Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
File: 3f1caa71-8276-42c2-bf3a-470ac560fb89.roa (raw, json)
Hash identifier: CqYJCZy4BNsBYBljrVbSdoMt/xGUVlqQehM2kqzfVHw=
Subject key identifier: E4:5C:C2:78:7A:F0:19:D5:69:96:31:F0:45:68:0E:8E:C1:F7:C9:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AEC1EEADA7E37ADFEE0F918778B014AF31097CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
Signing time: Mon 26 Oct 2026 04:30:13 +0000
ROA not before: Mon 26 Oct 2026 04:30:13 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ec:1e:ea:da:7e:37:ad:fe:e0:f9:18:77:8b:01:4a:f3:10:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:13 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a0cc2498caaa5e2685a847a7ffc26e5ebeb4da220eb473272278fb3388bc9372, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:0b:b7:43:2c:01:65:5c:0d:58:13:80:bf:
29:e2:34:73:7a:fa:e0:7c:80:ea:a9:56:ed:8f:1d:
74:8e:94:f1:1c:13:c2:a0:d7:6b:23:3c:16:44:9a:
9c:41:e1:3d:2e:78:24:2f:93:d5:c7:0e:ea:5c:da:
43:6a:f4:05:e9:e9:7d:b0:9d:d4:3f:2c:97:96:24:
fe:53:ee:15:57:1a:b4:27:9c:90:6c:fb:8d:eb:56:
bf:41:7e:bb:19:64:53:99:16:22:da:1a:b1:c6:33:
7c:8b:5a:28:35:c8:22:20:12:f4:58:79:fb:7d:f8:
c9:e9:fc:69:c8:42:73:e3:54:f2:d2:9e:12:f5:59:
ae:d5:4c:50:19:54:31:3b:b3:96:c4:01:9a:9c:4f:
b1:e5:75:9a:b7:8e:52:5b:00:ba:54:06:3a:29:a9:
86:45:82:fd:25:90:5a:2e:91:51:6d:57:5f:be:cb:
9c:00:2f:76:c7:4a:f6:cd:e1:69:f3:89:01:2b:60:
54:d1:80:bd:bb:4c:b2:e2:50:33:a6:7e:98:fe:19:
80:c5:ef:3a:1a:c4:92:a0:f6:95:b4:0f:bf:d4:4d:
b0:a7:da:7f:d9:b6:d6:e0:27:c1:66:be:ac:40:ec:
69:57:c6:0b:27:32:28:10:35:89:0b:20:da:de:27:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:C2:78:7A:F0:19:D5:69:96:31:F0:45:68:0E:8E:C1:F7:C9:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d::/37
Signature Algorithm: sha256WithRSAEncryption
3e:45:9d:19:7b:a6:9c:08:82:a8:d6:4f:14:dd:38:fe:19:c5:
39:99:c9:73:4e:f8:dd:d5:47:98:8c:a6:61:44:b2:12:39:67:
4b:34:74:e0:d7:d3:fa:67:d6:ea:77:5a:00:72:fe:bb:e8:e9:
36:df:ee:9a:9f:7e:28:84:20:e4:01:53:be:0b:d3:18:f9:58:
a8:f4:0b:6d:a7:e4:10:9f:65:30:d1:c1:b3:11:13:26:a2:b3:
0b:0a:a4:c5:0d:06:67:91:8b:3d:29:1c:4c:a5:b9:d1:76:26:
ec:1a:85:9d:0c:dc:c4:df:22:49:f9:d5:68:a6:eb:78:43:47:
07:fa:31:55:30:eb:bc:b5:04:c9:76:42:02:3e:0a:46:e4:46:
3c:b8:bf:d1:9e:43:d8:05:fd:66:06:1c:15:4c:c2:1e:cf:62:
87:1d:e0:ad:39:72:42:75:2c:b3:0a:39:85:fb:5b:95:e7:c6:
7d:9f:25:6c:1c:a3:1a:74:bb:92:ce:0f:10:35:39:d5:33:f0:
c4:66:91:a1:d2:27:24:a8:e9:b9:2c:e9:3d:e4:9a:3a:27:54:
f1:19:c0:d1:3f:31:98:58:ef:52:38:fb:19:29:a3:8b:41:34:
ab:5b:7d:41:9e:08:c4:50:06:0f:83:f3:e6:c0:98:bd:34:cf:
85:9e:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:04 2026 by rpki-client