Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35225774-1db6-4ac6-ac9f-09ff842be734.roa
File: 35225774-1db6-4ac6-ac9f-09ff842be734.roa (raw, json)
Hash identifier: zjqexQC7ygOW5CCNtNQoQ2ZZvnlFMWwgN/JNKhYHkmY=
Subject key identifier: CB:0E:44:15:B6:14:FA:C1:4D:93:16:D4:D0:E8:73:31:B1:C6:E5:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70CA70E00E56229908CEF4375F5998DD28785AF3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35225774-1db6-4ac6-ac9f-09ff842be734.roa
Signing time: Thu 29 Oct 2026 01:02:48 +0000
ROA not before: Thu 29 Oct 2026 01:02:48 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ca:70:e0:0e:56:22:99:08:ce:f4:37:5f:59:98:dd:28:78:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:48 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=46440155054bd4d4e05a9e2770e079a9dfa24b4b85da8e4e9f4b1ec05c9306c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:05:13:66:55:ac:b6:29:d0:37:13:fb:a3:1f:
0e:58:29:7d:cb:c4:35:d4:1c:b3:b9:c5:c9:ee:0c:
26:90:e8:c9:a4:81:71:4f:b9:7b:d5:4e:cc:d5:ae:
e0:df:6d:5c:c5:f1:ac:6a:9e:8b:ee:99:7c:5b:8b:
04:f7:85:02:6e:c1:15:2c:9a:63:b4:a4:c1:6e:7f:
66:3c:61:28:3d:52:ce:41:96:c8:0c:39:e8:13:ee:
3f:b6:6b:1d:0c:45:32:05:9e:e7:03:5d:29:0f:d3:
20:f5:48:67:79:0e:34:43:ad:26:b1:b0:26:4f:a6:
73:06:c7:7a:59:a7:46:67:a6:08:91:b1:2a:07:52:
61:81:90:3e:ea:ea:6d:5c:15:57:86:51:ac:24:12:
23:01:b5:80:9b:39:9d:bc:07:a7:d2:2f:c0:eb:dc:
16:1c:49:a0:4b:32:03:b9:5c:93:4c:18:c7:53:6d:
c3:79:a6:63:37:4f:3e:f7:cd:39:9c:96:ec:1a:a3:
1c:13:a7:fd:96:c7:06:cb:cf:dc:8b:78:cb:8a:1b:
e3:68:4c:08:c1:9b:78:09:4c:32:8f:9c:17:02:48:
b6:76:d1:b4:3d:50:b0:73:66:dc:47:71:22:25:c4:
36:85:f6:58:29:29:88:d4:ad:ca:97:e5:74:ce:f9:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:44:15:B6:14:FA:C1:4D:93:16:D4:D0:E8:73:31:B1:C6:E5:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35225774-1db6-4ac6-ac9f-09ff842be734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:d9:3b:4e:9b:67:e6:71:b9:f1:2d:9e:8b:b9:93:56:d0:ce:
98:23:a6:ac:62:42:15:57:ea:2e:50:f1:6f:6d:c0:b2:02:a7:
b8:6c:6a:da:6c:d5:1c:9f:97:99:68:ab:3b:d1:bb:44:42:7d:
06:b5:21:12:de:d3:04:2e:8a:9c:a6:85:b3:0b:c2:57:7e:35:
46:b8:cb:90:c9:1c:59:c3:db:ef:53:4c:ff:7f:95:17:8f:80:
65:e4:00:6b:aa:9a:20:e0:09:ae:43:75:01:2f:72:c6:1d:bc:
6d:f0:aa:88:30:e9:2d:bd:be:53:e4:ed:07:0d:77:4d:00:68:
ae:2b:43:56:98:d3:ea:b5:0d:45:06:3f:15:d0:c6:ed:2a:01:
12:d5:fd:f5:ef:43:1a:e8:5f:21:5e:ed:10:1c:51:8c:f8:ab:
d9:3c:cd:b0:a3:a5:d4:f9:c9:bf:9a:ba:c4:f0:81:b1:75:00:
4f:5a:e7:73:f0:83:5b:12:a7:ef:e9:7c:90:62:e7:66:94:d2:
68:25:00:17:a7:7d:bc:a0:dc:9f:fd:c2:65:a5:07:86:c3:03:
51:43:18:cd:dc:4e:01:6f:dc:d9:51:29:79:0c:a1:ca:fd:0c:
8a:2f:04:b5:58:29:74:5d:9c:75:30:50:d1:23:ac:ed:a9:6f:
56:d1:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:44:15 2026 by rpki-client