Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: 8MQUKG3rxAcDX0APGYvNLOJcyGjzb8lcIP/+zI8RX6w=
Subject key identifier: FD:DC:23:E6:67:C4:C3:49:D6:A8:0A:62:86:AC:00:8B:E4:0A:18:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F955A02A231A6A2937C86F3D3DD9209143361A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Mon 26 Oct 2026 05:02:52 +0000
ROA not before: Mon 26 Oct 2026 05:02:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:95:5a:02:a2:31:a6:a2:93:7c:86:f3:d3:dd:92:09:14:33:61:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a70e8a3af344ed03302a9d616ba74ed6cecc62844f72b314f840d88d45abeb04, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:79:93:e4:c4:e2:f8:f9:ac:ee:0c:36:64:
35:12:08:41:9b:39:20:96:58:99:54:33:b3:76:42:
90:a7:9b:41:86:5c:a0:aa:0f:ff:6a:dd:2b:e1:64:
8a:16:b3:18:e2:79:ef:b3:87:c0:78:d9:63:bb:09:
a2:55:46:e3:71:3f:d0:f3:16:6f:0e:f2:68:70:63:
1f:57:82:15:65:85:60:1b:69:21:ee:bd:c5:ec:4d:
ef:30:a7:3d:ab:13:77:d1:19:c8:8c:f4:ac:4a:14:
2f:97:ac:2f:1b:2d:22:c6:f6:f9:ce:b2:0a:6b:3b:
81:19:2d:81:0d:39:47:07:4d:8d:f4:9f:12:61:ed:
5f:57:d3:63:a9:0f:89:80:19:cf:1e:7b:ff:49:c6:
85:ce:27:9f:f4:16:c5:6e:18:22:a1:f4:ce:bf:bd:
da:c8:aa:f6:92:cd:50:6e:67:51:b0:92:5e:70:fc:
d0:b3:6c:75:9e:88:d2:10:9c:72:2a:5b:1b:be:49:
ab:33:fe:10:6f:64:04:05:e2:23:06:d5:a9:40:e7:
60:7c:24:ff:60:65:31:ce:8b:ac:7a:cd:0c:bb:e9:
2d:f7:e0:00:b8:4d:6a:99:1d:01:3c:c1:82:43:9f:
20:4b:91:db:90:66:fe:23:00:ec:73:58:2e:09:4f:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:23:E6:67:C4:C3:49:D6:A8:0A:62:86:AC:00:8B:E4:0A:18:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
65:ce:04:3f:eb:ab:35:c1:5f:2d:87:d1:41:50:51:2a:ee:cd:
30:d1:ef:cd:3d:23:45:5f:fa:da:19:1b:94:6f:9e:43:ab:fd:
f5:ed:6b:ba:0c:18:98:8c:32:b3:b5:ab:6d:33:8c:56:91:0d:
07:b3:0e:f2:5f:e8:15:4e:5c:15:f6:ab:79:bf:2f:aa:01:24:
02:70:10:18:68:c5:62:fc:34:76:93:67:e6:ea:3e:7b:17:5a:
7f:41:a9:9b:42:6a:9a:86:20:5e:a3:51:e5:80:75:4b:11:80:
ff:1f:9d:aa:24:80:04:5d:06:cf:18:78:59:1a:49:69:c7:07:
60:14:18:64:a5:e3:db:31:8a:e0:5a:4c:c6:0e:cb:77:8e:bf:
c2:f0:f0:70:6a:15:ec:d5:76:ee:ab:47:3c:c4:60:15:89:46:
c6:89:c1:a7:96:60:ea:4d:19:6b:76:bf:a2:8f:07:66:3b:25:
ad:e9:7d:99:1e:d1:df:a7:f1:fe:08:a9:7c:2e:40:91:4e:58:
d3:2e:b6:b1:a3:4e:cf:d2:e6:ca:57:78:63:8b:8b:7f:c2:15:
b0:7d:66:b3:0e:0d:db:40:e8:76:b0:26:97:d0:b0:38:aa:7a:
f9:e7:2e:74:75:fa:f2:f9:34:01:88:3e:86:34:60:3c:fc:56:
90:7d:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:35 2026 by rpki-client