Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa
File: 5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa (raw, json)
Hash identifier: cnVgQmO4AXPR+OOAFnB2xJWFfnCIsgKChO/SUq/P2aw=
Subject key identifier: 0A:A8:EC:6B:27:C3:06:49:72:E6:79:78:08:E5:29:F1:92:0C:15:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16E985B5E99E8293D05426E02F9A4B7D94B2D9AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa
Signing time: Thu 15 Oct 2026 03:30:58 +0000
ROA not before: Thu 15 Oct 2026 03:30:58 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e9:85:b5:e9:9e:82:93:d0:54:26:e0:2f:9a:4b:7d:94:b2:d9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:58 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=d80351c720abe9546b33748f3007e0925a8df653fbd64a33f06835cf6dca0382, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:be:e4:11:38:3a:31:b1:84:55:76:c0:cd:
98:f6:65:64:af:83:ec:24:54:55:f1:fa:4d:9c:e6:
41:6c:07:ff:02:f8:d5:ed:35:6b:e8:53:5c:b8:f7:
46:3e:e0:56:ce:c4:f4:b2:47:3f:74:3e:c1:80:57:
15:b1:68:88:4b:6f:e5:fc:b9:ee:a8:25:48:0b:87:
31:a6:97:f0:29:24:31:ed:b5:f3:d2:08:f6:be:c1:
5a:7b:06:5c:e0:d6:ea:9a:bd:19:76:a2:af:85:1c:
12:9a:2b:e4:58:55:d0:4b:5a:74:c6:62:d9:43:10:
11:76:5f:ed:66:47:0a:1d:2d:e6:a6:45:06:d1:11:
df:b4:27:79:8b:a5:2f:8f:23:97:f9:11:c3:10:ba:
6e:56:17:9c:d5:85:2a:6e:b2:92:d3:9f:7c:4e:82:
3c:07:83:ba:c7:79:08:85:eb:ce:fc:f5:3a:08:2c:
a8:52:c1:04:87:d9:40:fd:4d:c9:f4:3a:80:48:09:
ff:1b:86:47:9b:00:7c:4d:f8:e8:82:44:61:a3:c7:
ca:dd:e1:22:9d:38:4e:20:5b:43:c9:5c:83:41:bb:
09:dd:56:f9:1d:43:5c:07:60:d5:56:7c:7e:c0:a1:
3f:eb:6c:80:67:ca:04:c8:94:1a:19:38:4a:05:0a:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:EC:6B:27:C3:06:49:72:E6:79:78:08:E5:29:F1:92:0C:15:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:9000::/40
Signature Algorithm: sha256WithRSAEncryption
05:13:50:bb:6f:08:26:3a:13:d6:4b:05:9c:01:90:aa:47:b9:
43:4d:30:c7:ed:1f:a0:a6:07:2b:c1:f1:d1:97:9b:a7:ff:97:
1c:e9:4f:22:a6:af:a5:48:4c:71:ea:d8:d0:c2:5f:b3:75:b1:
70:9e:8c:79:25:ba:3c:b3:2d:82:fb:79:bc:45:7d:fb:49:bc:
24:7f:b3:17:64:ce:32:76:7e:ae:f0:db:75:0f:5f:29:a4:b1:
a1:7d:03:45:8c:17:2d:2d:61:59:69:03:24:58:06:00:04:10:
f3:e1:45:db:2d:0f:20:fb:1c:60:08:44:d1:d3:d9:56:c8:a0:
24:2c:84:8c:2f:f3:19:c3:72:7d:b0:8d:76:72:56:df:b2:54:
c4:8f:82:9a:e2:90:03:d3:de:ed:35:9e:46:71:44:44:56:67:
a2:45:e0:fb:fc:17:b2:86:c2:8e:d1:8d:46:0b:4e:ef:a2:0b:
26:5a:fd:ad:eb:6a:95:fe:e9:2f:ae:2e:f6:05:ff:2d:41:be:
71:31:f6:c3:65:5a:c2:bc:91:ec:75:f0:cd:44:1b:9c:52:99:
cd:3a:34:a8:2b:d7:49:dc:6b:c4:e2:7e:49:f5:56:6e:5a:03:
46:30:ef:ef:93:76:55:2d:6d:b4:d0:02:d4:45:ed:d8:04:ee:
0a:89:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:49:15 2026 by rpki-client