Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/572100ba-71f4-48c4-9e53-155d24984558.roa
File: 572100ba-71f4-48c4-9e53-155d24984558.roa (raw, json)
Hash identifier: p4Q4YDLMyoyIMXSRKPAErRb0F8HfOGJkmtaJ9+zRfOA=
Subject key identifier: E8:CA:64:08:82:5B:12:8E:E4:7F:85:97:6B:EF:06:EE:51:66:2C:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21D65AC3DB82143F58EAE38D8893D1F1EDF531A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/572100ba-71f4-48c4-9e53-155d24984558.roa
Signing time: Thu 29 Oct 2026 01:02:27 +0000
ROA not before: Thu 29 Oct 2026 01:02:27 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d6:5a:c3:db:82:14:3f:58:ea:e3:8d:88:93:d1:f1:ed:f5:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:27 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=211712c940c8b0febbb749484b9206ab756562badd197b18c63462a47aa3cf2d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:b8:8b:69:09:bd:70:9a:f6:fa:2d:b2:d5:
5e:38:91:16:12:07:1b:7c:10:17:d5:a6:99:82:05:
27:6e:1a:d3:f7:5c:ab:1b:ac:cd:05:91:a0:83:8f:
d9:35:fb:bc:4b:78:e6:e1:fc:dd:cb:65:a8:0b:0b:
08:25:53:cf:a5:ff:0a:fd:46:4f:b0:df:67:66:1f:
4c:30:06:f1:37:dc:61:5f:4f:b4:49:2f:7b:e1:68:
73:20:8c:78:5a:c2:1d:32:26:e7:a7:73:b3:b0:ba:
bb:98:6a:9d:54:82:34:be:b2:5e:ff:37:07:97:32:
5b:92:69:90:34:2d:5b:0f:9b:ae:ce:70:8f:f7:82:
c2:62:a7:25:5c:cc:5f:cb:a4:4f:5b:bc:aa:f4:7d:
f6:2c:8b:1f:4c:19:a6:c9:9a:ac:90:72:e1:4d:ec:
1a:c2:d0:41:e6:28:9f:ab:ad:d3:fb:16:46:e0:d4:
a1:2d:f3:0e:e2:40:f6:d8:8d:e6:db:6d:f6:35:46:
cb:e6:2f:eb:93:3e:02:5b:c4:f0:f5:0a:0a:63:ae:
e6:5d:c9:1f:87:2a:f1:ca:6b:2f:57:84:0e:89:01:
81:f7:bd:4c:ac:db:83:21:0f:82:ab:5c:e8:20:87:
d7:85:33:e7:a1:2c:76:43:61:67:37:af:ba:b9:a8:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:64:08:82:5B:12:8E:E4:7F:85:97:6B:EF:06:EE:51:66:2C:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/572100ba-71f4-48c4-9e53-155d24984558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:b000::/40
Signature Algorithm: sha256WithRSAEncryption
40:dc:04:80:fb:f2:d6:54:d2:35:fd:fe:d8:6c:55:62:84:95:
00:33:e3:1a:df:a9:93:55:17:94:72:b7:ab:5f:c2:ad:18:3f:
91:90:c4:8e:28:81:98:3d:c1:87:22:ad:9b:a6:ea:8c:c4:0c:
90:b1:5d:e2:95:d1:bf:93:6f:9b:09:37:d5:d2:62:de:45:2b:
78:bc:41:65:5d:13:3c:6e:f2:66:2e:34:b9:d4:78:75:e9:5d:
ae:ce:68:cd:b3:51:ea:6d:96:ca:b7:bf:0b:16:d6:ac:9c:d8:
06:59:c8:e7:74:d9:41:01:88:02:50:af:c8:c0:34:de:70:cd:
ff:2a:9a:53:c3:37:59:be:38:2c:94:12:dd:6b:f4:fa:2f:23:
c3:72:69:88:e7:12:d1:d5:21:b9:7d:87:d6:81:41:79:9a:9f:
60:98:e4:bc:18:72:38:af:a1:ab:62:5e:cc:35:15:49:e0:c7:
bf:d9:46:7d:fd:77:b4:5f:ac:52:d9:44:ac:e5:db:fd:1d:7e:
93:08:ed:e0:35:8d:1a:b0:72:20:dd:40:e6:3e:d3:25:a5:3b:
6f:91:35:eb:9d:e3:80:fa:56:de:61:b1:b2:28:2d:1f:24:87:
ed:25:3b:b4:99:f4:61:76:21:17:1c:d9:f2:f0:b6:c8:eb:79:
3b:47:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:35 2026 by rpki-client