Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa
File: 37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa (raw, json)
Hash identifier: c4UMKLiKKaNKiHAf8qP/CnaXu5OORTInNIcoDj5Gz+Y=
Subject key identifier: 9F:65:28:6A:FA:EA:E9:D9:8F:75:BF:95:E5:2C:56:3E:52:03:3C:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 578B6B32B8666064C5D09C0AC94353E103A9D10A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa
Signing time: Mon 26 Oct 2026 05:30:51 +0000
ROA not before: Mon 26 Oct 2026 05:30:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8b:6b:32:b8:66:60:64:c5:d0:9c:0a:c9:43:53:e1:03:a9:d1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8d544ae2a61490eb051cc1f8db610f214d8beb34dc9fff723af8ec80f1a43abf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:47:46:13:a8:2b:60:5b:4f:64:d4:c7:2d:
1a:99:71:b0:91:9f:05:08:63:c7:4e:6a:5f:cd:94:
75:3d:8d:38:16:ef:4e:e3:ee:38:d1:8f:f6:54:c7:
93:f6:21:95:08:0b:74:ab:ab:f7:75:45:a9:8e:e7:
c8:22:54:e8:a2:7e:31:1f:ed:fc:01:98:59:36:6e:
5d:80:4a:5b:ee:d6:b2:6f:7d:06:35:e5:84:ef:03:
16:28:0f:70:81:2e:03:e4:5b:35:57:40:34:3f:38:
7f:77:e7:a7:d4:9d:3c:01:9d:01:a7:a3:cb:7f:e3:
e3:43:bd:a0:c7:06:79:80:b1:e0:6f:97:11:c2:4e:
57:42:54:4b:0b:54:19:59:44:83:58:20:77:d4:20:
6f:9c:ec:07:10:b0:2d:a2:01:5e:69:d5:a4:1b:87:
13:9e:ac:48:4c:a0:25:46:04:57:a0:c4:e8:e9:03:
07:cf:86:2d:68:1f:02:89:a1:dc:16:64:83:0f:9e:
ee:f6:56:28:65:d9:cc:c7:b8:ca:13:66:b2:29:11:
b6:d8:f0:11:37:10:b8:8f:e1:bc:2d:fc:4b:9d:ea:
6c:a9:4b:31:1a:da:77:db:25:f9:b5:d9:26:35:22:
f1:34:cb:03:ba:b0:27:d7:74:a2:fc:7a:a1:80:84:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:65:28:6A:FA:EA:E9:D9:8F:75:BF:95:E5:2C:56:3E:52:03:3C:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37f8478f-5ef8-4fe5-b9a2-1bbd605a6adf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:8000::/40
Signature Algorithm: sha256WithRSAEncryption
46:dd:56:0d:07:73:9f:11:36:e8:68:da:0f:7b:e0:4f:dd:f0:
77:bd:c5:d4:24:3c:e3:10:dc:12:ef:c4:1e:56:e6:37:cc:70:
ab:6a:2c:6c:42:3e:57:a3:05:01:3b:86:38:2c:96:f3:7a:0e:
04:8b:66:45:af:4d:75:8a:b1:b3:53:ed:b4:8c:8b:6c:11:bd:
b9:17:8c:e1:09:1b:d3:a3:80:71:fb:ba:c0:19:da:15:77:99:
16:a7:0d:ae:62:bf:4f:1e:0d:34:b1:c0:49:4e:a1:f7:e9:f9:
1b:c5:fd:45:22:34:be:39:e9:c3:36:71:3f:31:e0:78:f4:bc:
61:59:ee:7f:b5:7c:8a:39:77:40:a6:84:f6:39:26:d6:8d:54:
b4:d0:f6:42:47:42:2a:9d:b1:be:f7:ff:89:1f:e3:9c:c6:c5:
43:5d:fe:02:46:98:21:7a:c1:a2:33:e6:03:2a:48:7b:fd:db:
bf:5e:7a:87:56:e6:64:26:0c:a2:6e:a3:4e:2e:3e:9c:a5:3f:
64:62:c8:d7:5f:b1:12:99:e8:72:4c:b2:f7:39:51:d2:21:5c:
24:ae:79:4f:cf:d5:48:5b:91:f4:ef:eb:6b:06:be:a8:f3:e5:
25:a1:44:94:e0:28:fc:60:4a:cb:ef:7d:fb:1e:9a:3b:0a:85:
ca:1d:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:36:19 2026 by rpki-client