Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
File: 325fa89c-1511-4efc-84ed-51af85c9ed14.roa (raw, json)
Hash identifier: 3V9A1WWu+wwyZgjSGbKEYdhFoO/SBgGDioFJSQIDpZ4=
Subject key identifier: FB:A2:4C:85:97:F4:8E:79:B8:E2:3F:8B:0D:3F:5A:59:23:F7:78:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5059DED1EB058A7E75A0E7F0BF2C73701E625CAA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
Signing time: Thu 15 Oct 2026 03:30:28 +0000
ROA not before: Thu 15 Oct 2026 03:30:28 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:59:de:d1:eb:05:8a:7e:75:a0:e7:f0:bf:2c:73:70:1e:62:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:28 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=ff780bf6a6aa5645188c3089cd78e34bd8c8327649322bf6933297c9f78b93db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:4c:7e:da:bb:c8:61:67:d4:49:83:6e:eb:
68:18:f9:56:4a:3d:42:3b:12:25:85:5b:47:8f:d1:
73:b3:09:75:28:08:dd:06:15:51:73:ca:48:14:ef:
e0:7f:72:d4:50:da:0d:b6:e5:89:b8:ef:7f:bd:0c:
4c:c2:cc:18:45:44:c3:45:e3:7e:70:73:74:9d:42:
64:74:ca:c4:79:87:ff:d1:11:31:bd:d0:06:c4:3e:
44:ad:5f:dc:1a:d3:88:0f:e9:87:9f:57:44:eb:f2:
59:45:51:f4:d7:32:21:27:1d:99:be:28:19:c3:c0:
df:02:cd:fe:5f:5e:90:70:98:c6:85:51:9b:25:28:
51:e4:43:e7:bc:6f:7f:05:dc:19:52:7e:9c:ae:d3:
a7:07:ab:b4:e1:68:e6:c8:01:fc:a8:e0:69:8b:2a:
a0:40:2c:f5:d4:5c:c9:cf:ea:7f:10:93:c1:bf:b3:
76:70:5b:4d:88:8f:08:2a:ff:9c:cc:1d:a9:e9:e6:
4e:82:44:53:b7:89:f0:eb:57:07:df:7f:57:dc:35:
c6:6a:96:1e:f3:7b:6d:b4:35:0c:8f:cb:a7:6a:05:
7e:d8:af:5b:af:91:f4:3e:5f:cf:1b:d7:d6:0f:d6:
87:70:f7:15:04:4c:da:dc:82:56:ed:4f:d4:11:db:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A2:4C:85:97:F4:8E:79:B8:E2:3F:8B:0D:3F:5A:59:23:F7:78:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:7e:a4:34:65:58:ef:12:e4:03:d9:d8:05:fe:c6:8e:ca:1e:
6f:9c:4f:7f:46:f1:80:7d:b2:38:23:e5:ce:21:ff:49:1f:10:
7e:e8:0d:d5:c4:ce:f9:36:a8:cd:ae:29:ae:28:4a:d9:69:85:
19:be:da:4b:39:91:55:1f:50:ff:78:8c:38:ca:44:40:0b:7a:
09:cb:e6:76:d2:be:bc:7c:07:56:28:7f:9a:40:ef:09:be:23:
35:02:24:4a:d0:18:50:18:2a:2b:d1:22:67:51:b9:be:db:e8:
c6:a8:83:12:20:58:a6:47:37:9c:7c:e6:9d:12:01:0a:b1:c4:
6c:cc:71:39:f4:89:02:f4:d1:0f:9f:1d:a9:d5:77:c9:d6:38:
68:40:ef:ab:96:42:c0:93:9c:12:28:8c:fb:d4:8b:77:07:0e:
ee:fe:43:48:f4:94:01:36:3c:20:e2:65:fe:38:d4:af:49:da:
f4:d5:0d:1f:b9:9a:51:5c:7a:84:64:0e:36:00:df:05:7b:ef:
bb:a2:cf:73:bb:a5:88:c0:35:f8:d3:87:8d:2e:87:2d:01:c0:
bd:90:0e:32:c8:a2:94:f4:d6:99:16:d1:ca:31:d2:bd:90:95:
48:52:04:c7:0a:f7:49:76:ce:78:66:e0:8a:7c:db:1d:ef:66:
7d:65:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:24 2026 by rpki-client