Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa
File: 6a136ad8-9412-45df-a7b1-6bc848065b5a.roa (raw, json)
Hash identifier: LLcZj5ze8bVfZYg3pqg1JjfcKpmxeS7mo73InIyT9BM=
Subject key identifier: 43:D1:67:33:DB:08:F4:69:8A:DF:B0:35:2B:83:41:06:DD:85:16:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4963AA6CEDE820EC02D7FC2589733ECCCA14A437
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa
Signing time: Fri 09 Oct 2026 01:20:07 +0000
ROA not before: Fri 09 Oct 2026 01:20:07 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:63:aa:6c:ed:e8:20:ec:02:d7:fc:25:89:73:3e:cc:ca:14:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:07 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=432af027c151f73f24a65aa3a487df68640b80f46adcbdffce3dc26061b9370a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:2a:26:d6:2f:75:d1:7e:e7:50:7e:78:81:
07:da:b3:27:b4:d5:e4:85:0e:96:9b:a8:67:b4:42:
4f:7a:21:71:33:a0:7d:94:5e:7b:82:1a:f6:94:75:
ab:70:04:17:7f:1d:2a:5e:99:0d:6f:79:f0:d5:36:
9c:2d:94:9a:f5:ac:48:c3:de:11:21:c8:70:eb:d7:
69:cc:e5:b2:39:d3:ba:43:77:47:77:98:7f:c3:a1:
86:e3:c4:c1:bc:76:93:0a:e1:04:47:e4:9a:f8:fd:
e6:c4:c8:07:a5:67:5e:f2:d9:f8:2d:c0:ee:a1:f8:
64:ff:92:a0:8e:91:0d:82:09:a1:97:34:74:3b:7c:
bc:be:22:d5:48:a9:ae:58:2f:25:9b:d9:c4:a3:c1:
5d:9d:bb:c7:2c:0e:7b:9e:0d:a7:bc:59:f7:49:b6:
11:d5:66:89:9f:0d:67:fd:88:30:3e:b0:57:9e:49:
2e:8c:07:08:ad:74:c2:c1:af:90:fa:49:3e:c7:09:
0d:53:83:d5:64:ef:18:38:07:b9:d3:f1:15:0c:a7:
cf:7e:5e:45:62:09:f6:cd:35:55:87:2e:01:10:1a:
88:f8:95:26:31:bc:32:5f:9b:6c:42:c9:2c:56:65:
00:d2:5b:ca:c4:fa:c1:b3:27:45:c1:25:b8:12:19:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:67:33:DB:08:F4:69:8A:DF:B0:35:2B:83:41:06:DD:85:16:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
53:fa:c3:49:ef:97:07:0d:f1:d5:20:86:58:a3:e9:d5:35:84:
a1:92:7e:05:c5:04:66:01:df:ff:4d:90:b8:a2:e2:15:fa:2e:
4d:94:34:6f:87:64:4b:0c:66:3a:3c:d9:8b:6f:51:08:d1:be:
83:9b:1c:be:2e:2f:c7:df:c2:ee:7c:24:95:7c:a3:40:9e:ee:
48:ca:6e:07:63:08:41:b3:0c:78:98:5c:5d:14:57:0a:18:87:
ef:3b:76:90:7b:47:c4:1e:c8:b5:d6:e0:e4:3e:0a:83:24:18:
2f:7d:8a:a9:a2:b6:fa:26:97:0c:f7:33:6d:7e:9e:29:4d:b3:
f8:82:05:9f:e0:3b:64:ce:a0:59:5b:e3:f6:44:4b:59:ea:3d:
3c:5e:ee:20:33:64:45:03:1e:e4:7f:4d:05:d8:9b:54:53:8e:
7f:21:ef:2f:6a:de:8e:55:c1:ae:88:3c:83:d3:57:33:14:a4:
9f:b8:e4:e5:95:eb:d8:a0:af:67:1d:ee:67:5f:e6:df:82:09:
a3:48:fd:ce:9b:a4:ff:fa:ef:02:21:06:10:a3:6b:c9:ff:d1:
c0:ec:28:6a:a0:ad:93:8c:0e:c3:95:4d:02:35:fc:f8:c1:42:
9d:6e:33:9a:b5:74:8c:3a:25:ad:1e:a2:af:6d:6e:85:31:2a:
52:df:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:33:42 2026 by rpki-client