Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa
File: 71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa (raw, json)
Hash identifier: 3E+Q9wY0/Rx59PJs2WsRP9gS9o+SpDo+z+EuTv26MX8=
Subject key identifier: 88:3D:DC:D2:A5:50:45:2E:54:1A:51:25:23:E2:D4:3A:B0:8B:3B:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2290ADDB02168BF80D940FA1FA011D9CE10481C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa
Signing time: Sun 04 Oct 2026 00:30:18 +0000
ROA not before: Sun 04 Oct 2026 00:30:18 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:90:ad:db:02:16:8b:f8:0d:94:0f:a1:fa:01:1d:9c:e1:04:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:18 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=be17c19f0308d4c61cdabbebe7a2d9e44b9c1a262ff2b7d21d3869636e1e0e31, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:00:c4:ec:07:34:58:c3:da:c6:47:c9:45:
03:23:75:20:60:0c:18:63:8d:73:6c:d9:ea:bc:67:
9d:6e:02:af:7a:00:eb:80:27:f7:59:9f:7d:1c:5f:
a2:95:8c:ec:2b:45:68:41:57:cf:ce:3d:20:a4:de:
05:98:34:7d:25:c2:2e:c3:39:41:c7:a0:24:ba:8e:
03:2f:51:ed:77:d8:48:6f:89:10:13:a6:db:2e:ba:
93:91:ec:c9:1b:82:ad:d5:95:65:59:e7:72:2f:e2:
8d:9e:77:bb:ee:8a:28:91:59:31:c5:00:09:34:2d:
84:e5:2d:45:9e:6e:dd:e2:ae:08:dd:e9:69:97:7a:
21:05:29:8a:40:b3:98:e0:aa:db:c3:48:8e:63:64:
f5:de:41:f1:a5:2c:f8:ae:98:79:cf:16:61:3c:66:
45:7d:c9:c8:e2:42:54:44:a8:f2:5f:6c:88:9e:31:
ce:d6:52:ed:43:8e:51:34:cd:7d:14:74:06:63:44:
c4:6d:c5:e8:2b:fb:24:4e:ac:e3:c7:41:c3:dd:30:
11:d8:79:c0:a2:fa:4e:29:57:f8:5d:7f:d8:6c:3b:
f7:22:8d:5a:67:9c:e4:3c:dd:44:5c:4a:f3:bf:31:
64:95:96:41:0b:e6:f2:07:54:34:27:0d:65:f4:fb:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:DC:D2:A5:50:45:2E:54:1A:51:25:23:E2:D4:3A:B0:8B:3B:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:6080::/48
Signature Algorithm: sha256WithRSAEncryption
05:0b:0a:19:f7:46:c1:b6:c4:5d:bd:76:9d:40:b7:25:de:17:
b1:96:55:5d:d2:7d:34:0d:ad:2f:25:c4:04:0d:4d:0b:d7:b3:
5a:c5:bb:02:7b:63:8f:1f:5a:eb:ef:43:7b:04:32:f4:a7:bb:
b1:01:94:fb:01:d0:94:22:01:91:dd:f0:8c:78:34:f0:1d:13:
e3:bf:f0:86:9f:46:c3:76:02:5d:87:63:26:70:f5:4b:93:37:
a0:45:3d:26:19:d5:b0:0e:96:14:bf:a0:26:92:eb:6b:4d:a0:
c2:49:07:a3:37:f0:7b:ba:cd:b5:73:7a:5d:20:1a:1b:ab:72:
a1:6f:9f:ab:62:c9:57:d8:09:c3:76:23:eb:bc:10:a2:34:1c:
96:40:3d:16:b5:d9:f2:cc:a1:c4:0b:8c:ba:b3:72:27:b4:8c:
96:b0:b1:3e:48:48:87:81:ef:9b:11:eb:a6:e8:24:18:d1:6a:
70:e5:13:1d:76:0a:25:4a:fa:8c:bf:14:75:09:e7:6e:59:ce:
58:68:5c:a8:10:69:fc:10:fd:f9:33:d4:01:33:d9:15:d2:c9:
49:4c:83:49:75:fa:c9:b5:c5:01:2f:cf:69:5c:5b:5c:9e:ea:
90:21:59:37:d6:d9:02:09:3f:17:f5:b9:1b:b0:bb:67:38:50:
b6:46:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:50 2026 by rpki-client