Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
File: 27140a0d-612c-4da4-a60a-55c28faff6fe.roa (raw, json)
Hash identifier: HFn98JviMYBOASMg6sjzNdrmn9i+pq0mHfqoap9U6tU=
Subject key identifier: F7:2C:1F:92:63:B9:B5:BB:65:87:50:41:CA:84:A4:56:9C:D9:DD:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 486F4EF3D652EDD1A73E952A1998162D11C0FCE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
Signing time: Mon 26 Oct 2026 04:30:10 +0000
ROA not before: Mon 26 Oct 2026 04:30:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6f:4e:f3:d6:52:ed:d1:a7:3e:95:2a:19:98:16:2d:11:c0:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1370ace63319465cf701a1546bed2373e4b7c8e2264febc53dcc28ad3b8ada3e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:b8:bb:67:a6:98:f4:dc:eb:f7:4f:ab:ef:
1e:43:df:b4:25:14:6f:17:f6:38:4b:f2:16:66:39:
fc:75:d2:99:f8:8b:99:24:9c:7e:1e:52:83:fe:39:
2b:c5:99:90:17:ed:ff:36:7f:18:50:3a:97:96:9f:
9e:05:fb:20:f0:e9:13:5c:ec:a8:f9:ff:87:fc:e7:
da:24:a1:ae:97:72:3f:01:f5:af:ec:5b:38:be:dd:
05:3f:7d:07:3a:de:2b:18:9f:47:0a:5f:ee:5c:79:
6c:c3:40:8c:80:83:15:93:a5:92:9c:e5:03:c7:8c:
3f:b4:5b:e2:2d:9e:90:f2:24:d0:54:77:28:30:3b:
0e:f9:67:c7:28:71:bd:c2:42:e2:4f:4a:f6:cb:ea:
36:be:c7:b9:d8:fa:92:9f:dc:a9:ad:ad:9f:c1:1c:
85:2f:a4:da:bd:d4:37:12:44:e4:95:3a:1a:ee:48:
0c:ab:d9:9a:89:45:45:db:76:06:92:e9:b5:aa:25:
c4:a0:45:17:75:80:5b:a7:7b:2e:2d:02:75:6d:6b:
35:8d:5c:69:40:8b:a3:62:12:57:cc:27:a0:0c:74:
d6:0b:df:53:ac:4d:12:38:26:e6:10:18:f1:40:00:
af:7c:e8:16:3e:db:06:df:7c:5d:64:ba:f4:dd:bb:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:1F:92:63:B9:B5:BB:65:87:50:41:CA:84:A4:56:9C:D9:DD:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:fb:e4:a9:ab:00:e4:e2:f3:9a:9b:b4:18:bc:06:34:b2:12:
5b:85:e2:f4:6c:3e:94:56:05:67:8d:0d:d5:45:e4:c2:96:e3:
e4:0b:5e:56:66:00:0c:7c:69:13:ad:68:60:d7:9a:15:fe:00:
2d:5e:2d:b7:31:00:d3:b5:97:47:0e:58:1e:db:24:6a:39:e1:
f3:81:91:16:74:2c:16:1d:c4:d6:19:c9:51:80:35:fc:fe:eb:
4b:94:97:1a:63:ab:27:6e:89:bb:44:9b:b6:d9:81:c5:4c:f7:
cd:45:45:e1:14:86:60:1a:88:2d:12:69:62:48:c3:f6:35:18:
12:d8:12:d4:2a:3b:c6:fd:08:87:dc:8b:d1:8f:7c:5d:8c:a9:
4e:e8:75:75:03:80:11:5e:f3:11:ab:62:cd:95:a8:68:04:5b:
34:53:84:17:4e:28:51:c7:76:90:4b:90:26:5d:da:f6:31:43:
62:b9:a0:3b:7a:28:53:44:0d:2a:02:c3:ff:c6:41:7e:9f:a1:
ec:cb:4c:45:92:ba:3f:67:fb:0a:62:3a:97:6c:4c:7f:e3:fa:
52:af:f7:87:e0:d8:26:31:24:95:64:b5:e6:97:1f:1b:1a:89:
d5:e6:c0:41:ce:ee:09:9b:8c:4d:05:09:f6:c1:ee:1a:93:76:
83:06:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:11 2026 by rpki-client