Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa
File: 2636a453-2dd9-4fde-9f15-753f76341841.roa (raw, json)
Hash identifier: B8DxFO5vG5matrCFFWsfuvVemfwMM7ZwWxBZho6NfWo=
Subject key identifier: CA:24:11:B6:6A:71:39:85:51:A9:26:0D:8E:8A:14:88:F5:28:18:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 088B1690D2C5B5E117BA57272579851BA1FD7774
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa
Signing time: Thu 15 Oct 2026 03:30:13 +0000
ROA not before: Thu 15 Oct 2026 03:30:13 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8b:16:90:d2:c5:b5:e1:17:ba:57:27:25:79:85:1b:a1:fd:77:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:13 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=e8e1c1061dece81e0fa82633810abe37006732bb4d803fb62a423922de3ae6a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:44:46:03:5b:b6:e5:ec:58:be:1c:7c:f0:
34:21:e7:61:a5:3f:cd:9b:6c:3b:49:74:fa:fe:b6:
0a:fc:d4:a7:1b:0a:b9:85:60:03:08:8d:62:22:e3:
2d:22:6c:89:fc:12:3e:1c:18:a6:74:b9:bc:d8:7e:
40:b1:f1:b4:41:27:1f:bd:a5:eb:7d:d1:0d:47:bf:
8a:41:7d:61:0c:9c:15:3f:6e:25:74:66:55:75:ae:
6d:14:b0:82:a6:7e:35:f4:f5:af:66:f3:9e:01:7a:
68:81:a2:94:99:a8:9f:d1:11:e8:2b:32:c8:f0:90:
ab:af:66:40:12:ba:e1:a5:47:47:1d:08:11:8b:56:
3b:60:d7:7c:1c:ee:b6:47:99:95:19:59:35:25:a6:
e5:96:4c:96:2a:8d:fa:65:6a:19:fd:98:45:3a:14:
27:d6:e6:37:90:70:b8:e3:62:10:a4:c6:e0:64:bf:
1d:f3:a3:8f:72:e0:a2:18:36:da:5a:c3:f9:78:39:
ed:a4:a0:e0:5e:d6:91:75:fc:73:a0:9a:5c:10:b2:
27:b7:c7:0b:f1:4b:ba:e6:42:1b:17:c5:70:c9:e7:
bb:73:7f:08:5b:06:40:cf:59:8d:ad:9f:00:b4:fc:
9b:cd:89:b3:68:32:1f:06:c3:64:bf:2f:2d:45:dc:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:11:B6:6A:71:39:85:51:A9:26:0D:8E:8A:14:88:F5:28:18:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a000::/40
Signature Algorithm: sha256WithRSAEncryption
89:9c:01:7a:ca:b8:6c:93:40:ec:59:4c:cb:ed:8a:c8:31:1f:
69:ef:e5:a6:e2:40:d2:1b:14:d3:e8:a2:d1:5e:03:47:cb:55:
c2:40:7b:ec:51:2a:ae:38:53:b6:ff:a8:ef:66:0a:86:e0:b7:
a7:d4:0c:89:a9:1a:d1:5c:ee:0e:f1:6c:c6:54:82:83:6c:76:
59:fc:91:c9:5a:b2:e5:b8:2b:c4:76:f9:43:c1:30:20:f7:2b:
97:ec:be:9f:1b:9a:10:df:ac:56:c6:e4:e7:de:cd:cf:fb:82:
91:88:f7:81:71:09:aa:ed:b4:9a:4b:28:1f:c0:0c:d2:2b:4b:
d6:ea:cb:20:3d:1c:89:00:17:87:a5:c7:1c:18:fb:ce:c0:e0:
0d:3b:71:3d:a6:47:cd:c8:3f:c2:76:2e:2b:9c:e2:c3:42:1c:
23:a8:67:f3:8b:fd:74:04:c8:73:a0:1f:32:0d:cc:e0:9b:a6:
86:b8:86:b3:dc:f1:33:73:36:e4:6b:47:67:bb:ea:d5:55:65:
8a:4a:9d:28:f1:4a:88:88:e9:e1:6c:9c:ab:70:cc:34:82:ad:
a8:58:50:1c:13:e5:6b:7f:83:8e:35:ac:ec:31:71:71:0a:b3:
92:da:bc:37:d0:4c:a8:26:0c:1b:fc:43:87:c1:2d:ca:e9:2e:
0a:26:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:14 2026 by rpki-client