Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
File: 68ece0e7-075e-4bcd-873e-0c74882a8546.roa (raw, json)
Hash identifier: PWQ/IRM6WpCkfCRWaEj0Y3E1yMVRgeHMEDFnSvIQQAI=
Subject key identifier: 30:BF:F1:D1:B8:AF:44:32:A2:26:F3:BE:F1:7F:6E:D9:84:CF:30:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 381743994F303C2A1966D3DE9EE4E93492033EBB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
Signing time: Mon 26 Oct 2026 05:20:06 +0000
ROA not before: Mon 26 Oct 2026 05:20:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:17:43:99:4f:30:3c:2a:19:66:d3:de:9e:e4:e9:34:92:03:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e564de288c6643baa8f7bfc0b12723ea85dbeb0aee0ff87b4925f67513723a1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:a9:dc:9d:c4:b6:d9:b7:84:b9:2c:11:14:
6c:2a:44:bc:a7:fd:5a:5f:9f:97:12:13:cb:da:18:
8b:e8:6e:6b:dd:44:2b:13:ac:61:2f:f2:e2:46:ee:
48:4d:c6:d4:09:27:25:42:4f:37:19:c9:c5:bd:d9:
39:0f:ba:8d:ed:8a:2a:46:74:31:34:cc:8c:28:a5:
18:4b:74:c7:4e:35:98:40:04:5c:37:09:52:eb:c4:
94:12:ec:2a:58:e7:9f:c1:02:71:08:eb:dd:fc:e2:
8d:c2:15:76:84:d8:47:b4:8e:81:37:5b:4f:45:56:
25:e6:eb:ba:9e:ce:31:e5:88:fb:4e:d2:d7:70:48:
12:29:75:ce:3d:23:ad:f7:6b:68:ec:5c:d1:13:3c:
df:23:e8:bf:31:df:72:a2:af:4c:3d:70:3e:be:b6:
36:1c:b4:2e:7a:29:87:83:44:eb:9a:e9:26:97:ed:
ff:33:5b:d4:fb:8d:ac:71:3a:5c:b5:51:a5:c1:bc:
46:06:9e:c9:2f:63:2b:ca:ac:3a:69:18:9d:46:f5:
be:d4:5a:0c:31:dc:97:e9:3b:0a:82:e8:18:e6:02:
6f:8e:35:91:a6:00:0c:aa:57:7d:1e:21:18:16:39:
42:05:2e:ea:b1:5c:49:32:76:8f:8a:2e:6f:34:e0:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:F1:D1:B8:AF:44:32:A2:26:F3:BE:F1:7F:6E:D9:84:CF:30:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68ece0e7-075e-4bcd-873e-0c74882a8546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8080::/48
Signature Algorithm: sha256WithRSAEncryption
97:3c:56:17:bc:99:0f:2d:ba:64:d4:29:e4:32:7a:00:7a:43:
e4:dd:7c:57:27:4b:fb:e1:fd:32:85:1b:b2:5e:c5:46:51:29:
b0:83:6d:6b:41:08:5f:cf:d8:41:05:74:96:7c:c7:b6:e8:70:
ff:4b:5e:f1:c5:a6:96:78:fb:2e:1a:86:4a:f4:df:5a:95:96:
97:9f:11:98:84:ea:3e:d1:22:22:30:1d:38:97:53:b1:af:58:
6a:7f:da:e2:9e:75:9b:42:55:aa:4a:5f:40:2c:ef:77:fc:9e:
fe:b8:fd:c7:e5:f9:e8:ee:e7:bd:07:19:37:23:8e:11:7a:ab:
81:15:85:aa:b3:3e:9f:7c:a8:61:5e:89:b6:c1:0a:c4:ff:5a:
dc:e2:62:a9:ad:de:7b:52:26:7d:3f:48:f1:23:7e:02:a1:ab:
83:f8:6c:73:e7:2c:af:9e:0c:11:d3:c0:27:1e:49:2d:b0:34:
b2:c0:02:4c:99:03:0f:37:0e:83:24:c7:51:86:4c:88:53:16:
08:d7:09:8a:4c:24:7c:4d:96:6e:6b:b8:1c:2f:40:a0:c3:f5:
b3:86:8f:e1:19:f1:be:07:2e:02:7c:4d:c1:73:cc:c9:0b:74:
2d:d4:a5:fb:72:5e:ec:57:b8:76:8d:bc:c7:6b:ae:ef:d7:50:
66:27:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:30 2026 by rpki-client