Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68f2af14-43e2-4447-a8a7-f8fe713e249e.roa
File: 68f2af14-43e2-4447-a8a7-f8fe713e249e.roa (raw, json)
Hash identifier: XBD6pEXq7MHWrW+VwOlcf3w/PFQu96xuPmR1KD+Y+ZE=
Subject key identifier: 52:7B:16:B8:08:F8:1B:41:84:AC:F8:BD:C9:DB:96:75:7D:4B:01:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 222ECB428E3E4823A5ACAE38E7DD4F17CE246835
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68f2af14-43e2-4447-a8a7-f8fe713e249e.roa
Signing time: Sun 04 Oct 2026 00:30:42 +0000
ROA not before: Sun 04 Oct 2026 00:30:42 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2e:cb:42:8e:3e:48:23:a5:ac:ae:38:e7:dd:4f:17:ce:24:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:42 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=6538c0e97650771767c8318e500a37385354f57379294e902a1f1dbb99f2f9e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:ff:0d:0c:04:5c:02:b5:0a:ba:54:18:96:
6a:b4:13:ef:d5:98:b5:f7:03:6b:50:60:f1:9a:fc:
1b:f1:62:49:ad:4d:db:f7:f4:08:82:1f:f7:0e:d8:
f2:eb:7e:63:c9:76:08:1c:01:ab:3b:dc:4c:d4:72:
43:53:06:cd:76:e4:13:6c:4c:85:d5:89:79:4c:3f:
b6:c6:64:98:05:07:ce:23:6e:3e:af:fd:13:5b:1c:
67:bd:04:cd:0a:67:ee:1d:ab:fe:c2:c0:89:17:91:
ae:ff:b3:f5:d9:3b:2c:3b:92:80:20:f3:3c:2b:a7:
2c:1c:93:0d:8c:ed:2d:d6:4c:01:d3:66:a2:7b:69:
0f:f8:8e:ff:6b:cb:a4:a4:ab:20:10:ec:d2:fb:db:
4e:c0:86:a4:1c:2e:0f:56:84:0d:88:12:d0:85:2d:
76:79:bd:a2:63:ca:dd:63:0e:0e:e4:38:ab:72:36:
12:08:f7:33:4f:77:8c:e7:1f:83:1b:b4:70:62:5a:
78:87:4a:dc:7c:d9:7b:10:31:89:26:7e:41:76:9f:
d5:5b:de:04:c3:47:55:15:da:4d:0d:82:23:8f:ac:
ec:a1:2a:4a:69:4c:d8:95:f4:d4:11:fd:84:a6:43:
45:63:f0:5d:bd:f4:35:a4:c1:74:79:3d:92:4b:e8:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7B:16:B8:08:F8:1B:41:84:AC:F8:BD:C9:DB:96:75:7D:4B:01:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68f2af14-43e2-4447-a8a7-f8fe713e249e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f:800::/37
Signature Algorithm: sha256WithRSAEncryption
a7:93:b7:23:50:0e:f8:e8:e2:cc:bc:ab:10:2a:4e:33:7f:75:
a6:5e:91:63:0b:dc:86:e1:fa:25:1c:85:6c:28:40:f9:f9:32:
88:3b:57:fb:cf:69:25:16:30:25:fd:c4:fc:24:81:05:df:90:
20:26:34:14:c7:10:70:80:cf:c4:4a:a9:88:a1:70:49:07:cb:
0c:b3:c8:1a:15:56:bf:c4:30:e7:db:88:47:5a:47:78:4e:b8:
2a:28:63:93:af:bf:aa:da:54:39:51:7a:c5:9d:80:79:d5:15:
87:46:be:2c:b5:99:27:64:4d:9b:58:fa:85:9d:36:30:76:17:
ed:20:0c:57:ed:48:bc:cf:c1:7e:a8:87:da:f1:b2:c6:e6:f7:
3d:ce:0a:e4:84:3b:92:e3:3e:4e:ea:13:33:1b:61:ad:fc:5b:
75:ff:02:d7:a4:b3:a1:ea:f0:2b:7e:35:bb:7f:e2:9c:10:2d:
a0:14:fb:41:03:98:bf:40:e3:3a:9c:67:4c:f3:56:d9:7b:59:
fc:06:10:1d:20:66:af:28:50:61:76:9d:28:21:5a:a2:f2:b8:
e1:37:03:ca:2c:6f:31:21:da:9c:64:aa:46:fe:a4:df:1f:04:
78:65:f2:49:94:79:be:37:70:18:ff:98:1b:3f:bc:88:9b:af:
a9:9a:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:49 2026 by rpki-client