Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
File: 28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa (raw, json)
Hash identifier: gsvEzoxPZqCE11tbz3Zhq2fVfY/QewAeT2vAWhtj/Xo=
Subject key identifier: B5:B5:B0:B6:8D:2D:A4:51:A3:13:B9:91:D2:0C:46:BB:67:A3:5B:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5869E5EF0E218DC690BFBAFBBB4A0331C75D5E4D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
Signing time: Mon 26 Oct 2026 05:30:50 +0000
ROA not before: Mon 26 Oct 2026 05:30:50 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:69:e5:ef:0e:21:8d:c6:90:bf:ba:fb:bb:4a:03:31:c7:5d:5e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:50 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=43b70fe86793cf859e8ff93e1f4deac051956b96f0925889913c3113b5e17bee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:11:da:ef:0f:ea:f7:f3:1c:17:83:86:68:
39:74:02:a9:bb:ca:db:2e:e3:f3:6b:7d:b6:51:1f:
1e:47:1c:4f:24:e8:fd:51:6b:08:b9:6e:35:d4:11:
af:41:6d:7b:83:5d:ee:11:78:0b:14:76:73:85:d8:
fe:a7:b1:5d:24:0c:33:b1:4d:db:8d:b5:8c:82:d4:
c1:3b:c6:6b:70:f8:42:ed:c8:2d:8d:d2:05:12:63:
0b:af:72:f6:68:43:9f:95:36:4d:37:ff:f2:27:c8:
36:b1:c9:74:40:41:e7:15:c8:45:8c:3f:39:d5:f3:
a5:44:e0:db:c5:86:bb:cc:9e:81:0c:bb:cd:06:3d:
a2:9c:76:1a:08:d5:b6:ba:80:85:ec:05:16:ba:d3:
4a:c1:bc:56:9b:c2:cc:c1:60:d9:7d:60:d6:f7:90:
fe:a1:79:9d:e9:6b:0f:8f:a4:35:ba:1b:ab:7c:22:
3b:bf:f8:4e:53:54:dd:ff:90:7e:15:cb:b2:a2:40:
d2:bf:06:9a:d2:70:86:c2:ab:55:20:d2:01:11:4a:
8c:22:fc:0f:bf:fa:2a:4c:db:78:e4:30:1f:53:24:
f7:00:52:c5:62:f3:74:1f:d5:9f:b1:17:fb:60:97:
84:c5:6b:00:f6:23:5c:5b:4a:ed:d0:17:09:69:15:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:B0:B6:8D:2D:A4:51:A3:13:B9:91:D2:0C:46:BB:67:A3:5B:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:a7:4a:13:44:9b:b5:5f:e6:a1:45:8d:c7:5b:0f:42:9f:61:
e8:c4:f3:2b:0c:c8:3c:09:32:55:de:70:d7:32:c0:5e:8e:f8:
bf:87:6f:25:08:2f:2a:c2:39:c5:20:20:f8:91:68:41:07:86:
7b:3a:ba:02:19:f8:2e:fc:43:28:df:1f:bb:da:db:45:e2:b3:
2a:6e:c8:25:12:a0:f6:cc:92:50:62:8b:2f:6a:3d:01:95:48:
f4:db:40:64:29:3f:a1:af:e0:ea:26:a7:fa:8c:ff:00:2f:88:
3a:92:cb:7d:25:2f:be:77:b4:38:b1:78:4c:d0:82:76:c7:e7:
ca:e4:0f:30:f7:78:88:52:f8:97:2c:20:2c:79:fd:e8:e8:d7:
10:9e:b6:8b:09:f0:59:95:e9:f4:5c:83:94:a3:e0:ab:17:19:
ca:c2:18:d4:7b:02:ea:87:e1:9f:a9:9c:d5:53:d2:eb:db:6f:
7d:72:97:f5:53:19:8f:73:58:ed:7e:9b:11:2d:9b:82:8f:e2:
69:3a:8d:3e:48:b0:b8:d5:f6:db:93:b1:d6:cc:2e:4d:1d:68:
18:99:ef:d6:ed:c8:7b:a3:28:d1:12:18:12:54:98:a5:cd:3a:
ed:2f:2f:3b:a6:58:7a:c9:08:aa:11:80:fb:05:a0:6d:47:f1:
1c:3e:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:16 2026 by rpki-client