Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
File: 757087af-5baf-4a2f-a9ec-dbadb47313e2.roa (raw, json)
Hash identifier: GP9PAu30z3wUdomgEu4+yi9eUXy70hR9bhXMIt0Ugow=
Subject key identifier: 54:02:BA:25:C9:E9:EF:8F:09:B5:03:69:A9:F9:74:9C:6B:B7:D8:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39BABFD3F652E93C13386BA9B08D4F4E9BBBB464
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
Signing time: Mon 26 Oct 2026 04:30:13 +0000
ROA not before: Mon 26 Oct 2026 04:30:13 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ba:bf:d3:f6:52:e9:3c:13:38:6b:a9:b0:8d:4f:4e:9b:bb:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:13 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=086b810ed9a7a6cae01cf1a2ba2f524dba517d045f4874689cba687b009cdc7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:22:21:f3:25:90:8c:24:b5:61:4f:35:d7:
41:32:57:07:9e:f0:94:11:70:a1:b8:c3:a3:3e:d2:
48:e7:09:2e:7d:00:23:e7:d1:9f:d5:0d:5f:6b:eb:
6b:8a:34:fc:6b:71:65:c8:9a:a1:4b:ec:57:f1:3f:
e3:73:51:95:3c:02:33:e6:85:74:ef:f7:41:b1:12:
9e:25:88:7b:f3:7a:5c:dd:d2:82:e8:0f:44:32:aa:
0d:33:dd:3b:54:3e:08:9d:cb:d0:da:f4:b3:0d:e5:
91:e2:c2:9c:ad:da:b7:f5:7b:d6:97:7b:4a:78:0e:
77:44:52:68:bd:f6:3c:e0:79:81:bb:55:c2:be:e4:
95:3d:cb:79:36:ca:89:6a:2b:cd:ca:fb:9a:52:30:
64:8c:98:45:9c:70:79:57:a6:f3:48:d9:f4:58:ab:
77:54:6d:91:c3:3b:1a:19:4c:da:e9:7b:0f:89:5f:
eb:23:da:20:13:21:68:dd:06:b0:1d:a8:68:98:77:
dc:6a:d9:c7:c0:f2:ce:20:ba:3d:9f:00:4d:f7:71:
34:b1:9b:d1:75:ef:5d:2e:90:1b:23:82:9f:e0:53:
01:7a:4f:e0:e6:6e:6f:a3:46:b7:22:dd:53:e8:b8:
57:52:ca:cf:6b:bb:62:68:35:40:e9:ab:dc:b8:8f:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:BA:25:C9:E9:EF:8F:09:B5:03:69:A9:F9:74:9C:6B:B7:D8:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/757087af-5baf-4a2f-a9ec-dbadb47313e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:44:07:d7:5a:51:2c:9d:4f:b1:ca:8d:39:54:6f:3d:45:15:
1b:a1:91:17:f1:d3:be:b2:c9:da:79:ee:05:54:f6:02:e5:8e:
cf:52:74:19:12:d6:f0:2d:39:02:b6:73:34:26:54:ba:8a:97:
d7:2a:3c:76:fa:88:ee:e2:26:87:d1:e4:bc:59:ef:9c:30:0c:
fe:bb:ad:26:f5:a8:04:1b:dc:2f:14:0b:d0:3b:dc:7a:a3:a3:
5b:4a:7c:5a:f9:3f:8a:c6:97:26:08:af:c6:64:35:53:b3:ff:
54:a3:ec:44:28:32:4b:be:3c:a1:c7:35:16:a0:46:e0:2a:35:
cb:0c:59:8c:e1:e6:99:c4:4e:5f:16:13:c3:82:2f:ed:80:2b:
89:24:b5:cc:02:9b:48:54:3c:2f:83:09:64:d5:09:85:e3:bd:
fc:59:50:69:53:98:af:ea:b0:1f:31:23:35:ba:b7:84:05:ce:
05:bd:25:7b:a1:17:5e:8c:0a:67:55:ef:aa:c5:82:da:1e:fd:
83:0b:eb:4f:ee:97:31:4f:4f:3c:5d:bd:94:18:18:55:10:6e:
eb:54:19:57:2e:6b:1e:a1:39:1e:60:8b:8b:f7:e2:a0:f0:7d:
fa:18:ce:a4:fa:c5:97:39:55:7e:48:d7:1f:79:79:55:f4:45:
2f:82:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:58:47 2026 by rpki-client