Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
File: 640a1f52-8635-44af-ae6e-cc941e49e749.roa (raw, json)
Hash identifier: CHWQlLnOp2MGK/M+Z0VttjrybcpP1MUpg0Y1RZ/X6zk=
Subject key identifier: 9D:DC:A3:DD:05:F8:69:99:B5:DE:68:70:42:9B:03:99:F5:7F:20:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2505B76E4829944C4ABBA25C71053A9D5245C447
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
Signing time: Sun 04 Oct 2026 00:30:17 +0000
ROA not before: Sun 04 Oct 2026 00:30:17 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:05:b7:6e:48:29:94:4c:4a:bb:a2:5c:71:05:3a:9d:52:45:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:17 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=31d094e801f46ebccc31aeb53b576028cec77ee0be99c646879ef410670596c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:cd:ee:6b:87:b6:0f:87:bf:a9:49:9d:8e:
fc:30:75:e0:ef:ab:fc:80:3f:c9:47:92:e9:62:df:
92:cd:e7:03:43:f5:19:8d:c3:88:14:bd:f8:3a:e3:
13:05:22:e4:3b:ae:5c:0e:7f:eb:ac:0f:06:6e:71:
da:97:5b:5e:d7:46:05:17:21:9d:7c:f9:27:44:3e:
e0:65:16:93:40:5b:d8:68:bd:c8:ff:cf:de:0d:1c:
fc:6d:03:fa:53:c1:72:40:12:3f:40:b6:2a:48:3a:
e0:21:6b:10:4d:79:43:47:76:75:87:c7:cd:b2:e5:
27:7f:a0:44:dc:b6:04:3d:e6:ec:bf:f7:61:d3:fd:
8e:d6:91:4b:8f:f8:06:1c:49:5c:b1:2e:71:3a:5b:
fb:43:ed:6f:45:c1:b4:52:58:31:af:39:dc:88:9c:
9c:f1:20:ce:f9:1f:86:df:1c:3e:82:72:1c:9d:df:
1a:40:2e:7b:19:28:83:55:eb:10:10:84:02:17:b6:
83:e0:82:33:72:4d:f3:b4:91:db:3b:6c:9b:52:62:
a9:e8:d1:8f:81:c2:dc:2a:bb:4d:84:6e:4a:f6:2e:
e8:f7:bb:ca:b5:67:b7:08:5b:49:30:95:c9:f7:fb:
c7:fa:bc:0d:6c:a6:a1:ef:4e:b8:68:5d:ef:7b:c4:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DC:A3:DD:05:F8:69:99:B5:DE:68:70:42:9B:03:99:F5:7F:20:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6080::/46
Signature Algorithm: sha256WithRSAEncryption
55:6c:d5:00:1a:40:4d:84:38:78:87:d2:34:9e:a4:8c:f7:fe:
41:28:33:f1:7a:4e:56:3d:c2:06:6e:46:35:cb:e4:24:71:89:
0b:4d:df:c8:3c:1e:df:4c:4c:59:b8:99:5b:3c:bb:0e:36:67:
bf:b0:17:67:f0:98:61:fc:c3:5e:99:33:9f:0a:f0:e3:84:fd:
6c:df:1c:96:e4:77:22:ac:44:0e:92:8c:75:25:57:35:95:10:
67:51:df:45:2d:59:b6:2b:5b:08:81:30:f2:8d:60:96:b5:e4:
57:99:88:b0:ed:14:a8:bb:20:dc:f8:98:0d:d8:40:24:8a:d8:
b7:1e:58:3f:81:4c:21:85:dc:8d:b9:dd:35:3b:ec:9e:54:64:
ff:0a:66:ae:85:e4:4a:d0:5b:34:59:fc:ab:96:47:40:48:44:
0f:b0:a8:cf:f1:cc:9d:8f:f7:46:f7:a0:12:21:ce:d5:2d:94:
e3:f9:d0:0b:71:58:38:38:cc:7d:74:0e:39:07:59:a3:1b:a7:
79:b3:36:78:be:ac:58:f3:90:0f:4e:76:0c:c7:fc:15:76:8c:
53:4d:da:bf:58:2c:cb:c7:13:c2:5d:02:57:0b:07:95:9d:d4:
d0:fa:da:46:e4:10:8b:09:61:73:86:01:82:52:c8:98:48:7f:
80:38:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:27:06 2026 by rpki-client