Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
File: 60c499a8-e470-4a76-9095-20d8554a426a.roa (raw, json)
Hash identifier: YuAIwfiQWholVHEXRkhZHqxyQYOPBpVJTLAQu0NxaPE=
Subject key identifier: 03:35:8E:41:8E:D1:87:0E:06:74:A2:59:D8:D9:42:26:E4:4F:A0:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2FB579CD56E5F233D6D6622D3AA76C8C19370C77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
Signing time: Mon 26 Oct 2026 05:20:44 +0000
ROA not before: Mon 26 Oct 2026 05:20:44 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b5:79:cd:56:e5:f2:33:d6:d6:62:2d:3a:a7:6c:8c:19:37:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:44 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1658397f202567c698e4e982dea91fde61360723fd6ff62dc51857ea6bdf3a50, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:f2:64:7b:59:6d:e8:d4:c4:3d:0d:c2:99:
d9:fa:9e:e8:18:ab:61:e7:11:1f:aa:d9:3d:6e:4f:
fe:fe:12:ab:9f:76:2d:4f:fa:85:ad:52:ac:0b:23:
5b:8b:3d:1b:39:71:42:6a:cf:ce:f4:9e:53:97:6d:
42:ee:c3:08:19:b2:e5:de:8a:a8:22:a5:a2:75:eb:
9d:92:31:c4:97:37:1e:ed:1d:be:9a:98:18:1e:26:
db:0b:b4:98:53:6c:82:d4:9a:5f:f3:86:2c:f9:84:
dc:0f:49:ce:eb:56:6e:38:55:32:5e:b1:36:a8:1b:
3f:b3:08:bf:40:14:9c:64:51:40:49:f1:94:d4:01:
1e:20:36:62:f0:41:97:9b:b3:10:da:67:42:87:8e:
3b:6d:8e:a7:92:3e:6d:68:4d:13:50:b3:c3:6b:19:
0e:ae:3f:d5:65:73:9a:9a:4f:3d:40:91:ac:da:cc:
cd:3a:f2:91:75:8a:06:f7:1d:66:92:63:53:2c:11:
aa:f4:82:bc:05:19:be:15:df:3b:c6:64:84:e5:e2:
fa:20:30:3e:74:15:57:6d:98:6e:ab:3c:e8:9a:aa:
b6:a2:66:8e:2e:52:5b:63:58:e3:fd:d9:de:c6:f2:
ac:54:70:28:63:be:71:2d:c7:71:36:c9:c7:fa:29:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:8E:41:8E:D1:87:0E:06:74:A2:59:D8:D9:42:26:E4:4F:A0:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:c00::/38
Signature Algorithm: sha256WithRSAEncryption
6d:82:c3:95:a0:5b:a3:8e:ff:f8:af:5a:25:0b:85:1b:55:4d:
3a:73:4e:e2:b3:b0:e4:b1:71:1c:07:19:75:8f:1d:34:91:c1:
ac:c6:e7:2d:70:e6:6d:aa:29:77:c1:6d:88:ae:a4:c8:1a:bb:
5b:96:5f:28:28:f8:cb:48:3e:02:30:3b:88:eb:fc:e5:26:cc:
6c:d2:c2:58:45:6c:cb:e9:88:02:b9:8a:bd:b6:2f:00:7d:87:
5f:d1:1d:ec:5b:33:1a:f3:a1:85:21:4b:12:cb:c5:97:72:cd:
c9:24:58:7d:ea:5e:dd:47:9a:a0:5e:fc:4f:b7:f6:a7:5f:9f:
2f:77:14:2a:f9:04:92:e9:6e:64:17:f5:34:1d:21:d8:08:ef:
ad:fc:56:1c:bd:5b:28:5a:16:db:30:ff:ff:4d:1f:d2:da:69:
9b:ee:8a:66:ea:97:97:b7:37:40:33:2d:45:70:e3:85:25:47:
f3:2e:24:d8:d6:68:80:00:2d:a7:f8:da:f1:9c:ff:98:9c:be:
d7:2a:86:1f:32:ec:0d:ba:b6:e6:44:3f:58:36:6e:00:2f:46:
9e:64:ee:f0:df:f7:45:59:3e:ec:8b:de:a7:08:23:f6:63:e0:
81:8e:0d:3d:4e:ef:cc:90:17:80:10:0e:76:39:02:7d:6a:33:
fc:4d:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:20 2026 by rpki-client