7f:81:e6:7c:b9:30:56:c3:14:bc:59:94:e0:68:90:
9f:c6:00:01:5e:c0:b7:2f:b4:4d:c3:a3:d7:f5:86:a3:a7:81:
f9:0d:e5:82:e7:cf:f0:b3:2b:ae:f6:04:c0:72:3a:60:bc:6c:
e1:22:6d:83:46:e8:83:fe:ef:03:20:a1:cf:c6:37:2e:e8:4d:
a9:23:96:aa:94:ef:d9:ce:f1:da:16:1b:86:79:30:7f:27:5a:
6a:0c:c9:ca:dc:be:9d:f1:90:fe:3a:03:56:75:00:17:fe:26:
e7:0f:41:81:e4:f5:1b:f2:92:42:e6:41:3b:ab:bc:08:c4:c4:
f5:2c:f1:34:4c:94:26:0a:77:62:cb:c3:79:b9:ed:d2:4f:94:
f1:41:1f:0d:37:23:f5:dc:6a:48:b4:00:05:89:c3:0b:bd:53:
21:27:1e:31:e7:80:1d:59:4a:d0:e9:86:e6:b8:ab:a2:85:2c:
a7:5e:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:07 2026 by rpki-client