Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa
File: 34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa (raw, json)
Hash identifier: cws0ezXbENGtI/yFQlr+Fh6MZv/wWv+4x+zpEzkcu0s=
Subject key identifier: 11:65:AE:42:D8:32:78:C9:AA:D5:6D:F2:71:FD:5A:99:7C:3C:F2:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3501E7E221D93D6EF2C0F42718F647964FC4D77A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa
Signing time: Fri 09 Oct 2026 01:30:33 +0000
ROA not before: Fri 09 Oct 2026 01:30:33 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:01:e7:e2:21:d9:3d:6e:f2:c0:f4:27:18:f6:47:96:4f:c4:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:33 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=2ca59d0888f759de5a827a0de9eb51681b146170e7feb08734e77cf3f9af8653, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:d3:04:ba:b4:9e:a3:df:14:fe:df:d4:86:
3d:33:d1:3e:f3:b3:f9:a7:95:9f:bf:81:e9:53:01:
53:ca:ef:04:2e:e7:d9:bb:76:ac:bc:10:36:0d:14:
4d:b9:e9:0e:e9:d5:29:8d:ad:3a:b3:69:28:82:c6:
2c:30:f8:db:56:66:3b:95:ad:72:a0:99:08:75:fc:
76:03:c1:f3:4a:8b:22:2d:03:87:41:02:be:40:bd:
31:b7:bd:19:cb:fe:27:13:36:c1:7e:10:03:d4:3b:
f6:c1:3d:e4:9e:29:2d:eb:e2:c4:44:ba:59:28:db:
de:28:92:c9:b6:94:9e:80:d4:f3:61:16:1a:4e:0f:
31:19:82:47:c0:b5:e0:cd:e9:90:71:c7:64:73:b1:
5f:79:37:ed:58:35:e6:60:38:c2:ae:80:60:08:28:
3d:0f:72:d8:ea:18:5f:cb:9f:79:ac:7a:cf:03:0f:
f1:db:7a:c9:eb:bd:94:1f:f5:12:89:24:6d:91:2e:
e7:7a:66:b0:f4:54:0b:41:21:67:ca:b6:08:ee:bb:
ba:4a:c9:79:05:f8:79:02:a1:89:69:52:44:b5:43:
e4:3f:d8:e1:17:ef:85:4a:5e:8e:db:ec:30:cd:c2:
2e:ba:df:d3:4d:5b:36:a2:41:a3:29:b4:b9:fd:46:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:AE:42:D8:32:78:C9:AA:D5:6D:F2:71:FD:5A:99:7C:3C:F2:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34c01ebb-9e77-41b5-a2ef-1caa5f389bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
c7:b9:d3:68:59:be:8a:39:5d:d3:09:d4:dc:7d:ad:5a:f2:b2:
03:8a:47:a5:0e:98:60:bf:95:0e:5e:1e:ba:94:eb:96:3e:6d:
ef:1d:72:60:dd:a1:f9:58:a8:33:41:b3:d0:1d:3f:1e:2a:06:
47:7e:ea:03:87:ef:5d:b6:3f:c1:82:c3:16:cc:9f:f8:2a:b5:
b7:5f:9c:90:44:60:d3:1f:ad:d1:bf:ab:b9:1e:20:70:a9:68:
4d:49:06:3e:cc:ec:7c:74:38:db:d9:b9:17:3c:8e:ea:9c:08:
a7:89:8b:8a:12:5e:a8:7b:14:50:33:29:18:ad:27:14:7b:d0:
a1:3a:be:f7:f1:f0:d2:0b:7c:a0:65:2b:ae:6b:05:74:6d:5e:
34:ba:c6:19:c5:27:63:fd:f5:80:fd:e9:29:f5:a1:12:be:90:
87:c6:8a:41:9f:e6:e0:05:0a:9b:d4:ed:80:29:da:3c:aa:93:
e5:ee:f6:da:ea:d7:7b:dd:66:b1:18:30:6f:d5:9a:5e:0f:9d:
5f:fd:4b:7a:ab:2c:21:a3:42:56:35:35:82:78:a4:27:5d:b2:
e3:9f:26:06:55:8a:7f:23:5e:78:4b:92:a0:96:c9:38:7c:c3:
19:ae:3f:e3:3e:56:60:52:fe:0b:65:42:2b:69:78:0b:20:e2:
d3:b1:f1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:18 2026 by rpki-client