Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
File: 56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa (raw, json)
Hash identifier: 0NCoMrdW8ZUZL0R1M9ByrjN3FpauGFteLugNbRT87JE=
Subject key identifier: BF:10:03:53:53:35:7C:41:81:24:E6:3E:A4:9C:B1:15:4D:4B:3D:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 479D9B325E138E10EF4C747348CF0554FD3E0D50
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
Signing time: Fri 09 Oct 2026 01:30:36 +0000
ROA not before: Fri 09 Oct 2026 01:30:36 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9d:9b:32:5e:13:8e:10:ef:4c:74:73:48:cf:05:54:fd:3e:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:36 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=1aa623421cfc4ca0964a7f066fbb98fb16c75d07dffbcee3ba5d6f086a6565c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:40:b6:10:98:6e:e2:9f:eb:09:49:38:bf:
55:dd:28:19:93:27:14:ce:f1:98:8f:77:f9:70:68:
bc:4e:ed:03:fa:56:ee:8f:10:35:5d:c2:fb:9c:31:
7e:e2:45:64:3c:31:b0:08:6a:d5:68:09:6e:98:16:
b0:8d:2a:bf:59:46:00:9f:71:13:b4:e2:24:77:f0:
88:bd:f8:d8:be:6e:e1:f2:ba:14:e0:bc:38:60:a0:
ec:ed:ef:80:15:05:39:33:41:77:63:8e:aa:ab:e8:
b8:fb:80:3c:4a:78:16:3e:e5:e0:b4:4a:7a:35:10:
3c:ee:07:8e:b9:4b:0d:4b:9b:65:06:f3:eb:66:47:
92:e8:ad:fe:17:68:fd:00:3c:c6:71:9b:c9:81:72:
ef:11:a0:b0:9f:d6:d1:8a:83:fb:d0:fa:85:bf:d4:
73:21:12:2d:f8:46:86:6b:b6:ca:51:ac:6c:2b:b4:
f9:00:3c:81:4e:af:f3:7c:b4:07:72:60:1b:7e:af:
31:cc:43:12:5f:e1:6f:60:8a:d9:33:42:48:5b:41:
e6:7c:be:33:68:8a:45:b5:3a:36:41:a0:b3:c9:16:
2e:f4:1b:ce:21:63:34:b8:e3:6b:03:d6:93:48:ce:
c0:bb:24:fc:f2:ce:a1:1c:25:70:c0:cc:38:48:c9:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:03:53:53:35:7C:41:81:24:E6:3E:A4:9C:B1:15:4D:4B:3D:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
39:ad:f4:22:18:9b:d2:bc:3a:da:4c:8f:0a:da:77:e1:43:72:
ce:ba:0d:2c:84:56:41:5c:74:06:4f:fa:e5:c7:d8:b9:4b:ee:
4a:05:c9:35:a0:ab:ed:5c:fe:db:33:09:fb:c4:f5:6b:26:c2:
92:17:39:29:81:5b:3c:d9:92:20:ec:6b:02:17:1d:0d:ce:53:
31:91:ca:48:59:56:20:bc:63:1a:14:38:eb:88:67:01:96:5a:
9a:b3:dd:79:bf:4f:1d:15:e2:29:16:3a:7e:d5:0a:99:0a:ef:
39:1f:d5:51:8d:c5:81:1b:3f:86:af:f1:a5:7b:86:e4:09:b7:
95:43:1a:22:24:8e:ea:d6:16:5b:93:5e:cc:54:33:be:f2:1a:
66:17:56:31:01:f1:73:da:16:b2:bf:be:45:33:e8:f7:06:41:
0d:7b:ba:0e:dd:91:90:89:c3:2b:d5:93:1f:c2:0c:79:ef:83:
2f:d9:e6:f3:cd:93:73:c3:bd:25:d2:8c:c5:1c:70:f9:0a:32:
8a:08:f2:d0:99:8c:2b:b9:30:87:95:d5:00:aa:10:ba:d2:86:
57:08:b5:bd:ee:2b:83:15:ed:2c:93:96:13:08:d5:3c:16:91:
fe:85:c4:6d:6f:93:bb:30:16:99:27:04:09:f1:61:4c:ce:95:
cd:f3:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:16 2026 by rpki-client