Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
File: 3c844715-62ed-456f-9c5c-b7ee56a1e984.roa (raw, json)
Hash identifier: XwNKHAs2BeV8BSzKiBZ6K7/xSUYFzcNoooMfHNKQpHk=
Subject key identifier: 95:E6:B8:FC:E1:51:F9:E9:09:F3:24:EA:48:06:67:C3:3B:F0:AE:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EEE1EF94CB79F365DD6D8BA5648FC71EE05A526
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
Signing time: Fri 09 Oct 2026 01:30:33 +0000
ROA not before: Fri 09 Oct 2026 01:30:33 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ee:1e:f9:4c:b7:9f:36:5d:d6:d8:ba:56:48:fc:71:ee:05:a5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:33 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=6569f8ffefb66c031ca33787ed5d0d7bd117ce70094aa139fe16961d30fae4b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:9e:dc:3f:3c:6f:3b:d5:90:8e:dd:dc:cb:
78:9d:15:6d:00:7c:1a:75:1c:56:fe:18:2a:e6:58:
e6:84:83:02:69:50:2a:0f:cc:3d:99:eb:ad:ba:85:
ca:22:26:01:2b:d2:ec:35:73:c5:02:8f:ce:56:7b:
0c:59:cf:62:f7:0d:2e:5c:2b:a2:3c:de:73:17:12:
88:35:d4:1c:0b:fb:62:e6:d9:42:36:00:97:a4:9a:
4e:ee:2d:f0:a7:1e:ff:33:17:45:34:6e:6c:45:49:
cf:3f:e7:7f:97:0f:d0:ec:3e:d4:12:57:ae:50:aa:
97:17:86:86:60:04:a5:f3:09:99:3a:a5:ff:74:a0:
5b:10:6f:55:6d:ba:81:0e:ac:26:21:08:23:fa:f4:
27:37:8c:77:fe:2a:01:69:1a:ce:d6:76:fe:53:ec:
37:24:dc:76:76:81:ba:5a:4c:0f:c9:68:ca:2b:80:
8b:d6:04:53:b3:10:15:88:e9:2b:5f:4e:ea:a5:47:
24:85:33:d2:71:af:04:e7:7c:27:f2:33:6f:42:85:
2d:a8:4a:f6:c9:bd:56:3a:4d:c5:1b:8f:20:62:84:
85:82:5a:da:96:01:d8:fe:68:f5:b9:4e:27:a0:de:
7e:1c:bf:65:91:a9:82:64:4e:e8:08:bb:99:86:de:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:B8:FC:E1:51:F9:E9:09:F3:24:EA:48:06:67:C3:3B:F0:AE:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c844715-62ed-456f-9c5c-b7ee56a1e984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:5000::/40
Signature Algorithm: sha256WithRSAEncryption
76:48:13:99:9a:66:aa:fa:88:f6:bd:d2:68:73:17:b8:ce:ec:
2b:f5:eb:9d:20:5b:4c:cd:44:9d:4e:89:17:07:f9:b9:a4:49:
9b:63:59:a6:ac:ad:51:60:7d:5f:94:c2:5a:6c:e2:10:8c:09:
b4:08:f6:28:b5:b1:02:55:1e:17:da:9a:9f:77:da:e4:b9:ba:
e9:f1:5b:ff:23:9a:dd:b5:29:25:16:bd:e3:42:e9:2c:ff:91:
70:1b:e9:e4:a6:f6:81:eb:8e:b3:fe:6d:6f:e1:b8:27:c9:b3:
18:10:a0:95:13:fb:f9:80:2f:6b:a9:bb:e1:06:a6:d8:d1:7e:
ec:ec:27:90:e3:bd:4e:9f:a6:3d:33:0b:50:b0:ee:e5:cd:15:
00:ce:b6:01:30:a3:30:f2:66:fd:71:aa:e2:6d:77:47:a9:90:
39:89:c9:7a:c3:89:15:9e:14:6b:06:f6:23:f1:02:86:9b:43:
9a:69:63:e8:92:47:61:51:fe:7c:6a:1b:d4:2f:0c:ae:52:22:
5e:aa:b7:93:86:66:a7:64:d8:31:fe:7d:8d:2d:0b:01:cd:bb:
c1:a6:41:0b:59:2a:43:84:1f:88:23:f7:8a:33:06:ab:c2:e7:
27:2d:6f:e0:17:45:6e:3d:b5:d8:a9:52:0f:6a:7a:c8:89:0e:
b5:c7:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:44:00 2026 by rpki-client