Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
File: 7665346b-5715-4d4a-9ee7-32affc669e92.roa (raw, json)
Hash identifier: 1xeXtKLsjgiGF27Bm/ZkH5TP8xT1f/aDfUTQE2ZMCME=
Subject key identifier: EF:79:D7:57:3D:0D:57:A4:25:04:A3:A6:9A:50:77:C4:D0:25:4E:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EDFCB35AF664F7EB27FC5F8B21958F2959D0760
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
Signing time: Mon 26 Oct 2026 04:31:06 +0000
ROA not before: Mon 26 Oct 2026 04:31:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:df:cb:35:af:66:4f:7e:b2:7f:c5:f8:b2:19:58:f2:95:9d:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=d0d8c54c07a6f62f2edc508609528c24248f4aa379f32ba667c531f599024e4f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:9d:8c:df:8f:c1:70:7f:44:08:ae:d4:18:
0e:4f:ef:02:37:5b:27:b9:18:58:f8:3a:54:2f:67:
0f:5d:83:d9:7f:65:87:8d:e0:13:01:96:19:c1:86:
f9:bd:69:f5:9f:f5:8f:ae:3f:29:1f:d1:7f:b2:94:
41:e1:0b:2c:b9:b3:4d:97:3e:0b:14:3b:fc:79:19:
36:86:bb:00:77:19:99:52:2a:43:2b:7b:ac:46:a1:
a8:c6:cd:17:02:dd:58:71:06:82:23:e0:1b:e3:69:
b3:65:42:98:8d:15:b8:c5:c9:8e:26:8f:30:d0:6f:
53:f6:87:ba:b9:cf:08:cf:af:9d:90:18:c3:64:9a:
b3:99:ab:27:0f:ff:90:6b:52:bd:f1:e7:50:69:1e:
83:b3:11:41:49:ba:c1:e2:36:30:1d:2b:53:ac:3b:
bf:48:42:d1:dd:33:ac:e4:92:10:89:cb:38:52:19:
09:f6:e5:e3:61:2d:4c:3c:25:07:ed:bd:03:ed:c9:
18:36:e5:02:45:6e:5b:c8:6b:30:63:16:53:6a:06:
7c:de:22:2f:9b:69:66:e7:01:ee:39:53:76:e6:ba:
89:0f:b0:3e:9b:1c:3f:bc:52:15:8f:82:da:d6:17:
a3:47:0a:51:11:14:08:32:9c:09:80:32:9e:90:a6:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:D7:57:3D:0D:57:A4:25:04:A3:A6:9A:50:77:C4:D0:25:4E:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2040::/48
Signature Algorithm: sha256WithRSAEncryption
64:a3:da:bb:2d:ad:55:b8:24:1b:bc:4d:d9:b1:ff:ae:bc:03:
b5:b9:c7:04:1d:ca:8a:f7:7b:19:2c:8f:77:55:f4:46:8d:bc:
e0:81:74:6b:ab:ea:0a:8c:e2:a1:2e:c9:70:6e:7d:e9:cd:35:
77:a0:9e:6e:c3:bd:0b:93:a9:80:6d:e4:a1:0e:e2:b9:55:06:
06:77:dc:d3:40:24:0d:ec:54:a7:db:4f:a8:85:89:8c:d2:bc:
b3:41:07:a0:f6:d8:f5:da:44:f5:6f:e2:ef:61:45:ed:43:0a:
ef:8f:c9:6e:1b:d5:c6:2c:3c:be:23:8a:52:b5:3e:ec:5c:96:
23:29:9f:c4:53:0e:f1:41:45:40:84:6b:c1:50:9e:e7:08:47:
ca:b3:ca:8b:60:9a:95:3b:60:79:5a:2d:f0:24:b1:87:16:0e:
08:f0:fe:b2:02:cf:e5:06:4c:34:0e:93:8c:74:64:ad:d5:0e:
41:50:68:be:f9:51:87:26:75:12:83:b4:7b:79:e4:e7:3f:fa:
bc:bb:1f:56:e9:62:74:c1:54:ce:de:bd:31:9d:2f:ef:d9:f6:
2e:10:d7:30:1c:1a:20:d5:9d:df:f3:ef:c4:81:f6:81:2d:ff:
e4:4c:c2:23:bc:d5:75:e0:4d:6e:01:ed:00:5b:21:77:0c:0f:
2e:02:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:22:59 2026 by rpki-client