Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
File: 2678e5d7-5995-4791-9318-f087e83654a9.roa (raw, json)
Hash identifier: Eocf9OqUzrNWzTaxI6CDHguTIYnLg+Q5+PMPn2+mQYk=
Subject key identifier: 83:F2:ED:4F:7F:DF:17:92:93:F5:6B:2F:4B:DF:B4:1E:05:45:DC:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FA2306CEB1C7DFD3942D0CF5A1FE6A7F60BC75B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
Signing time: Fri 23 Oct 2026 01:50:10 +0000
ROA not before: Fri 23 Oct 2026 01:50:10 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a2:30:6c:eb:1c:7d:fd:39:42:d0:cf:5a:1f:e6:a7:f6:0b:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:10 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=67678ef8e51b174d808689dd84ead46b97b132900fd86a7c3ef0f3e6fd5daa53, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:39:30:12:df:8c:a0:23:57:d5:2e:d8:d0:
56:76:27:10:1d:76:dc:d1:33:c0:62:c8:fd:05:6a:
4d:cd:71:5d:a3:cb:5b:3e:56:24:fb:27:90:92:5f:
60:3e:f7:ea:05:b1:fd:a6:2d:aa:d5:56:42:27:11:
87:c4:bc:64:a8:dc:b4:7a:e7:33:62:3c:44:b7:aa:
58:01:02:b9:c9:3f:20:f7:44:8e:57:8d:1e:ca:73:
0b:d2:d2:8b:cd:0a:ab:cd:07:a2:10:81:db:0e:0d:
4b:d3:f4:a5:6e:df:9e:87:7a:32:55:37:a9:66:ee:
b8:a9:b1:c1:3f:0c:f9:d6:3f:f1:fe:05:47:74:69:
d6:bf:28:98:c4:86:6c:b0:3b:3e:56:ed:8d:fd:b6:
50:d6:9f:bd:60:5c:db:b2:16:70:f4:9e:39:79:2d:
32:07:7a:1f:b5:9d:3d:b7:51:ba:d6:5f:85:1c:b5:
7c:64:90:4e:68:2d:5b:d6:a8:b5:f3:0f:35:6c:00:
28:b6:d1:4b:09:7b:cc:af:ea:af:d0:26:d4:57:aa:
ee:ee:90:31:7a:82:aa:89:ac:55:c0:c0:f1:0c:ef:
4e:42:88:6f:f7:e3:83:ab:11:8f:f2:90:fb:76:12:
c0:6e:bc:ff:67:59:05:64:e8:06:39:be:6c:0c:99:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:ED:4F:7F:DF:17:92:93:F5:6B:2F:4B:DF:B4:1E:05:45:DC:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:e000::/48
Signature Algorithm: sha256WithRSAEncryption
97:d8:4d:ca:c3:c1:e8:f5:10:6b:76:69:6d:99:e6:8f:31:f4:
1b:1a:f4:86:88:9d:ec:de:76:a7:7f:46:26:ed:14:48:6f:f4:
bd:c7:c2:46:f9:ba:bf:06:d2:81:15:87:ed:0d:4e:07:4d:50:
40:aa:85:bf:ff:82:fc:c1:db:66:43:5f:4d:3e:d7:26:ab:a6:
84:48:14:21:19:7e:15:01:dd:a2:27:19:ac:07:c2:df:aa:50:
e5:4b:2f:46:af:a9:95:70:5d:5c:33:3b:0a:75:0f:37:7a:c5:
98:f4:bb:c0:46:d1:0c:21:d5:45:d2:a2:b5:f4:a7:bf:fa:79:
3a:07:2d:da:94:d5:5f:44:cd:33:31:4c:f4:29:b6:29:17:99:
8a:28:49:9e:14:ae:ed:7f:02:e7:80:4a:9c:81:db:a2:bb:28:
39:b6:eb:90:f4:d4:c4:4e:88:ab:31:1b:8f:6f:e2:a4:80:a2:
f1:42:70:82:5b:04:9d:72:42:48:fe:60:f1:64:87:40:2a:86:
38:7b:a8:32:a1:33:63:12:7f:bf:01:ba:4b:1d:3b:34:48:62:
3f:44:4d:98:39:4d:51:24:0f:47:9a:ca:11:57:b7:a3:f2:9f:
86:33:35:e6:6b:09:dc:fc:97:ab:31:44:39:ce:d6:7e:de:2b:
50:47:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:27 2026 by rpki-client