Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cdc9843-4a30-4528-b6f5-2b25ed0153bd.roa
File: 5cdc9843-4a30-4528-b6f5-2b25ed0153bd.roa (raw, json)
Hash identifier: LwYTRCPNuAyd/LAYfMiauBiTBTCplX0hCLv4HJuPsnA=
Subject key identifier: 4F:B7:64:AB:10:36:DA:5E:4C:8F:AE:16:EC:C7:38:E1:5B:F9:74:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03750991177FBAA87297BB934A480EB06F4900C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cdc9843-4a30-4528-b6f5-2b25ed0153bd.roa
Signing time: Thu 08 Oct 2026 17:24:45 +0000
ROA not before: Thu 08 Oct 2026 17:24:45 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:75:09:91:17:7f:ba:a8:72:97:bb:93:4a:48:0e:b0:6f:49:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:45 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=fb14847f7640a12d35bc0735d11fa9425a97e57c6f5f55c27f433dc1681ceef5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:f0:95:71:28:ae:03:21:b4:f1:0b:e1:04:
0c:ec:e8:80:dc:fc:06:0c:63:29:e3:ef:30:7a:28:
32:c2:0c:54:c3:0d:f9:a4:5d:9a:0e:0c:76:25:e0:
b4:01:d2:1f:88:00:6d:78:32:c6:d2:b3:80:3c:53:
a3:d8:7d:ef:79:64:54:e5:c7:e0:f4:ed:d5:56:b2:
8e:ca:27:4f:33:bd:5c:41:9a:2e:d7:c4:21:74:2e:
19:89:7a:10:2a:cc:4a:65:48:cc:2e:a4:70:c0:5b:
05:58:e6:ca:93:38:37:96:e7:d1:e1:2a:42:b6:e8:
5a:1d:20:e2:c6:87:e5:2d:9d:39:90:6d:3a:df:7c:
39:a6:57:0b:76:16:85:b3:4a:35:6b:ff:87:8c:f2:
09:95:fc:fd:91:b5:2f:f4:6a:c5:3f:e9:a6:d2:dd:
49:5b:18:7c:2a:a3:77:c9:1e:b6:49:d1:5d:ca:af:
3b:56:9e:50:8c:38:11:7b:a0:c5:e6:b7:2a:1f:11:
dc:fa:ab:b7:72:6a:2c:8f:ac:b9:51:25:5d:bc:b8:
04:60:5a:e7:9b:9c:3c:f4:c9:f6:70:b6:b1:91:f2:
e8:8d:7f:59:bb:a5:de:1b:65:bd:0b:e6:a4:c0:89:
65:c2:c3:4a:fc:5b:01:b3:43:13:14:89:8e:b8:21:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B7:64:AB:10:36:DA:5E:4C:8F:AE:16:EC:C7:38:E1:5B:F9:74:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cdc9843-4a30-4528-b6f5-2b25ed0153bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:8800::/40
Signature Algorithm: sha256WithRSAEncryption
38:b1:7f:b2:e4:54:9d:a3:62:1d:bf:77:37:20:40:6a:32:01:
28:a8:d2:50:55:7a:94:eb:cc:4b:fa:a3:d5:54:42:2d:44:7b:
50:a7:e9:91:42:cb:d9:dd:e1:b8:94:d6:9b:b5:ea:2e:cf:4a:
da:8a:52:a5:1c:8e:54:c4:8b:cf:02:1a:97:db:e6:d4:07:2a:
af:1c:f4:3d:aa:eb:3e:5f:03:b4:5c:d8:91:83:81:ad:6b:a3:
d0:2c:fd:d5:ea:0a:e3:f0:91:32:f4:73:f2:40:38:a1:7d:2f:
b2:57:81:1f:0d:0e:f2:8a:57:fd:6b:94:46:a9:c2:9a:ef:3a:
0e:60:94:b7:ee:ee:1e:ca:a2:31:db:2c:eb:0d:53:af:49:0e:
86:b8:bb:39:e1:ad:54:f0:f4:19:75:b7:d0:f5:15:bc:d9:35:
94:b3:27:b1:a9:f6:b0:02:d1:66:48:51:cb:b3:3e:47:44:f9:
b9:12:a8:39:72:e6:29:56:f7:76:6c:47:d7:ff:fb:a2:ff:2b:
3f:8a:69:2a:14:04:bd:e8:fb:9a:22:19:6c:dc:48:56:14:b1:
c3:12:f9:36:c3:8e:ef:4a:52:32:ac:54:81:38:f7:60:e8:d7:
ec:0a:59:84:cf:8c:6f:d7:7a:9b:0b:a9:ec:bc:11:5d:5f:ab:
46:79:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:32:47 2026 by rpki-client