Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa
File: 68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa (raw, json)
Hash identifier: 4J5n1TFFJgi2ZyXO7qyUqh2UhxTs1C8TX2JxLFE5JaU=
Subject key identifier: F5:91:5F:CD:93:AF:D7:8E:71:88:0C:5D:1B:9A:6C:AA:7F:7D:29:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B4D5D96875999485AC2D612AE7499329EB99B4F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa
Signing time: Mon 26 Oct 2026 05:02:54 +0000
ROA not before: Mon 26 Oct 2026 05:02:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4d:5d:96:87:59:99:48:5a:c2:d6:12:ae:74:99:32:9e:b9:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c8bbde5d3a095f567cbdaa2d0bbe8805dacf6ee415563ad7bb3e9c3fa8882a07, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b8:e8:b6:51:f0:bb:c4:79:e3:88:ac:57:86:
96:44:9a:70:d7:dc:5c:73:2f:2d:3c:5e:36:a6:15:
01:78:bd:2e:16:83:8c:93:c2:39:bf:d4:73:89:25:
ae:71:c8:30:14:d4:8e:53:da:71:e1:d4:03:85:11:
07:ef:6a:cb:f4:66:ed:78:2e:82:de:a7:bd:c8:a5:
53:48:a5:89:bb:80:90:df:aa:dd:cc:69:4c:91:5b:
bd:ac:bf:4d:ec:31:78:07:b8:90:be:ff:a9:50:52:
4a:d5:41:bf:d4:78:88:02:44:65:4e:18:17:38:a5:
3a:10:3c:bb:6a:c9:14:a0:b5:c6:e8:55:e8:2d:67:
5f:41:2f:d5:6a:db:b7:46:69:c1:a5:83:95:aa:a6:
70:39:1a:72:0c:c2:10:f6:31:4a:37:5a:ac:01:d3:
a1:e8:ff:1e:ba:c3:76:c2:f8:2d:50:cd:2f:02:50:
d6:7a:c4:ab:87:9f:ce:fb:e3:cd:3f:0b:39:44:37:
d7:d5:99:ca:ce:89:34:be:b2:3e:2e:a7:d1:00:41:
d3:bd:48:52:95:08:38:d7:34:95:90:ce:b6:e1:cb:
ac:fa:7a:f0:b4:50:8b:f5:1f:98:9a:1e:71:61:bb:
dd:32:73:d2:dc:6a:f7:6a:c0:8a:09:3a:2e:d7:52:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:5F:CD:93:AF:D7:8E:71:88:0C:5D:1B:9A:6C:AA:7F:7D:29:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:a000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:6b:74:9d:0e:ab:e5:75:df:53:69:7f:ad:9f:8a:88:2c:d5:
6a:fc:af:9e:23:eb:d9:21:ef:23:be:14:cd:87:55:a9:03:d3:
af:f0:58:ec:8f:15:88:ed:29:6f:98:29:cc:c7:34:15:c4:7a:
57:f8:88:24:7c:30:4f:d0:83:27:15:03:f2:80:6c:69:f3:6b:
c8:5d:21:ba:2e:7b:f2:a1:f8:86:03:73:bb:da:b3:c6:70:c7:
ec:27:27:e3:29:1d:c6:c1:4a:bd:6a:15:dd:45:14:1b:a2:54:
21:4f:cd:95:9c:8e:65:75:d5:24:ef:18:21:54:3f:ac:8a:34:
c0:ac:33:a7:19:be:b2:d9:e6:62:73:8e:10:50:81:48:df:b4:
c6:d1:75:ec:56:a7:b1:55:aa:af:ab:69:2a:eb:b4:b3:4d:93:
ef:80:b2:7e:9f:61:ce:e6:db:74:fd:e1:e4:92:1e:d7:f5:48:
90:37:02:96:dd:2e:33:0a:6b:1c:c5:4b:07:3a:c3:7c:f0:09:
95:98:20:52:55:8f:a0:be:15:08:f2:cb:1b:a8:4b:e8:5c:99:
4f:1a:46:7e:8f:b6:7e:34:76:59:f7:04:e6:59:de:07:86:d5:
2e:2a:e3:08:6f:f1:32:64:9d:83:63:60:43:d4:03:ad:ab:ab:
ee:6b:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:34:25 2026 by rpki-client