Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6af28a08-4ca8-42b3-b693-0c0785677d0b.roa
File: 6af28a08-4ca8-42b3-b693-0c0785677d0b.roa (raw, json)
Hash identifier: sCuV8bMwu8r8GQJawkBDdfDnxY1iYAhUB/L0wjHuc/A=
Subject key identifier: 04:43:BD:DC:6F:DA:DA:CA:55:17:C2:CB:BD:81:1B:6E:13:46:A7:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F4591BFA08F6C16F2EC614A8B9B5FC9FA47426A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6af28a08-4ca8-42b3-b693-0c0785677d0b.roa
Signing time: Thu 29 Oct 2026 01:02:19 +0000
ROA not before: Thu 29 Oct 2026 01:02:19 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:45:91:bf:a0:8f:6c:16:f2:ec:61:4a:8b:9b:5f:c9:fa:47:42:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:19 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=90a755d040b0ec9a827505ca77262d3cc5cf39492421873a916607cb8f6f394a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:7c:76:2e:bd:fb:fa:80:d3:c3:11:32:44:
fc:83:3a:d8:62:ce:e1:82:8b:c5:99:f6:69:ca:e2:
e6:b7:79:60:28:f7:ef:31:71:c1:00:49:bb:82:ff:
30:df:81:2e:9a:7b:b0:04:b8:4b:99:96:e5:a1:c0:
ea:e2:4a:d2:20:a2:04:3f:c5:62:39:ff:52:5b:32:
a1:c3:ba:7d:44:76:af:11:cb:f5:09:56:40:94:be:
43:59:49:b0:f7:7a:60:34:49:4d:23:11:76:dc:9e:
f5:f4:13:c6:2a:93:5d:51:1f:52:d9:3f:34:be:14:
ba:ac:b2:3a:a3:e3:a2:4a:36:55:96:1d:1c:3b:a1:
8b:5d:f6:f0:e2:f1:0c:2b:0d:13:db:79:4d:d3:96:
fe:bd:9b:aa:60:74:8f:ff:59:3c:56:61:d6:d2:73:
c0:e1:bf:c1:01:be:8a:12:5e:ba:91:d2:20:d2:35:
00:fe:d3:fa:48:9a:96:d1:1b:95:5c:e8:f6:da:5c:
6d:07:6d:f1:7d:ab:e0:d2:79:16:e4:22:db:b1:1c:
ea:fe:b5:d6:33:ae:b6:e7:ef:8e:12:2a:f2:26:b8:
0a:ba:3c:08:44:bf:9b:30:9c:47:7e:3b:80:8d:21:
94:7a:89:43:3c:51:7a:50:44:90:e3:f1:cc:90:ea:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:BD:DC:6F:DA:DA:CA:55:17:C2:CB:BD:81:1B:6E:13:46:A7:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6af28a08-4ca8-42b3-b693-0c0785677d0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:6a:51:19:05:55:90:a0:71:23:dd:bf:c5:79:1b:24:76:e8:
01:17:b3:06:f0:92:03:c1:bc:59:ca:67:0b:30:5a:d0:10:b8:
8d:47:6f:1d:11:fe:85:3f:17:ed:ec:79:8b:19:02:07:70:c8:
cf:13:4b:1d:a0:01:e2:47:b3:13:85:4d:47:fd:e9:cb:9f:00:
2e:17:5b:a4:f0:f2:ac:3f:3f:5a:c8:1a:6d:d5:69:56:6b:1e:
66:b5:b8:ef:e8:3b:54:3a:ce:f6:7d:58:74:40:a7:2e:c8:1d:
32:74:b2:ea:0d:c5:57:4f:be:fc:3a:86:ab:ae:d7:7d:a1:d3:
03:87:20:df:a0:8d:a5:35:cb:27:26:4f:69:3d:72:85:65:37:
73:de:18:af:50:59:de:8c:39:23:19:e8:84:ca:2a:00:7f:38:
94:d7:47:70:91:e1:be:82:34:c0:ae:bd:46:10:d1:11:b1:51:
0c:5e:b8:b7:b2:db:4b:3e:8f:53:22:f9:80:26:f5:bb:9e:bc:
ea:94:f8:ac:f5:d8:8c:d3:a7:40:1c:4e:6a:06:9d:a9:41:14:
18:36:87:e4:20:d0:86:64:73:78:1d:24:4c:5a:b7:14:b2:e0:
a1:27:0d:4d:c2:7c:db:62:76:cf:07:99:2b:fb:92:00:55:ed:
1f:d8:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:51 2026 by rpki-client