Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7802179a-c80f-42f1-a50b-a0af1df078c2.roa
File: 7802179a-c80f-42f1-a50b-a0af1df078c2.roa (raw, json)
Hash identifier: hKrPlYk4jSAMAPEwv7/AiM+pARvFoBvzl84PKjimqaE=
Subject key identifier: 27:73:F7:A6:95:A3:C4:B2:36:1D:A7:13:F8:B5:46:14:DA:9E:1C:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12B6EBD614E7A524AE24E3AD90A65D82B24BF3FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7802179a-c80f-42f1-a50b-a0af1df078c2.roa
Signing time: Mon 26 Oct 2026 05:10:29 +0000
ROA not before: Mon 26 Oct 2026 05:10:29 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b6:eb:d6:14:e7:a5:24:ae:24:e3:ad:90:a6:5d:82:b2:4b:f3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:29 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=679a47cae11a044e93371dfbdf1f384edd4f26ae727d94f1c002de88bbca9ba1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:d1:30:36:da:bf:ac:5f:cd:6c:33:65:50:
13:51:6c:6e:2d:f8:8a:88:10:9d:a2:17:4f:96:28:
6f:75:a6:7c:f2:0b:f2:eb:7c:3b:9a:61:2f:00:4a:
aa:b6:58:e7:9f:0d:d1:28:1a:41:a3:27:ea:62:b1:
4a:ad:cd:24:8a:12:28:e3:e9:53:9f:73:bb:1d:19:
49:9d:05:2a:65:7a:73:f1:98:61:90:33:51:d5:1d:
14:82:a8:cd:27:0a:e1:da:4f:d7:c8:3f:af:44:3a:
40:ae:b0:52:c4:4a:bc:61:b7:19:42:02:ad:ab:6c:
89:0a:2d:fd:ab:63:c4:25:a9:ff:e6:e4:23:a1:da:
63:5b:08:68:5c:93:d2:b2:c4:86:2e:3e:d3:7c:5b:
58:65:4a:1c:a9:23:93:13:b6:07:dc:70:58:d1:e7:
59:e6:c9:d6:20:5b:04:22:b8:2d:ef:ad:90:4a:07:
6b:a3:28:03:a1:f5:14:02:4b:3e:fd:4d:8a:ea:f2:
e2:ee:25:da:86:eb:6a:69:c9:3f:00:1c:35:7e:3f:
8f:2f:20:1a:60:31:71:dd:96:cf:55:89:fa:73:a8:
20:34:62:8d:6d:15:ee:19:bc:b5:d7:f8:d4:c8:83:
ee:9d:08:e9:c9:a1:1b:42:a4:59:be:3b:34:b7:26:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:F7:A6:95:A3:C4:B2:36:1D:A7:13:F8:B5:46:14:DA:9E:1C:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7802179a-c80f-42f1-a50b-a0af1df078c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:4000::/40
Signature Algorithm: sha256WithRSAEncryption
96:3f:97:10:76:05:6d:4e:df:ce:24:a7:e5:26:d2:ed:39:6d:
3f:b1:48:e6:58:9e:a4:dc:92:1c:39:57:93:62:6e:37:f0:51:
db:af:13:af:be:74:cb:ae:92:68:a7:32:7d:7d:f6:b8:a3:a3:
f4:18:3c:d6:2e:97:21:8d:c2:3c:12:7d:fe:9b:29:22:50:1c:
a4:a7:43:18:da:f5:9c:63:f8:7f:30:4c:6c:ad:71:06:c2:08:
b0:a3:55:84:87:0e:16:0c:7c:63:4f:54:31:34:07:dc:dd:65:
15:de:45:f9:4c:a8:21:a4:c1:b5:1f:7a:39:92:bd:3c:f5:f6:
ad:5a:ac:4b:c5:f8:7f:e1:22:ea:90:c5:0e:87:65:d2:b1:45:
7a:45:d6:bb:da:5e:9e:aa:1c:c8:48:d3:4f:e8:0e:53:4c:43:
1d:30:e2:30:56:17:a1:1c:07:9e:d0:c5:83:a7:dd:43:b9:fa:
4a:48:b3:57:2a:cb:73:ee:14:87:46:d5:ce:bd:34:a1:c4:c6:
29:11:54:e5:3a:8b:91:8b:ce:36:65:5a:7d:29:25:4d:00:3c:
dc:97:1f:06:e5:b9:5b:5e:5f:fa:de:4a:52:fd:1f:b8:b4:80:
7b:ca:9b:41:61:9d:82:4f:9f:c3:40:1d:1a:b5:5a:3e:f1:41:
e7:8f:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:28 2026 by rpki-client