Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33bd1507-d804-4526-a43f-d3c6377fb743.roa
File: 33bd1507-d804-4526-a43f-d3c6377fb743.roa (raw, json)
Hash identifier: CSVcLsbjmxYWdCqxBgkkwaSqnLzIqIX2jUwU1477Fm8=
Subject key identifier: A0:31:2E:20:0B:00:56:5C:76:59:A1:87:8F:31:A2:63:97:6C:4C:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39BF8F2D2A0DA3A41CC573708380BAB8DE5574A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33bd1507-d804-4526-a43f-d3c6377fb743.roa
Signing time: Thu 08 Oct 2026 17:24:41 +0000
ROA not before: Thu 08 Oct 2026 17:24:41 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bf:8f:2d:2a:0d:a3:a4:1c:c5:73:70:83:80:ba:b8:de:55:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:41 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=0630c4591507f4d488622d847b2c3e30f30172d063b086477efc1b3a14197385, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:6b:42:46:d1:69:78:64:44:35:6f:8f:3d:
22:8d:5b:6a:47:92:c6:87:2a:31:a5:b0:24:55:92:
8f:f0:15:f4:2e:17:b2:08:09:93:81:ad:f0:f1:f7:
bd:b8:82:2b:e1:9b:78:0f:70:b6:93:6d:ae:12:c5:
71:ac:77:82:46:eb:53:00:d4:6d:a9:bd:f7:45:0e:
cb:74:23:5d:c2:ea:6e:b6:dc:42:c0:a9:0c:55:7d:
ff:cc:05:6c:4b:a6:05:9e:a3:60:5b:7f:48:86:dc:
03:9e:53:57:fc:c5:0f:37:6a:78:81:31:d6:9f:f7:
24:41:1f:aa:33:2a:9a:7e:3d:d7:a9:62:e0:0e:82:
a9:7b:b9:bd:b2:b2:1d:04:fe:5d:8a:51:be:f6:1d:
a7:42:6e:bd:58:58:c5:5c:c1:c6:29:aa:db:6d:59:
c9:09:e7:bc:d8:b9:6e:9c:a0:b3:19:f4:28:20:38:
6a:cc:43:57:61:95:71:e2:5f:97:01:00:4a:54:fc:
d1:2c:fb:21:70:a0:d6:07:46:e2:22:07:05:ad:b9:
16:7f:d4:02:ef:c5:71:c6:43:ec:a1:c8:6c:02:11:
24:d1:c2:4e:cd:c5:55:c5:4f:6d:32:0b:c5:ca:26:
c0:30:72:38:36:a3:22:2f:ff:e3:b9:b5:d6:11:03:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:2E:20:0B:00:56:5C:76:59:A1:87:8F:31:A2:63:97:6C:4C:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33bd1507-d804-4526-a43f-d3c6377fb743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:4800::/40
Signature Algorithm: sha256WithRSAEncryption
51:de:a8:9a:d3:06:83:71:0d:1f:d6:f4:c3:52:41:d0:08:be:
99:7d:67:54:93:50:6a:fc:4f:b6:74:83:94:79:39:85:e5:7b:
ab:81:d4:a3:44:e6:16:a6:45:4e:44:34:57:56:f1:06:2a:77:
29:9a:c4:9f:9e:86:6b:2a:ed:02:b6:3a:d1:fd:a7:3f:3d:d1:
20:be:76:e6:c3:44:bd:fc:8a:3c:6d:3d:d5:4a:1d:61:05:be:
3a:30:74:87:37:64:3d:9b:76:0e:a1:14:7f:fe:e6:8d:ca:2b:
89:4e:ca:48:1b:f6:9c:76:4d:3e:ac:83:55:5a:d1:59:e8:0c:
44:f6:c0:33:fa:45:bd:5d:1c:19:50:04:4d:29:9f:8e:9d:22:
bb:91:f6:65:d1:41:92:cb:0b:76:f5:25:f4:6b:90:06:b5:33:
b9:9c:09:2f:9e:96:27:66:a3:7d:a6:0f:e9:04:6b:8d:01:4f:
1c:04:ac:92:98:7d:c6:7d:89:13:49:eb:e7:be:f4:19:65:ad:
94:67:0f:e5:86:c4:4e:44:92:29:88:a9:5d:fe:66:2d:1a:3f:
df:9f:bc:a5:ad:3e:69:8a:a5:c5:85:f0:04:3f:42:d3:d5:ed:
5c:29:b1:2a:cd:ac:83:09:e5:da:39:bc:c0:7d:a2:4d:27:be:
33:8a:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 12:57:37 2026 by rpki-client