Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
File: 3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa (raw, json)
Hash identifier: US5IGzhdtSm3ApRLepSTsNn/gxXlLWFmLnZQqU9DdIo=
Subject key identifier: 67:4A:37:4E:76:33:A1:0A:5A:FE:FE:56:97:65:BF:7F:6E:60:6F:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50EB05E80DAE20ADBBC92A940F1386F7706A9A28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
Signing time: Mon 26 Oct 2026 05:02:52 +0000
ROA not before: Mon 26 Oct 2026 05:02:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:eb:05:e8:0d:ae:20:ad:bb:c9:2a:94:0f:13:86:f7:70:6a:9a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=766a5f6a06579fcf895436768c398c5802f21c0309a24365e86e526b8e68e7e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:73:ba:6a:19:a4:70:4f:e8:f8:22:70:f6:
cc:3e:61:89:42:7b:79:f2:ab:2e:18:e7:5d:4b:66:
24:ed:31:bf:2b:05:04:77:a6:82:d8:a9:7a:db:d7:
2b:ba:04:5b:f8:50:58:0f:78:dc:ea:c8:3e:69:24:
0c:ff:25:4b:99:ab:11:cf:be:5a:57:a8:b2:a7:64:
33:bb:50:5b:ac:36:b5:de:bc:d6:d7:20:ae:0a:0a:
c5:da:80:bd:f6:19:ea:de:c0:24:26:8e:62:80:d3:
0f:b9:08:01:cc:96:e7:50:da:16:4c:52:ad:89:ba:
bb:e8:ef:a9:bb:e9:50:5a:4f:db:07:aa:a3:98:91:
40:22:0a:29:72:71:88:ad:54:28:54:3b:a4:e0:96:
10:c7:67:09:3f:d2:fb:e5:96:e0:0d:7c:69:72:b2:
9e:5a:d0:87:7b:43:ef:97:5c:f6:94:78:69:70:16:
31:c6:f9:fe:4d:6e:34:e0:24:7e:0a:93:9e:e1:cb:
25:49:28:2b:cf:14:85:4d:a5:be:44:b1:ce:79:34:
0d:24:59:63:83:5c:46:2d:ec:00:9e:d6:f8:aa:e7:
d1:56:80:e8:bd:10:6b:ac:30:4e:6a:44:3a:b7:1a:
2d:1f:d0:8c:46:cd:f5:c9:3e:c3:69:c2:7c:79:d4:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4A:37:4E:76:33:A1:0A:5A:FE:FE:56:97:65:BF:7F:6E:60:6F:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b000::/40
Signature Algorithm: sha256WithRSAEncryption
23:de:ce:37:f0:9e:f4:45:a9:5d:5b:59:fb:33:6e:5b:b9:d7:
61:8c:1f:40:a0:de:ed:88:eb:09:69:08:39:d3:23:d4:bc:13:
72:e9:62:2a:27:e8:ec:05:e1:86:92:eb:9a:f8:b8:0e:fe:43:
17:b8:e9:94:08:75:2b:89:34:b5:8d:28:11:cd:67:fe:55:77:
3d:6f:72:27:f0:50:68:25:ff:25:f1:59:68:5d:a9:18:15:ae:
29:f2:92:ba:6c:6b:5e:ed:1a:0e:25:94:ec:b9:c2:23:33:b6:
c2:e7:f5:64:38:0e:b0:67:89:11:9a:95:fd:f9:92:21:f7:39:
80:9b:88:20:f2:4a:13:a7:e8:7b:9f:51:76:7a:06:55:6e:2f:
10:93:34:40:58:7b:50:9a:0d:b3:7a:2a:99:6d:22:82:eb:09:
ec:ac:8a:4c:ca:03:28:75:f7:cb:6f:c0:21:48:f3:db:99:3c:
a4:60:47:2d:84:80:e0:23:49:4a:5e:4b:66:4f:76:6a:1d:a3:
c9:a6:94:06:4e:e2:4f:54:b6:e1:b9:53:e3:b0:3d:52:1b:a0:
6b:68:56:bd:fa:6d:5a:d6:7e:84:6b:6f:c2:4c:d0:02:e3:b9:
b7:06:e7:bc:35:66:9d:65:31:d7:7a:0a:9a:e3:9b:95:d6:4d:
b5:8c:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:35:32 2026 by rpki-client