Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76aba510-da97-4c2e-ad61-1ca0628deb91.roa
File: 76aba510-da97-4c2e-ad61-1ca0628deb91.roa (raw, json)
Hash identifier: 4LfEYAnxqzereIAqzu5jXSK9AkgUn9yj3KF/OqfbU8g=
Subject key identifier: BA:F0:D9:32:52:C3:AF:83:01:97:9A:CF:F0:78:D7:83:65:C8:74:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B578599A0260590450A64714BE0D2B69E0196B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76aba510-da97-4c2e-ad61-1ca0628deb91.roa
Signing time: Thu 29 Oct 2026 01:02:20 +0000
ROA not before: Thu 29 Oct 2026 01:02:20 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:57:85:99:a0:26:05:90:45:0a:64:71:4b:e0:d2:b6:9e:01:96:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:20 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=521e3be69e440fd9191a5fbbc691a6e4c2b4f792e4c4a5e7bcb63b9bfb3a3168, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:51:b8:9f:37:4b:90:4e:6f:3b:34:00:d7:
63:15:8e:db:3f:c6:ac:32:bc:2d:e1:f6:10:9c:2e:
30:73:c6:f5:7d:31:e1:3d:52:dc:5f:5b:1e:22:27:
34:0a:c1:24:ca:36:d5:59:87:ee:14:53:5c:e1:fa:
54:5c:78:2e:58:51:cb:8d:c3:74:d7:6a:b8:f0:d8:
e5:66:1f:72:9b:5e:74:1d:64:c8:08:c6:a0:88:95:
d0:d0:b8:e7:80:28:52:fe:63:5a:87:10:2e:d1:1c:
99:a0:d6:2b:4f:17:8f:cb:d3:7a:fb:28:3f:73:09:
38:70:b4:c4:06:36:36:05:86:c8:dc:ae:4f:01:f5:
8d:4e:93:4b:0d:6d:e3:36:d9:77:16:07:3f:75:92:
4e:cf:93:d7:2a:e3:6d:fa:3c:25:cc:a0:92:0a:4d:
c2:08:27:54:43:ad:90:2f:db:a0:e9:8e:2d:e2:9f:
60:3b:b7:da:0e:36:f4:b2:cc:df:ce:63:06:90:ca:
8a:ef:fb:e0:34:44:3a:e0:4a:9a:af:99:64:ec:c2:
07:b7:bf:db:6b:63:39:a7:9a:32:3f:e8:86:da:42:
a2:3e:9c:23:f6:3c:83:68:db:b8:b8:88:18:60:e3:
a2:77:42:e0:a8:ea:6f:74:04:d3:e6:11:2f:e1:aa:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:D9:32:52:C3:AF:83:01:97:9A:CF:F0:78:D7:83:65:C8:74:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76aba510-da97-4c2e-ad61-1ca0628deb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8000::/40
Signature Algorithm: sha256WithRSAEncryption
42:0e:9c:28:5a:c4:32:c9:2b:87:cb:0a:55:d6:97:92:29:60:
53:5f:6c:a4:38:1b:e2:43:0f:36:b4:5b:a5:5c:d6:f8:a0:2c:
4d:f4:4a:86:41:6f:3e:df:2c:cf:97:ca:cd:16:e5:a1:03:13:
83:4f:63:12:f7:ad:ce:be:0a:b3:fe:7f:6e:6c:8a:ca:c8:fe:
cb:0f:7c:07:67:b2:fb:8b:60:ec:df:57:5a:a7:ba:a0:45:02:
df:c2:ce:7c:53:d8:29:22:a6:e9:18:72:14:e9:28:37:98:f8:
33:75:92:68:e4:bc:c8:d2:3f:98:54:26:64:43:4c:68:52:fd:
9e:6d:d8:76:ac:08:e3:7a:9a:c4:fd:a0:4c:9b:cc:53:6d:ec:
ab:68:72:eb:a2:1f:0e:90:56:ea:c4:f3:ad:09:91:01:73:f4:
d5:91:26:f5:b7:91:bb:6b:bc:ec:e4:08:1f:28:c5:fa:03:5b:
fc:02:50:bf:fb:62:a9:fc:df:43:48:16:8c:3e:d0:d3:84:91:
bc:a0:e1:e5:57:df:20:31:5e:68:cb:ca:ae:92:82:69:8b:ef:
9e:48:79:fb:40:de:96:67:50:58:47:c2:f7:27:6c:3e:50:9a:
f1:a9:14:22:29:cc:00:06:53:b6:a4:9f:be:ce:c9:11:f1:6b:
68:6a:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:42 2026 by rpki-client