Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7702ca43-6770-4c3b-af7b-802e8824e193.roa
File: 7702ca43-6770-4c3b-af7b-802e8824e193.roa (raw, json)
Hash identifier: axAUYdawzRzDssLz8PomRBzkZPe59AG/uC0ISz999pU=
Subject key identifier: A9:39:35:3E:34:AC:D1:F0:CC:E2:EB:86:0A:A9:58:DD:FF:D5:E7:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F0810A8E25210C240E285E49B616325AF767F98
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7702ca43-6770-4c3b-af7b-802e8824e193.roa
Signing time: Thu 29 Oct 2026 01:02:45 +0000
ROA not before: Thu 29 Oct 2026 01:02:45 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:08:10:a8:e2:52:10:c2:40:e2:85:e4:9b:61:63:25:af:76:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:45 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=3d6230f1c52fcbdc86dd689ee086c2c19cf10d8b472e8aaaafde1cee10d53eaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:ba:69:cb:c9:fa:b1:35:93:7a:58:ab:a3:
29:d8:ca:e3:5c:e8:b5:10:71:68:87:2b:da:d5:e5:
d9:02:92:d3:aa:cf:bf:77:ed:ff:a3:40:95:ec:11:
8b:e0:25:18:33:d0:10:ee:80:92:ea:31:ec:67:67:
d8:6b:dd:d5:4b:4f:c6:d8:00:b8:cf:63:c4:28:42:
9d:42:99:a5:ba:30:3b:40:0f:89:a5:e0:d4:b2:e0:
21:0a:98:a2:5c:c6:fc:ed:2f:4c:8c:88:09:07:4c:
56:53:20:32:1e:93:aa:60:bc:88:59:50:05:e6:38:
2d:bf:ce:11:1d:de:3a:b5:77:83:0a:6d:2c:85:47:
d6:79:3e:5a:df:c3:80:66:7f:6b:d5:71:7b:b9:3d:
b6:47:3f:9f:41:53:2f:54:ec:f4:87:2d:49:73:9c:
0c:93:b2:e7:6d:81:d0:88:8f:88:03:4e:00:f1:57:
73:81:26:0f:3b:dc:aa:b5:5f:e4:4b:01:3b:a3:aa:
4c:99:98:f8:be:8c:06:0e:c2:68:84:c4:9c:8c:e1:
58:92:29:20:c4:51:a6:59:92:62:72:89:e8:b8:98:
d7:e9:e1:40:d6:93:9e:cc:d9:6a:a3:19:5f:1a:7f:
d2:4a:8a:2d:b0:e8:16:e8:78:8a:79:5b:77:99:53:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:35:3E:34:AC:D1:F0:CC:E2:EB:86:0A:A9:58:DD:FF:D5:E7:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7702ca43-6770-4c3b-af7b-802e8824e193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:5080::/48
Signature Algorithm: sha256WithRSAEncryption
86:61:e2:f1:dd:a5:de:ad:aa:f1:54:e8:0c:01:69:4d:99:54:
9b:13:5a:9d:80:b5:08:9f:c0:fa:8c:b3:ca:d9:ca:72:ba:6a:
73:10:d2:1d:85:ad:98:61:ca:50:0e:cc:79:e5:d5:1e:51:72:
76:07:98:1f:f6:8b:0d:49:e5:7a:24:a3:23:23:7b:32:be:02:
04:7a:aa:ed:74:34:a7:04:9e:45:7f:2a:c5:e1:41:fa:24:9f:
e6:41:e0:30:68:76:39:ba:0b:fb:7f:f0:55:77:15:0f:bf:db:
36:68:cd:2b:d4:ac:27:53:70:90:05:d9:63:e9:cb:e4:f5:08:
d0:da:a5:c7:09:11:dc:1d:60:a6:00:f9:bd:74:99:32:41:b6:
cf:0d:2a:d2:e3:d5:2e:98:d4:92:1e:2f:d0:3f:cc:5e:9c:6c:
06:14:0e:5a:14:b2:af:fc:20:8a:43:8c:5c:05:cb:2d:3f:76:
26:73:1a:18:58:4b:44:43:18:fd:24:71:eb:ae:a2:9e:09:de:
c1:d6:d5:31:ea:e8:22:c6:24:84:70:12:3e:0b:e8:64:1c:2c:
a0:4b:15:cc:1c:5c:ad:13:ed:c3:24:84:19:e8:70:6d:71:ef:
67:43:cd:0d:8f:8e:4a:1c:79:49:87:fd:8e:b1:87:c3:c6:c4:
53:4e:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:59 2026 by rpki-client