Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26edcf2c-2157-4412-a725-5f726d1db93b.roa
File: 26edcf2c-2157-4412-a725-5f726d1db93b.roa (raw, json)
Hash identifier: R3hdmhb244XNRN9Pv1IEzud5GYdl2//B/99dXETjsaA=
Subject key identifier: 3E:32:55:A2:4E:A1:00:FC:7C:B5:24:CF:DE:47:BE:8F:18:34:6D:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16D3B34CE7162708DE5DD5784F52F6E431AEF3F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26edcf2c-2157-4412-a725-5f726d1db93b.roa
Signing time: Fri 09 Oct 2026 01:20:06 +0000
ROA not before: Fri 09 Oct 2026 01:20:06 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d3:b3:4c:e7:16:27:08:de:5d:d5:78:4f:52:f6:e4:31:ae:f3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:06 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=9e09c84dbef6eb0e46060651ebdc39d04c1d1505f07d4f90a70044705b289ddb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:29:ac:1e:4c:f0:49:f2:ec:c5:c4:95:69:
aa:77:78:4a:7f:67:a0:27:fb:10:ce:1b:5d:ef:ba:
17:f6:da:c8:ba:4f:9a:cf:c0:bd:9f:52:4d:7c:bc:
ea:cb:2a:d1:ff:63:82:b7:09:c4:98:d4:62:73:f5:
f2:b0:b6:61:2d:87:41:23:a5:08:56:dd:fe:bd:8a:
e7:8d:d5:49:8d:ec:e8:a4:b3:2b:e9:53:e8:f2:11:
83:99:18:a7:15:0e:93:a0:89:d5:25:37:84:cf:76:
e5:1c:ab:d3:8e:24:f2:47:39:2c:45:9b:aa:ce:d7:
44:5a:c6:41:e1:8c:3e:8c:fc:91:9f:ac:39:eb:d6:
32:21:97:c8:29:e8:04:66:1a:5a:06:00:33:08:8a:
1c:70:f6:65:6c:ed:72:33:6e:a7:e5:2e:4f:59:2f:
3e:4e:6c:04:39:ce:4c:81:94:28:52:c7:30:3f:48:
b0:23:66:b2:c0:28:2a:c1:ad:06:b0:65:56:7f:33:
3c:a9:fa:9a:e4:56:77:0d:0a:90:04:f6:ae:77:3f:
59:ba:f9:df:70:e9:f1:f1:ed:da:ab:3f:b0:69:03:
7b:6a:1b:6a:ce:a7:2e:b0:e9:61:54:4a:34:c0:9c:
da:0e:ac:fc:ab:55:72:03:25:6c:8d:c1:59:40:c8:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:32:55:A2:4E:A1:00:FC:7C:B5:24:CF:DE:47:BE:8F:18:34:6D:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26edcf2c-2157-4412-a725-5f726d1db93b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
10:23:36:88:e8:48:11:c8:6c:df:c1:24:70:8a:74:d7:b6:8f:
f7:7b:60:7b:11:48:fc:1a:aa:86:9f:13:64:ca:da:07:d1:6d:
fc:c8:db:e0:d3:3b:60:cc:35:65:d1:79:71:d1:96:59:5c:0c:
4f:17:4b:3d:ac:d3:d9:14:ca:a6:d9:5b:2f:5d:94:a8:e6:2e:
0c:af:34:6c:d3:b4:94:b9:a2:ef:09:3a:ab:c6:21:c5:8d:bd:
7e:a8:e2:75:31:f7:bc:3c:bc:f2:f9:51:d7:7e:07:f4:5e:24:
a5:0d:78:46:fb:5a:ed:8d:2c:dd:09:86:24:0e:eb:58:11:b3:
3f:0c:42:6a:05:11:85:1d:99:f5:52:11:83:9a:eb:25:61:1c:
06:97:0d:0e:52:95:1d:0b:9b:94:5a:43:75:57:5d:23:52:13:
fd:56:b7:0f:ba:26:b6:e3:1f:9a:9f:46:15:49:de:9e:2b:d0:
31:f6:7a:b0:c6:cf:3b:02:fd:c8:22:10:e8:a3:21:fb:46:1c:
6c:e8:6e:1b:16:59:a1:2e:b1:2c:d0:9d:31:ad:1b:89:c1:2f:
64:85:68:82:86:36:d7:f3:a2:57:7a:fd:08:17:1b:c4:89:7d:
e7:f2:29:27:42:22:1e:5e:7e:70:bd:d7:bb:33:64:d6:0e:38:
c8:5f:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:20 2026 by rpki-client