Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
File: 5f28c807-572d-4641-be39-53109963f4c3.roa (raw, json)
Hash identifier: I06ToTGsyjR5GLImaYESHq7hoJqGvN090SxxPuFmAjs=
Subject key identifier: 9F:88:B5:8E:F9:B3:63:BF:1F:DF:0E:F2:10:47:8C:5E:86:B9:C1:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67DDE625FD9E3CDA66F50AE086DEA658D19DAB4A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
Signing time: Mon 26 Oct 2026 04:31:06 +0000
ROA not before: Mon 26 Oct 2026 04:31:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:dd:e6:25:fd:9e:3c:da:66:f5:0a:e0:86:de:a6:58:d1:9d:ab:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=b379bdf478b7adeb8257112de7da070436fc699ee8a3ae5cd0de7bf9082c10be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:d7:8d:b1:a7:13:e6:84:e7:3c:15:ea:e7:
36:23:fb:0f:92:cb:14:54:da:8a:1b:f4:00:94:a7:
7e:54:82:c2:da:f4:f2:69:5d:be:c7:db:14:cf:f0:
81:e5:f4:f6:8f:6a:4d:8c:c7:5d:a1:f5:d3:45:16:
00:74:7d:a7:ce:ad:45:25:fe:cc:53:3a:47:8a:b1:
d2:28:84:9c:a5:0a:01:08:2e:a0:26:74:10:ec:fc:
4f:50:a1:15:10:c8:57:03:a0:9a:0c:51:34:8e:55:
5a:6d:06:f3:71:1c:ec:13:00:f0:4d:b8:45:cb:ab:
6b:fa:42:17:34:b9:4b:9b:26:60:c3:11:e9:7f:af:
ff:0f:32:28:de:ed:5c:f5:da:aa:f2:6d:da:95:f9:
92:fc:60:61:5e:a2:8b:b9:ec:88:0b:a7:76:c6:2f:
27:1e:90:aa:32:57:8e:33:56:f6:8d:85:c5:ef:4b:
3c:ae:68:48:71:97:57:29:c4:f3:62:32:2b:03:0a:
0d:98:51:19:0a:70:ae:7f:4a:b9:fa:22:b5:62:65:
b5:89:ab:af:b8:ec:d6:6c:42:58:09:79:c7:bc:7e:
a8:cb:85:52:f0:5f:75:09:1a:af:94:32:1c:d1:af:
34:ec:ff:64:48:f7:9e:4c:5e:af:0d:b2:63:3c:87:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:B5:8E:F9:B3:63:BF:1F:DF:0E:F2:10:47:8C:5E:86:B9:C1:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:a000::/40
Signature Algorithm: sha256WithRSAEncryption
82:12:e3:30:a2:6a:27:f4:d4:b5:6a:ab:3b:5b:cb:35:34:31:
c0:84:3f:f8:1b:c3:a6:16:41:62:f1:a3:62:4f:92:6c:62:09:
3e:87:c4:04:fc:41:4a:61:31:b8:28:38:33:cb:9a:ec:54:4b:
81:3d:dc:8b:51:b5:40:99:0a:f6:92:38:5a:df:4b:72:b7:aa:
93:58:88:d8:22:35:a8:b7:c1:a9:a4:1b:e8:0e:71:9b:f2:5a:
bf:62:98:24:a3:1d:79:02:3f:0f:3b:ce:4a:d9:9d:58:96:1d:
71:1c:e4:16:c9:9e:1f:9d:15:6c:15:ff:73:7d:21:e0:79:b9:
7e:c7:b0:1b:9c:8b:73:64:70:e9:72:c8:1f:d7:7e:f0:dc:5d:
45:40:cf:33:c2:27:96:66:61:b5:cd:92:78:f0:c7:0b:75:a7:
27:77:f1:36:c4:e9:cb:7e:14:9a:38:74:4a:04:9c:26:15:f5:
8e:62:32:88:1a:15:ee:15:48:0c:7c:10:81:c3:65:d2:4e:8e:
9c:7b:e4:23:fd:b1:e1:94:f8:2d:37:43:b1:44:5a:e9:8a:47:
cd:75:87:3c:17:42:0c:f7:12:09:60:68:dd:f0:cd:8c:db:4e:
61:20:d9:38:f3:12:05:a4:9e:86:58:c7:46:36:bb:cb:42:2c:
b2:66:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:24 2026 by rpki-client