Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: A8iSSU+TUaBC7nnmLidqig4EAa1EG7G06L7p4uruW4k=
Subject key identifier: 7E:E4:21:A7:C2:69:9F:4E:4B:D8:87:83:39:F0:81:F6:2B:A2:8B:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2791F88A57D963725892BDADFF38A0647F53779A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Mon 26 Oct 2026 05:31:06 +0000
ROA not before: Mon 26 Oct 2026 05:31:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:91:f8:8a:57:d9:63:72:58:92:bd:ad:ff:38:a0:64:7f:53:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=83b26f4abda062f826aef24e60840bd6ff6bf86ff610ef9e6bc4d1d06b80a424, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:e5:56:27:af:4d:4d:61:90:bc:b6:48:01:
96:c1:89:1d:00:6c:ee:de:26:96:af:05:f9:60:83:
a6:42:ce:28:eb:f8:67:ee:dd:6e:f0:02:f5:bb:2b:
4c:26:bd:52:7e:4a:bc:15:8c:14:a1:5b:35:13:00:
a3:de:ba:77:ba:c1:48:54:45:4b:e2:c4:82:79:b1:
21:fc:dd:37:23:0d:0c:4d:02:1f:df:39:79:94:c5:
48:29:7f:94:0a:19:07:3f:38:bb:79:42:51:2c:fe:
bc:e2:bd:4c:43:f3:69:3b:c9:b5:35:18:be:a8:e7:
41:77:67:80:c6:5d:e5:75:1e:c7:67:a3:12:99:74:
a9:ab:da:08:7d:ed:45:11:66:59:5d:cd:27:5b:8c:
f3:1b:81:d3:59:76:89:55:4b:b1:ba:7d:dd:25:fb:
c3:ae:53:d7:7f:99:10:d6:e6:44:51:f5:93:db:43:
9e:af:9f:b8:17:17:67:b1:fb:e9:ec:c3:fc:7d:3e:
20:41:f6:94:1a:68:ce:d6:b6:de:89:3c:49:3c:50:
45:db:bc:d2:d4:64:d1:1f:f4:09:c4:0c:3f:44:96:
27:0c:0f:ea:48:3b:68:6c:f3:1b:68:2b:cc:e6:4f:
39:00:8c:53:b4:6d:82:80:cb:d8:b5:29:b3:02:9f:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:21:A7:C2:69:9F:4E:4B:D8:87:83:39:F0:81:F6:2B:A2:8B:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:c6:79:1f:36:4b:f2:f5:6b:cd:ad:20:00:55:a6:3e:28:2a:
fc:20:f8:6d:f6:96:24:ff:69:6b:e3:62:09:ee:c5:58:a6:1c:
48:5f:1a:12:d7:33:68:b8:fb:af:12:ed:e3:6b:8d:1a:06:b0:
95:66:c9:76:41:a6:0b:29:53:f9:66:c4:8a:86:1e:ba:ac:1b:
5e:4f:fc:0e:f3:c3:f8:94:80:36:30:e2:43:d6:84:4c:09:3b:
c7:14:39:a7:e6:16:1b:e8:4e:77:57:c0:70:df:ba:c9:a5:3e:
3f:d4:84:08:a7:98:b8:c9:6d:4b:db:4e:01:cb:51:49:fc:b4:
7b:0e:45:e7:13:5b:c7:00:6b:cb:4a:ff:f4:a8:51:c1:c2:de:
f4:42:ee:89:27:2f:f3:2b:b5:0a:bb:5b:23:ae:54:24:51:b5:
8a:39:c4:46:ac:00:6f:3b:b7:14:74:32:ce:5e:1c:a5:9e:93:
cf:c9:d4:2a:e9:16:4a:c2:7e:bd:f5:e1:61:9c:49:4a:14:46:
70:d6:d2:0a:5a:f4:9e:f8:74:bb:ae:e6:fe:ff:f2:84:d7:c9:
b7:32:da:f5:b6:e4:9f:60:fb:50:6f:11:9c:3e:77:dd:fc:a6:
72:e8:67:fe:c5:f2:93:8c:39:2e:1c:35:d8:4b:48:a4:81:52:
db:14:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:49 2026 by rpki-client