Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa
File: 515f7e85-9223-47e5-be2b-42ec6a12a88b.roa (raw, json)
Hash identifier: zEpGGBq6yzCl9x2XVrjEFKfzDfBub5sYIsMYRs2QNvw=
Subject key identifier: FA:13:8D:0E:11:EB:33:D0:B9:8D:20:CE:C3:3F:EE:B2:12:7A:F3:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BA512B30FCB3B28922C2D80576F57F71809B794
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa
Signing time: Mon 26 Oct 2026 05:02:55 +0000
ROA not before: Mon 26 Oct 2026 05:02:55 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a5:12:b3:0f:cb:3b:28:92:2c:2d:80:57:6f:57:f7:18:09:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:55 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=55f82ec4052f25c1e4d6ea05c71326611d20955d47eeabd5e1a9a11c04f87bbc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:49:ab:43:cc:14:d7:0a:1c:5d:15:36:da:
aa:a0:47:ed:dc:61:c8:fa:89:cc:eb:cc:b8:49:cb:
be:8b:96:e0:23:e8:23:48:a7:82:75:c5:f4:83:f0:
44:88:24:30:27:10:d3:67:35:e3:dd:cc:5b:88:b0:
28:e3:d5:53:e8:01:77:13:52:df:84:ff:f4:1b:34:
3b:23:2b:97:01:0c:fd:ee:0c:2e:88:b4:15:3e:df:
7b:61:52:06:45:2c:7e:c2:ab:7a:9d:59:7e:30:df:
43:64:da:90:7b:1b:d7:50:1c:fb:ef:c4:01:84:4b:
f3:bd:2d:b0:99:c2:66:20:d5:ea:cb:dc:9e:68:dd:
4d:f8:e6:f8:1c:df:6c:11:1e:b2:3a:0a:b3:c1:c8:
b9:ef:86:84:46:cc:6d:31:03:56:76:6a:14:f3:f6:
f9:10:af:9e:38:f2:32:eb:3d:27:1c:4c:b3:96:20:
a9:8a:dc:53:65:eb:84:5f:95:ac:3c:bb:7e:61:8b:
c9:19:fa:89:fe:22:0c:08:20:9f:cb:03:a2:ed:f3:
9d:e9:3e:94:ae:00:d2:46:5c:21:e4:5d:d8:45:dd:
75:ef:a1:0b:58:cf:7b:62:41:b4:ff:21:51:25:c9:
b8:a6:5b:da:c3:2e:69:a0:5b:ce:cd:0f:01:be:6b:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:8D:0E:11:EB:33:D0:B9:8D:20:CE:C3:3F:EE:B2:12:7A:F3:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:9000::/40
Signature Algorithm: sha256WithRSAEncryption
44:2e:f8:a3:38:b9:f0:0a:d6:63:94:ec:45:50:5a:89:98:34:
23:51:e3:60:96:c7:40:d1:62:b8:25:48:27:44:94:96:ae:c8:
dc:85:d7:65:e4:02:34:d1:7e:aa:67:25:63:f2:eb:fe:eb:61:
d4:0a:71:5f:09:cc:d1:92:40:20:c0:d4:88:17:14:27:3d:7a:
1b:0c:40:71:9f:3c:ce:5c:03:d8:22:5f:88:29:a1:4b:a7:98:
02:43:c0:06:3d:81:79:5e:2c:6a:a3:dd:1a:7d:d3:3c:33:8e:
9e:9c:36:1e:bd:c3:85:f3:0f:4f:bf:3c:d3:47:b6:3a:37:87:
aa:5b:f8:6c:40:41:ff:80:97:66:d6:2a:dc:55:2c:83:19:b3:
cc:23:9b:5a:8d:d6:16:12:d5:c2:f1:8e:7c:52:66:6a:77:13:
40:0f:a8:b9:fa:f0:60:39:7c:15:42:0b:af:d8:1c:97:97:1b:
a3:d1:c0:13:3d:94:bc:0e:28:9a:84:ab:2a:e8:1c:9d:41:a2:
ab:77:57:23:b2:6c:da:ac:d2:c1:ed:d8:8d:ab:c3:18:4c:04:
89:12:52:e7:eb:88:5f:59:ec:35:a6:6c:1e:76:71:b3:76:26:
14:4e:a0:d6:93:11:6a:0d:37:16:a7:dd:bb:ab:a4:dc:69:76:
51:85:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:46 2026 by rpki-client