Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
File: 38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa (raw, json)
Hash identifier: UieLQJDQ6scRGxplCXjigrODTjnFDQCI6Oqlu8lJ3LY=
Subject key identifier: F7:0D:0E:D0:C9:20:BE:06:ED:49:9E:46:CF:75:B2:22:F5:54:A2:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E7EF34521576369912A32843C237EF804F9F6CC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
Signing time: Mon 26 Oct 2026 04:40:37 +0000
ROA not before: Mon 26 Oct 2026 04:40:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7e:f3:45:21:57:63:69:91:2a:32:84:3c:23:7e:f8:04:f9:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=fa072e58a022fd947263f9e4816fecfda86b6a53c6d87573238685644c369015, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:38:91:6a:e7:7a:69:a1:c5:a2:14:ab:f1:
f9:66:a3:80:53:48:0c:a5:bb:f8:f0:91:d4:86:bb:
21:c4:b8:73:40:11:3f:15:c9:31:7e:f4:38:af:85:
4f:d6:d0:77:cc:9a:ae:18:33:91:6e:82:c9:88:81:
af:66:13:57:b2:17:44:2b:2b:2a:f2:52:cf:5b:e0:
85:b9:c9:85:5a:36:fe:7b:64:e9:30:f5:f8:8f:06:
ce:0e:8b:c4:ba:d9:67:17:31:bc:95:ab:b8:17:eb:
c6:e6:c8:e1:9a:ea:87:33:9f:3a:cd:3f:86:91:1b:
3b:00:e7:1f:8f:63:82:3d:d4:2e:e2:92:89:d2:8c:
55:de:7e:d9:2d:8a:ac:ff:8a:a6:f3:a3:32:56:dd:
5f:77:1c:d1:63:72:e1:12:8b:08:d6:96:a9:c7:1c:
a6:da:f1:03:15:53:d0:f8:9d:83:cd:87:6c:27:00:
0f:2f:13:12:d6:b5:d9:b6:bd:1b:6e:3b:93:1c:ff:
64:41:eb:14:56:0e:e0:ac:f2:77:ed:41:16:de:54:
7b:6c:20:a9:f6:27:cb:b7:2e:c5:4e:1c:ae:51:cd:
47:01:b1:89:6c:b5:01:97:74:25:21:9f:29:be:d2:
8e:ca:d9:5b:a5:e2:9c:ec:7a:4e:bc:90:12:ab:60:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0D:0E:D0:C9:20:BE:06:ED:49:9E:46:CF:75:B2:22:F5:54:A2:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:6000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:f2:e4:e5:9d:3e:ec:95:eb:e2:da:bb:03:85:10:fb:5f:fe:
93:5b:27:28:18:3f:09:fe:30:56:60:d7:90:59:fe:ed:93:f4:
74:d9:2f:8a:4f:f8:4a:1e:2d:b4:50:a4:99:81:54:a8:a3:5e:
7a:e5:ad:cc:16:a4:aa:96:02:f3:06:fe:7f:99:bc:c2:9d:4c:
a6:91:a0:cc:24:db:bd:19:dc:f3:a1:4e:fa:e7:4c:05:1f:f0:
93:c9:17:45:87:dc:24:31:cb:8c:4e:0e:93:46:35:2a:17:88:
e4:51:3d:b8:86:a0:97:e8:d4:ea:04:a1:6a:c0:3c:61:00:29:
30:31:bf:e5:c6:ae:95:fc:04:82:e4:ca:2e:8c:c1:ec:90:3d:
28:a3:a5:83:a0:4d:70:5e:e1:9c:5e:1d:6d:29:ce:02:8b:fb:
56:48:8f:3d:48:d5:28:48:b7:88:08:aa:14:79:0d:3b:9c:57:
49:b7:72:62:c0:c1:51:8b:53:33:10:ec:5c:55:f6:1e:1b:4b:
43:0a:2d:f9:d0:36:a8:4b:04:0c:18:76:e5:d3:a0:9f:d0:af:
02:f8:7a:08:03:ea:8d:9d:c0:0a:b1:ea:48:25:16:83:16:73:
ef:82:6e:33:c2:10:80:d9:ed:eb:cf:c2:f7:b8:51:a2:ec:47:
8b:bb:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:09 2026 by rpki-client