Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
File: 5fe931ae-e353-437d-9738-79004c5e9188.roa (raw, json)
Hash identifier: nqvgDZfYEylgzOE8yfmLfPmp6p0hoBW2Lfp9NzLDm8Y=
Subject key identifier: BF:52:B6:17:1F:19:1E:10:7B:83:FC:BB:B9:B1:14:75:31:33:86:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 033C8A751EA2953C40325BABC648EF9CB559650D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
Signing time: Mon 26 Oct 2026 05:31:07 +0000
ROA not before: Mon 26 Oct 2026 05:31:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3c:8a:75:1e:a2:95:3c:40:32:5b:ab:c6:48:ef:9c:b5:59:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=04d8e954af183073520b67042edc18b5bd730cd12e1cef05475c8da9e4aa1508, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:da:21:0e:92:e5:b5:07:2b:80:2f:b4:b9:
b6:c0:a8:07:25:2d:86:19:06:ab:7b:77:98:83:42:
63:e3:a3:da:89:9d:45:a6:1c:8a:d8:f9:7b:13:0c:
85:5e:37:13:ee:f9:7d:b1:e1:e1:f9:69:01:0b:51:
79:da:37:08:01:2e:94:cf:93:90:1d:37:d1:70:09:
8b:13:41:c4:21:21:18:b1:d0:7f:79:fd:1e:34:8f:
2e:b2:7d:5f:48:ed:c1:a1:96:1b:66:b0:69:0e:e6:
51:f3:d9:a7:5b:56:25:fc:be:27:57:2a:7d:f4:b9:
1c:cb:95:aa:b5:e3:b9:f7:55:5d:8f:2d:c0:4f:a5:
db:10:c5:0e:10:f1:5a:8c:ca:c8:75:80:1d:ea:84:
e1:ab:89:d7:46:e6:53:51:db:a2:9e:2b:eb:af:18:
2f:8d:bb:8c:85:d1:1d:63:f9:ff:33:bd:03:24:5f:
68:fa:9c:04:e8:ed:f6:0b:54:cc:e6:de:26:d2:6d:
59:a8:14:2e:51:e8:ae:1d:30:8c:45:6a:d0:77:9d:
81:cb:28:2d:1f:4a:b1:40:e6:e3:09:7f:a9:52:3d:
58:87:69:15:ee:8e:b9:d5:44:dc:65:9d:86:48:9e:
9d:25:b5:e6:f1:55:17:14:22:57:da:7e:69:81:8e:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:52:B6:17:1F:19:1E:10:7B:83:FC:BB:B9:B1:14:75:31:33:86:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:c000::/40
Signature Algorithm: sha256WithRSAEncryption
bf:b7:1f:65:d8:5f:3a:47:d8:42:76:67:1f:d8:8c:1c:5c:6e:
02:90:60:41:cd:20:5b:05:da:f8:4a:c0:3a:07:b9:d9:4d:87:
b9:ba:63:f7:bb:8c:49:57:97:d9:af:9d:7e:eb:f3:1d:30:04:
b7:fa:02:3e:cf:45:a8:16:57:f6:ee:9f:83:31:25:ac:85:2a:
46:a8:65:a1:6d:8b:02:7a:51:ac:0d:9f:14:2a:c4:4d:e7:d3:
5b:de:7d:93:24:31:e0:ed:36:d2:9b:ad:63:10:8b:c2:b7:87:
e5:b0:ab:72:83:21:98:04:eb:9e:7a:03:c7:9a:24:c3:81:67:
45:2d:2b:7e:d7:55:7b:32:31:dd:95:21:ad:81:ac:e0:69:63:
42:23:3f:75:b3:a8:13:eb:f9:29:01:3b:4e:e8:f3:04:8f:17:
96:6b:9f:43:e2:b7:f6:88:f5:04:30:90:3e:3c:f8:ba:16:1d:
a3:6d:45:2e:1c:65:08:16:d0:7b:6c:04:43:43:6b:a0:55:e5:
bb:f0:85:ec:a7:49:2c:e5:53:ff:11:05:7d:9a:88:c8:d7:8d:
10:5c:12:c2:98:14:ad:ed:a7:96:ca:b3:23:c4:c0:81:15:2e:
d5:8e:eb:29:7a:b7:f9:ed:e5:b4:a9:d3:4a:d4:cd:c6:90:6f:
14:33:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:04 2026 by rpki-client