Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
File: 3ef5e7b8-24ad-41af-8334-2eff292a769d.roa (raw, json)
Hash identifier: o3n/sSS89i81bF1zOsVIw0yhvsJTdLVycXxK8DzOFnw=
Subject key identifier: BA:DA:D5:87:53:DC:AE:28:37:BD:39:EE:B2:36:F1:56:68:4B:2E:37
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A23DACB0029851B743931541E3CD3380E90187D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
Signing time: Mon 26 Oct 2026 05:10:53 +0000
ROA not before: Mon 26 Oct 2026 05:10:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:23:da:cb:00:29:85:1b:74:39:31:54:1e:3c:d3:38:0e:90:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0ee6847bbc7bd1d5e8f8e1f66de6e1876fc173477f12dd54a919233e3795e374, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3c:de:54:19:8f:ca:40:d1:d9:9e:67:e9:49:
c4:4b:77:0d:81:81:25:c6:29:51:bf:f3:5b:bc:b6:
26:a3:75:83:3b:b6:be:83:ce:91:f6:8e:0f:df:c2:
e0:3c:3a:34:48:eb:aa:3e:59:1e:78:db:f6:c6:8d:
8c:2f:0c:e7:5a:df:cb:f9:17:1e:a4:5c:65:99:4d:
eb:cf:e8:d9:7a:f4:d3:70:22:43:3b:8e:da:0d:4f:
47:38:79:3c:10:77:37:58:4e:f2:46:fe:59:cd:54:
3d:35:23:10:e5:e9:4e:c5:86:cd:df:8a:4d:16:05:
a0:50:6b:63:5f:27:85:4b:47:76:91:db:c5:33:a0:
bd:0f:2c:0b:a4:5e:3e:38:2b:67:46:28:10:b9:3b:
07:68:53:89:3c:69:e2:bd:b1:2b:4d:57:7a:d9:ff:
13:71:b8:23:a4:ea:44:18:ab:f6:2d:0f:c9:e5:22:
ec:82:49:34:82:4c:01:c6:06:d5:12:18:ba:61:9d:
fd:53:68:3d:68:4f:67:bc:4a:0f:2d:12:58:c9:f3:
8f:51:ef:0b:61:0a:22:3e:4b:ec:35:79:81:75:8f:
45:23:35:f0:8b:3b:73:e8:65:04:e7:f9:34:f1:14:
04:fb:1f:97:b9:38:75:8d:53:ce:cd:d0:e8:48:2d:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:D5:87:53:DC:AE:28:37:BD:39:EE:B2:36:F1:56:68:4B:2E:37
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
62:f3:6e:8b:35:f2:49:c3:15:e4:62:f3:f4:3f:d3:91:a7:ca:
89:38:23:24:41:00:69:b2:28:e8:c9:21:c3:61:d4:d7:73:84:
ae:09:55:76:21:3e:f2:dd:29:80:0a:e8:d9:da:62:29:04:e7:
5b:92:88:af:f1:93:90:8c:e2:01:c0:4b:f8:44:1a:ff:ef:da:
b4:f2:8a:5f:9f:74:b2:f7:e1:e1:80:0a:40:58:56:da:d3:23:
b2:47:a9:a2:6a:79:3d:eb:52:b6:0b:f6:f8:a3:46:23:95:dc:
ef:fd:f2:4a:c0:35:a6:e9:4a:38:27:16:7f:70:a7:7e:79:b0:
41:b6:b1:a5:2d:dd:4d:84:9f:21:a7:fa:56:a3:54:92:50:2c:
aa:ae:e3:8f:18:8b:72:bb:05:bc:1d:45:aa:48:3a:08:ab:8d:
6a:d8:2e:d7:40:48:ed:fd:6a:66:37:87:0b:a5:90:70:71:5e:
2e:7f:42:a8:25:81:2e:df:30:4f:86:da:3e:2a:45:f3:a4:3a:
e4:49:b7:18:56:3b:8b:d0:75:33:8c:6b:2d:b9:5c:44:be:e2:
3f:6c:ca:50:9e:30:db:cc:ce:7d:8f:ea:02:13:35:10:5b:f5:
22:2b:a2:1f:b9:eb:84:4b:6c:d2:f2:3a:97:e1:dd:46:59:2b:
e6:cb:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:43:03 2026 by rpki-client