Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
File: 689f17ea-2ccc-4beb-bf91-0695da802222.roa (raw, json)
Hash identifier: NxSnA/UXkWZtEfxrVVC+h49DkOriHAR2SFbU84Z+/1w=
Subject key identifier: D2:9D:77:94:63:2B:6A:16:94:BB:FD:DA:2C:94:3D:D0:DE:70:F8:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C47FC0816CD6297D4D5F741BAE57DAF6A6B5FC7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
Signing time: Sun 18 Oct 2026 01:30:20 +0000
ROA not before: Sun 18 Oct 2026 01:30:20 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:47:fc:08:16:cd:62:97:d4:d5:f7:41:ba:e5:7d:af:6a:6b:5f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:20 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=9cf88a88ee27c26083282233c17a405cd73c4a0bf7b775808706faa086117696, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:c7:ec:27:88:77:93:a5:1f:15:b9:9e:c2:
29:b1:8c:91:bc:83:08:e4:3f:50:ed:ab:56:ad:bb:
15:0d:33:89:cf:7d:a7:a3:8e:b9:f7:97:a8:1c:78:
43:32:dd:8e:28:e4:1c:3d:0b:6b:c6:53:7e:8f:bd:
dc:0d:6f:87:20:cb:1b:d7:fb:ca:af:33:e2:f5:be:
8f:ab:ef:be:47:9b:05:90:93:99:c4:b4:6e:32:e7:
62:e1:82:49:65:51:db:e2:d6:d9:5d:ec:f9:50:6f:
b0:0e:91:17:14:61:64:ad:6f:97:8b:0b:ba:b1:e9:
a4:dc:41:61:3b:56:5b:16:5c:b3:7b:cb:86:e0:ae:
d2:a6:e0:e4:be:e6:04:e9:46:8b:1a:76:77:8e:23:
00:51:d1:a5:c5:bb:65:4c:aa:07:56:03:6f:12:0e:
1f:ac:c0:89:ec:61:6f:43:96:1e:b7:09:92:ae:b6:
97:49:67:50:75:c0:79:93:3c:83:f2:76:1b:95:36:
25:aa:94:81:96:1b:9c:75:74:bb:b9:06:f1:8a:b7:
2b:c8:3d:23:c0:84:70:4e:26:c9:a0:4c:3e:ef:4d:
6c:f5:6d:e0:32:ad:2d:b2:9d:7e:ee:ef:d0:7f:a2:
82:b0:4f:a4:7b:c9:21:7b:b3:3a:b4:ba:8d:0b:06:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9D:77:94:63:2B:6A:16:94:BB:FD:DA:2C:94:3D:D0:DE:70:F8:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:1000::/40
Signature Algorithm: sha256WithRSAEncryption
85:19:14:1a:f8:fd:0a:6e:3d:9a:38:6f:56:48:59:87:cf:74:
e1:d0:6a:d3:7b:e8:3c:10:45:f6:c6:1f:69:c4:f7:0a:4a:96:
34:9e:a8:66:28:9d:ee:5a:08:1f:d3:aa:0d:f1:07:e9:20:56:
bb:a5:93:c4:fc:89:81:68:d9:78:bc:e9:e1:2d:21:65:33:b9:
59:c7:4c:db:a0:d4:e5:94:3d:4b:e7:27:e2:c7:eb:3e:db:fc:
f5:21:08:dd:e1:70:77:c6:8b:80:41:ba:0d:8a:2f:3e:c3:8d:
1f:5a:73:60:cd:d5:23:34:26:dd:10:3d:a6:4e:3a:f2:df:72:
de:48:a3:5b:3b:35:cd:71:8b:b0:a0:49:60:c6:63:70:08:db:
3c:af:d7:e7:dc:09:78:4f:d8:ab:7c:1b:c6:47:02:a0:b9:4d:
69:84:56:a7:b3:dc:d1:b0:ce:b2:57:11:4c:2e:90:2d:e6:4f:
1e:31:26:d8:d7:5e:5a:5b:96:ef:59:99:10:60:58:2b:4e:f0:
83:c4:d2:c0:9d:6c:4a:b0:6c:c3:a0:5c:e6:f8:b9:bd:49:92:
c1:4e:c7:cb:35:26:80:e1:3f:3e:8c:b8:92:32:3d:e5:3d:8e:
86:3e:5f:93:28:47:87:86:dc:fa:45:77:0a:ff:61:62:68:9d:
f8:c9:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:42:23 2026 by rpki-client