Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
File: 5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa (raw, json)
Hash identifier: hL32m1Af+2y0iATm9IXHcnebA+iQy1ACkwG4/Tvydpk=
Subject key identifier: F7:FD:9F:DD:F3:43:80:EE:9D:05:DB:F7:36:E4:66:69:D8:41:FD:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D79C232C5A9AEB5F5DCEFF5C031182040ED0009
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
Signing time: Thu 29 Oct 2026 01:03:07 +0000
ROA not before: Thu 29 Oct 2026 01:03:07 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:79:c2:32:c5:a9:ae:b5:f5:dc:ef:f5:c0:31:18:20:40:ed:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:03:07 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=9ce1a44c78745d3e6a1009602880b580edeff49147d937e6db347e433c7c2095, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:a3:f3:15:9d:0d:73:69:37:34:09:53:6c:
e9:45:93:43:3d:17:19:73:8d:2a:53:38:c1:33:ff:
ea:8a:5d:ce:dd:50:26:64:88:74:46:7f:dc:ac:48:
ba:11:e9:4a:81:a0:31:53:50:7c:74:93:2e:a1:4f:
37:14:74:bc:90:56:14:f2:85:2f:77:e4:4a:91:8a:
a1:6b:d8:53:8b:db:32:51:68:b1:cf:f9:29:02:28:
e0:d0:32:aa:4e:15:be:c3:42:92:da:d1:d3:f2:55:
4d:91:76:b1:de:4e:11:29:a2:0c:15:2b:19:73:01:
8d:16:bd:7a:38:18:19:c3:95:b5:6b:a6:a1:8c:a3:
6e:f7:78:20:83:5d:3f:4a:b8:74:c4:6e:36:9b:50:
8d:46:cd:95:32:ca:a3:e1:8a:c5:8d:9e:97:76:f5:
ad:b2:93:fd:79:00:32:de:9c:69:c5:46:48:3b:d5:
2e:e4:92:54:59:56:9b:72:a5:47:1f:de:1f:3a:84:
ae:5d:67:00:67:57:f5:1d:e7:21:5c:6b:8b:73:ad:
f2:83:36:e3:87:37:8d:33:7e:af:89:7d:01:a8:0a:
8d:6a:5f:18:90:d0:55:c1:56:69:cb:a3:2e:18:e3:
fc:17:ed:1c:47:44:e8:86:4a:86:bb:85:8f:5e:7f:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:9F:DD:F3:43:80:EE:9D:05:DB:F7:36:E4:66:69:D8:41:FD:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
a7:a9:2e:71:15:2c:ab:e5:9c:2b:c8:a6:97:3e:7a:17:5d:87:
80:d9:e6:b6:3a:cf:65:60:44:00:6a:1b:f0:5c:f0:cc:72:c2:
29:5f:f9:13:97:15:c1:07:3a:7f:72:b8:47:23:5f:b4:43:7f:
e9:5f:a8:38:2f:fc:72:88:bb:5f:ad:a2:db:62:b6:37:0f:08:
15:fb:53:30:ad:a5:25:53:05:37:eb:68:b7:c7:75:43:ce:26:
13:4e:22:28:76:9e:16:a7:f5:76:d2:50:56:19:4c:3e:6d:69:
1f:92:cc:b9:5f:99:d7:d1:6e:63:e2:ad:bc:13:62:ea:e5:a9:
af:47:e9:59:a6:3d:f8:8c:ce:2f:b9:c2:9f:b5:15:33:88:04:
2b:65:57:a4:a1:c4:38:d7:e1:33:42:1a:3d:61:bc:62:a0:1b:
d0:2a:1f:ee:3d:6c:e0:20:89:81:30:e0:56:3e:ca:71:77:58:
3d:99:36:d6:f0:95:80:48:40:78:f6:09:9a:25:ef:b8:7d:f8:
1b:e3:b7:ce:96:b4:ed:e1:ac:a0:ab:e6:76:6b:56:5d:6c:93:
b7:a7:c7:21:c9:5a:fb:f9:f5:fb:f0:c8:4b:89:bf:fc:e9:9b:
85:70:9f:f4:04:e6:5c:3c:19:fa:cc:6e:96:7b:45:fc:f8:e7:
e8:ab:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:54 2026 by rpki-client