Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
File: 73745b45-c65b-482b-9e7a-25a90d279147.roa (raw, json)
Hash identifier: B1zZzy6EPiQmLx4q/aAd41eO07yARdrnpeytsQId8uQ=
Subject key identifier: A8:75:99:38:BC:B7:66:54:E5:86:CB:25:FE:2C:2D:34:C8:0D:39:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 390FB1572BBB66A0D0886A7EA0A2259959E21681
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
Signing time: Thu 22 Oct 2026 01:40:07 +0000
ROA not before: Thu 22 Oct 2026 01:40:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0f:b1:57:2b:bb:66:a0:d0:88:6a:7e:a0:a2:25:99:59:e2:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=db71f3cb9ab4625fd89b8d2fac8c60eb94436d0a7316277201986280961414ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:c7:d3:29:67:5f:2e:8c:6d:6a:19:6b:9b:
4f:8e:d4:71:8b:e9:42:c3:b1:c0:e2:01:f3:b2:bb:
54:8f:46:77:fb:18:0e:e3:bd:7f:be:42:0c:1d:39:
34:a2:04:ee:00:19:e0:a1:bb:d3:bb:e4:6b:db:a9:
4b:e7:0c:3f:1a:b8:6c:7b:24:2a:a5:25:2f:3e:c7:
67:0d:7a:58:73:15:87:5e:d3:96:9a:1e:9a:6d:9c:
45:ed:38:ec:e7:2a:37:ee:9a:33:84:5f:23:b8:77:
c4:14:5c:41:2e:4e:28:70:c4:81:3f:21:80:d5:0c:
62:82:f1:d4:b6:bf:c1:9e:16:e9:c2:4a:9e:10:4e:
4c:f0:5c:fa:a7:5c:b3:10:9b:df:f2:1a:ee:6d:85:
af:d5:af:34:4c:29:da:94:7d:a7:4d:45:ff:11:cc:
0a:ae:70:9f:ff:a9:86:df:3f:f3:90:86:cb:27:fa:
42:a6:3e:a8:93:d1:39:c6:f9:74:a0:ec:0e:4b:a8:
74:a3:2b:05:11:a7:ee:4d:41:7a:ac:21:9b:13:f5:
68:25:c4:8d:69:21:29:69:cb:7d:e3:19:28:78:cc:
24:f8:e9:7c:bf:59:fa:a0:2f:25:8f:a0:e9:4f:79:
3f:9c:88:04:06:3c:12:f4:87:14:1f:61:cb:78:a9:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:99:38:BC:B7:66:54:E5:86:CB:25:FE:2C:2D:34:C8:0D:39:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4000::/40
Signature Algorithm: sha256WithRSAEncryption
84:ab:8c:33:a6:f1:aa:a5:8c:fc:57:6a:b1:10:9d:4f:ad:61:
54:dd:f0:59:00:5b:00:1b:96:a0:c3:01:5c:62:c5:a2:5b:0d:
04:e5:02:e7:18:7d:b3:65:66:9b:75:32:49:1b:d4:c6:22:29:
3d:90:6d:1d:8b:da:9e:00:2d:08:47:a7:0a:1f:c6:de:60:33:
a2:94:f1:2a:03:da:7b:c1:89:59:aa:13:4d:b6:25:39:59:d9:
8b:af:33:0b:76:56:51:68:fe:26:ef:cb:06:54:a3:e9:28:87:
2a:e0:83:d7:22:51:19:9e:2f:0c:75:fb:6c:ae:33:6d:a5:16:
fb:20:3b:ea:00:9c:78:6d:e9:dc:23:9e:4b:44:63:ee:79:c9:
cb:41:a4:55:68:d2:13:77:6b:99:48:88:67:8b:8a:c1:db:d1:
20:49:52:41:22:21:9f:5c:a3:7a:ad:d5:9a:97:2f:6e:51:c4:
e5:21:d3:9e:ca:bf:70:5e:88:6b:13:3d:78:58:5a:c8:a9:16:
33:cb:5f:37:0d:16:7e:c2:95:8c:f8:fd:fa:05:ce:f9:72:f6:
a0:de:ad:10:37:78:b3:3c:d5:0a:ab:24:c0:ae:84:4f:00:7e:
64:92:20:77:f5:64:91:c3:36:5d:6e:9e:3e:e4:a0:29:e1:7c:
b2:ea:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:55 2026 by rpki-client