Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ba2d71-c4db-41f1-a648-b39b354abfa6.roa
File: 55ba2d71-c4db-41f1-a648-b39b354abfa6.roa (raw, json)
Hash identifier: A7X7cXSrHwGobydZ/un5bRewco0Vay3G3WBbpo3Ece4=
Subject key identifier: 9B:93:1C:76:27:1B:D3:B4:17:8C:39:9B:B2:27:E7:0F:9D:6B:4E:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 145E53DAA042F22C62FC0A6AC039EFCAE87D473D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ba2d71-c4db-41f1-a648-b39b354abfa6.roa
Signing time: Mon 26 Oct 2026 04:50:10 +0000
ROA not before: Mon 26 Oct 2026 04:50:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:5e:53:da:a0:42:f2:2c:62:fc:0a:6a:c0:39:ef:ca:e8:7d:47:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=71066ee3803fe2f0cde3bea8be032462d5fee42c806d3a9a8ee6ebde177e2639, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:af:80:97:09:a7:76:3f:81:d6:23:ef:e4:
71:eb:76:0e:d5:34:5a:59:13:99:19:b5:09:3b:b9:
8c:ed:98:82:06:f1:00:2b:37:b3:7f:5f:7b:0e:51:
03:8f:5b:85:c8:32:43:35:1d:2c:59:ae:30:6d:4c:
a0:49:9f:d5:ea:11:e0:4c:3c:3d:63:7c:9a:c9:c1:
03:a7:07:15:76:0f:80:61:67:86:3f:2c:98:fd:03:
00:d4:2c:e9:4a:31:84:ec:90:16:69:d7:4b:6d:fe:
76:61:83:aa:10:7e:4d:e8:84:3d:43:5f:0d:77:e3:
bd:18:83:30:b6:85:b4:2c:12:20:e5:17:db:6d:5d:
8f:b1:77:a0:7a:56:f1:1c:ed:48:f3:d2:5b:c9:11:
38:f4:3c:a7:b9:07:62:e5:90:b2:3e:68:46:1f:41:
e5:cc:f7:66:a0:25:35:2a:55:01:3d:26:aa:79:df:
80:93:28:59:95:a9:37:fa:b1:8e:a5:d6:36:bc:bd:
a3:4d:e6:05:2f:89:f2:52:87:7c:6f:c8:fd:3a:39:
b9:ae:8a:78:66:4a:27:d6:bd:49:1b:8a:da:60:e1:
e7:7e:78:3c:09:40:a6:b9:a6:be:ae:e0:9c:30:6b:
e2:65:a8:b0:c0:b9:64:1e:80:4e:06:9c:ab:c2:82:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:93:1C:76:27:1B:D3:B4:17:8C:39:9B:B2:27:E7:0F:9D:6B:4E:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55ba2d71-c4db-41f1-a648-b39b354abfa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:8000::/40
Signature Algorithm: sha256WithRSAEncryption
9d:31:e7:51:3e:09:0d:fb:bf:4a:53:94:ac:31:c0:6e:85:28:
52:94:8f:3d:17:67:50:55:9b:d6:ba:6b:17:85:22:12:57:bf:
c8:b1:75:f3:2c:39:0a:70:9a:c9:87:b5:7c:c7:e6:06:bb:7f:
2e:64:34:77:27:c2:b8:76:c5:71:93:19:6b:a1:cc:00:a5:10:
97:e9:4e:e3:cf:a8:42:98:27:da:35:24:f3:4f:ed:95:38:6f:
b8:6f:e6:af:b8:e9:68:ec:bc:7a:3e:07:d5:70:ae:cc:62:7f:
4c:e3:f1:d0:c3:3d:36:37:98:1f:76:4b:79:15:a2:da:67:70:
2c:8c:66:63:73:72:d0:6a:a9:83:82:6b:5c:d8:5f:43:72:e5:
7d:ae:53:ac:47:a0:36:48:09:e0:9e:24:ed:81:48:59:db:b2:
4f:8c:ce:06:8f:e1:80:b2:9a:82:54:a1:6f:21:95:d2:8a:98:
6a:44:cd:3f:aa:5b:4b:c9:ce:d2:a1:8d:ce:f8:b1:00:58:ee:
44:84:26:d5:37:85:66:3a:30:a3:c5:ef:1e:b4:71:8a:b8:0f:
18:5c:cd:78:f0:5d:a4:72:d5:37:c7:74:7c:9d:ee:b4:ce:ff:
73:78:db:99:75:52:cd:58:c2:9a:21:17:c1:5a:bb:dc:1c:78:
b0:1f:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:41:08 2026 by rpki-client