Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
File: 37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa (raw, json)
Hash identifier: yt+/2ZK9kdII9Uyk3fQYvTGafJ2AIspuHh2eve1VGnc=
Subject key identifier: F0:15:2D:9A:13:8C:FC:DF:D0:5F:8D:CA:B9:FA:F3:92:A7:50:FE:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 75614C08286126E1EE6C9A443D505854AB422879
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
Signing time: Sun 18 Oct 2026 01:30:23 +0000
ROA not before: Sun 18 Oct 2026 01:30:23 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:61:4c:08:28:61:26:e1:ee:6c:9a:44:3d:50:58:54:ab:42:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:23 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=09e54141c62c84672e257875216918d191397f876e0d06b242e3f774e9da902d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:40:c6:4a:08:f2:2c:fa:d7:a1:38:40:7f:
d5:c4:8e:47:64:96:27:b4:10:0f:ae:17:ab:3a:c6:
ac:ac:fc:a0:79:93:8a:a1:a8:1d:4c:33:5b:fa:9d:
11:69:2b:c3:3a:c6:7a:fd:45:7d:2f:f6:ef:f5:cd:
a4:83:2f:a4:2d:11:7f:05:a5:d0:29:fb:23:ad:24:
6c:29:23:db:88:bb:2b:7a:54:3c:52:dd:6c:95:60:
c7:3c:aa:9a:5a:8f:18:7d:11:9c:14:2f:51:8c:09:
85:c2:8e:77:59:95:0a:32:00:94:1b:07:e8:ab:76:
10:50:55:d6:0b:3c:da:b0:cc:a7:12:c1:25:ea:50:
d4:55:ce:ec:02:2f:fa:a4:48:4f:43:80:58:79:42:
c9:e3:ad:57:be:16:db:f5:b3:fb:46:2a:da:21:f2:
11:eb:67:2e:37:e9:af:59:72:b1:02:76:78:aa:fd:
f7:69:d0:fd:ed:e3:af:a4:51:50:56:22:a9:6e:58:
46:01:c5:7b:a4:c2:a2:2a:b2:e7:5c:19:73:f4:a8:
bc:32:15:d3:7d:47:61:bf:7f:54:7d:93:a7:6f:b2:
8f:cf:e6:79:19:e9:a5:21:de:f7:6c:a1:e5:09:3d:
ae:28:d4:dc:08:31:fa:a2:9a:71:72:32:c3:c2:32:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:2D:9A:13:8C:FC:DF:D0:5F:8D:CA:B9:FA:F3:92:A7:50:FE:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/48
Signature Algorithm: sha256WithRSAEncryption
1f:05:26:4e:41:dc:8b:51:88:59:10:4e:aa:a0:aa:ee:e7:17:
4b:77:b1:8e:9a:6e:e9:e0:a8:82:7a:2c:31:a6:76:e7:e0:e5:
e4:2a:c9:7a:ac:c8:fa:39:28:3c:0e:ed:94:82:98:37:32:42:
f7:93:0b:68:79:5a:3d:e6:87:bf:01:d6:5a:e8:ba:cf:54:56:
2b:62:20:ac:0f:3c:bc:fa:29:d1:0f:9d:b5:7e:a8:38:ed:6c:
0b:a0:fc:02:ae:0a:44:69:87:91:86:ec:bf:12:f8:a6:51:e0:
4f:24:71:3b:98:2f:c1:cd:62:4c:95:92:18:ab:b2:73:58:ee:
92:74:ee:46:8b:f2:d1:df:b4:8d:23:74:67:23:ac:5d:ba:00:
6e:5a:a9:18:c3:35:b5:35:2c:f1:e6:8a:72:c6:4f:29:97:2b:
89:6e:f4:4d:5a:1e:b8:88:fc:2f:02:7e:f1:1a:d8:29:5a:b2:
f0:1e:c9:4d:39:d2:91:16:e4:e5:11:3f:a6:89:8b:8f:ce:5b:
a3:e0:d1:23:aa:98:6f:7d:79:c6:f7:16:33:66:6f:88:d4:49:
94:44:b8:c9:92:8a:8a:84:8a:c9:ee:0b:e0:ea:19:44:d6:64:
39:26:cd:1c:22:60:9e:97:d5:fc:22:67:14:ba:9d:ec:0e:55:
3b:2f:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 07:39:39 2026 by rpki-client