Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
File: 5836d090-8999-43ab-a38c-f63a0e829c0b.roa (raw, json)
Hash identifier: 5HrNgy4NG0IBvdj84z80j3VP6p11njprP423J66VkqM=
Subject key identifier: 17:D1:8C:4D:BF:E4:68:91:0B:66:8E:F7:AD:DA:A3:CA:C4:DF:46:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 682E04E6C3775463F7463F5B37A1D6F6AEEF67F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
Signing time: Mon 26 Oct 2026 04:50:24 +0000
ROA not before: Mon 26 Oct 2026 04:50:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2e:04:e6:c3:77:54:63:f7:46:3f:5b:37:a1:d6:f6:ae:ef:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=051059d3d2981cda469cd1549d5e6022e039fbed30b13f3b954d4ef18056b40c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:da:78:38:c2:0b:2c:b1:fe:c3:8f:b5:38:
67:0a:e8:a5:25:92:77:e9:40:f2:6d:45:3e:e6:a4:
7d:dc:da:47:8a:1a:7f:9e:aa:04:a5:8c:a3:0a:36:
ff:c0:8c:54:b3:20:9c:61:be:09:65:d1:ed:1a:a8:
09:5c:9a:21:f4:b3:1a:26:aa:4d:92:49:e5:9d:de:
2a:89:35:33:50:bc:e9:06:82:73:06:d8:56:af:7f:
54:45:cf:cf:d3:0a:09:80:8e:e2:bf:75:95:ff:37:
a8:8f:1c:f6:e7:fc:e8:5c:87:18:25:a5:65:51:4a:
16:77:96:ef:f4:85:db:6a:c9:11:cc:a7:97:49:1c:
10:b5:98:5c:32:6c:ca:7e:5f:7d:62:f6:d1:3a:2f:
9b:86:15:9d:7c:8a:94:bb:22:57:e4:97:35:ae:86:
3f:5b:72:c1:b5:d9:7f:b1:c0:6e:88:a5:15:72:53:
30:ea:26:30:56:c6:e2:28:c9:e7:ab:7b:50:85:eb:
d9:36:40:d9:38:a6:05:fa:f3:0f:f5:40:cb:bb:55:
19:d3:ce:80:3c:13:27:3f:e0:ea:d5:bc:1e:c8:0a:
69:c7:49:17:00:dc:9a:5e:74:a1:09:1c:d5:27:57:
9f:12:6e:63:48:fa:48:1c:76:43:56:a3:7f:9e:08:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:8C:4D:BF:E4:68:91:0B:66:8E:F7:AD:DA:A3:CA:C4:DF:46:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
69:ed:92:bc:21:63:e6:15:cf:01:e1:ee:41:1b:43:16:4f:b1:
f6:65:e7:d4:06:cc:e8:36:b9:86:45:b8:49:df:8d:57:cd:a6:
8f:33:f5:fb:7d:fb:03:a8:56:16:32:6f:8c:bb:da:e4:23:ba:
16:c9:2a:0a:12:fb:70:63:fe:b7:d7:fb:b3:83:7d:43:fe:0d:
3e:0b:ed:11:d9:8e:61:b1:ff:9d:22:d3:de:ec:06:9a:ce:0e:
35:6b:ad:1a:91:ef:c7:b3:73:97:44:8a:b5:58:02:a4:cf:8e:
e8:61:86:50:cb:d7:54:9e:15:39:6b:49:a5:38:ed:f8:42:f5:
e0:35:49:11:c1:0d:27:16:65:9f:19:6a:7d:7a:6b:67:e2:a2:
8c:66:51:11:33:2a:89:af:4f:9d:d4:64:6c:f7:c3:97:21:b1:
e4:be:ea:b3:d4:9d:6b:b5:f1:95:a3:49:e9:51:67:aa:e2:1c:
08:70:e5:e6:2b:33:50:5b:55:2f:ef:92:61:49:aa:cf:1e:03:
48:4a:76:44:e4:95:51:73:66:96:0f:89:09:de:3a:85:09:e6:
f8:ff:67:89:a0:30:e4:60:c5:9e:0d:75:73:32:93:47:9b:dc:
39:38:a0:52:92:21:1a:33:b5:7f:56:58:33:e7:ba:30:8c:c2:
e2:ef:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 07:40:21 2026 by rpki-client