Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File: 61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier: awLTZ/5G5rJpfbiv46zQwh9uSZwsGKKK1xo1Vu+harA=
Subject key identifier: 75:6C:7A:C9:38:97:8C:F3:60:16:A5:85:16:02:C8:41:4F:D6:52:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 359D804776D76901BA04348EE63AEB8B1E8D2C87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time: Mon 26 Oct 2026 05:30:31 +0000
ROA not before: Mon 26 Oct 2026 05:30:31 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9d:80:47:76:d7:69:01:ba:04:34:8e:e6:3a:eb:8b:1e:8d:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:31 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=73b50cf96728aa5fd1267977c713ee50af6a13710841ed93a23d9eb8f084fb5e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:17:7e:9c:99:66:c6:08:76:d2:c0:c6:7a:
ea:38:6b:b9:57:e6:e1:56:97:8a:4c:a6:f9:12:8e:
03:d8:9f:49:b0:68:30:8a:c5:11:ef:0f:77:9d:23:
72:19:f7:5c:43:4d:55:a5:86:46:71:3c:8e:79:ea:
fb:53:06:0c:89:2c:e5:fe:a0:34:ff:01:e9:a7:2b:
2d:59:b2:e9:19:51:de:5a:e5:2b:1e:cc:8f:f6:0c:
69:1c:ec:47:08:64:d8:60:e5:64:4b:be:03:fe:51:
55:b2:9c:02:19:29:3a:68:ab:eb:b5:d3:2d:c9:af:
c0:51:f9:89:d1:1a:48:8e:94:ed:a0:7f:8d:1b:2d:
b7:2f:65:ab:ed:95:84:fc:7c:e6:15:99:1f:f6:95:
da:da:2c:6f:23:88:9f:64:3c:8f:df:7d:4b:54:9a:
d6:f9:3a:2b:7d:4c:2b:28:e9:ba:a5:e2:21:74:52:
51:c1:37:d4:35:b1:0e:ed:aa:19:52:5a:74:c3:6d:
6e:42:4d:cd:93:8a:28:f4:e8:f2:dc:4b:76:fa:b4:
4a:1d:cf:21:e9:21:a1:1d:8a:95:74:ae:57:08:bc:
1d:33:d9:25:ff:44:de:0f:f5:84:3d:4e:8c:91:77:
93:dd:75:28:3f:20:c4:d6:bc:51:c6:63:dd:df:bc:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:7A:C9:38:97:8C:F3:60:16:A5:85:16:02:C8:41:4F:D6:52:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:a000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:92:33:10:21:1e:8e:5c:73:6a:e0:1c:68:61:f5:a4:a4:0b:
01:19:62:cd:17:c6:60:19:cb:c1:0c:1f:cb:2f:ab:72:29:a0:
54:96:32:70:9e:14:1a:20:39:5a:57:d7:2a:f5:d8:28:40:3e:
b3:9e:f0:72:29:7b:16:d2:f8:2a:75:31:4c:79:1f:dd:0d:d3:
86:fb:99:3a:e3:d6:35:70:b0:77:ba:ac:41:16:7c:4a:23:22:
38:7e:1c:0f:2e:13:c6:db:c5:7c:52:83:94:34:a4:e5:fe:36:
fb:cf:74:b6:05:03:df:85:e2:79:68:36:00:5b:1b:c7:12:94:
95:09:0a:77:4d:6b:be:e9:6c:44:d4:45:df:2c:f9:6b:cc:07:
a7:7c:30:dd:6a:18:fb:27:8e:75:4d:4d:14:30:bd:9b:72:9d:
e2:92:63:b2:48:2a:29:b0:df:0b:9e:4a:5c:f2:d2:19:df:ab:
0a:42:f6:04:db:f6:76:bc:30:c7:65:cf:0b:fc:0a:0e:61:36:
fc:17:49:4c:7b:7d:c0:b5:d9:eb:40:3e:81:10:6f:07:20:27:
51:e0:40:88:3b:c3:09:72:9d:1e:50:17:10:b8:88:ba:24:ca:
1c:88:d0:8d:4c:af:fa:83:57:bd:9b:c6:78:bb:3f:09:ad:97:
6e:84:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:25 2026 by rpki-client