Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
File: 79440387-66a3-4852-a94b-8a3250f20726.roa (raw, json)
Hash identifier: qZddbMhvLb26aWeDzYD13nJmpjk74zPfdKdkSWtRVCw=
Subject key identifier: 5C:B7:8B:20:31:B8:1A:74:E3:CF:35:3A:9E:73:D1:74:DD:D3:12:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CE2B0C97E578981BD5ECD2B2604C0F6DF38C870
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
Signing time: Mon 26 Oct 2026 04:31:06 +0000
ROA not before: Mon 26 Oct 2026 04:31:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e2:b0:c9:7e:57:89:81:bd:5e:cd:2b:26:04:c0:f6:df:38:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=da9a1deffd824de6ad36acd0858779f88d05feb342d44b675882bf28d539814b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:37:75:c1:b1:b4:ae:15:f6:5d:16:e0:bd:
e1:1e:67:fe:20:41:82:35:99:2c:2b:48:7f:3f:60:
d5:4f:bd:7c:d9:90:f7:6a:2b:51:5e:91:b8:6c:9d:
6f:35:55:96:d5:51:cc:ce:d3:df:67:a6:95:0b:59:
56:c2:96:fe:09:8a:9a:3b:e6:78:ab:85:2f:e3:60:
9e:09:a4:d0:ee:f1:c6:9a:25:93:e5:70:8e:70:ec:
d9:e7:06:60:8b:ab:4a:18:0a:ee:ea:fe:a5:b4:57:
ac:6c:ea:3a:22:fa:b3:c1:e5:70:e4:b2:ee:85:eb:
4d:96:5a:38:a7:60:36:a3:6b:7a:0b:e0:73:52:95:
93:09:56:43:bf:b7:a3:41:44:1e:a0:72:c1:33:92:
3a:55:6b:ab:a6:da:9d:24:31:fa:ff:a1:ee:bb:bd:
b7:71:e4:bd:41:66:36:d6:a0:d2:ad:e5:dd:b4:43:
a9:17:14:1e:05:df:c2:38:b0:81:3e:ba:85:a7:d9:
4f:d3:ee:48:d2:7d:7e:5d:b9:60:42:06:d9:a3:09:
2e:d0:bf:38:d8:93:b0:0f:9d:43:db:0a:82:9b:09:
34:9b:d0:03:bf:a6:f2:b9:13:5d:b8:1c:1e:a7:2d:
b0:65:65:6b:64:47:b7:0f:00:b1:4d:02:25:d8:fc:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B7:8B:20:31:B8:1A:74:E3:CF:35:3A:9E:73:D1:74:DD:D3:12:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a040::/48
Signature Algorithm: sha256WithRSAEncryption
52:6b:44:a5:ad:d7:3a:62:c7:54:21:24:c6:8c:80:52:4b:6e:
5a:20:74:6c:22:88:22:43:68:90:c6:f8:4a:49:c8:d5:ca:0d:
bb:7c:9d:9d:56:71:54:29:73:45:1e:82:58:51:dc:b0:d7:9a:
cb:59:6c:a6:12:93:7c:41:00:a4:7c:62:00:a9:86:00:25:df:
55:06:ae:d5:b3:91:83:8a:e7:8c:b7:b7:9a:7f:89:00:ee:1f:
7b:65:ea:88:e5:4a:a8:5d:48:9f:bf:9f:dc:5a:93:69:cf:ad:
d0:29:cb:f8:fd:78:fe:e4:0e:2f:f2:32:9c:15:d5:5d:d3:00:
40:cc:23:a0:23:96:7c:90:73:66:2f:a5:33:8c:53:f5:53:3d:
84:c2:c5:2e:0c:0b:a3:04:7e:0c:3a:96:99:64:9f:2b:93:78:
fa:56:c6:a5:01:b6:9e:64:bc:17:e2:8a:d4:40:48:3d:ad:22:
56:b9:9d:a7:e5:8d:e5:b8:c6:f3:bf:76:52:b1:b4:64:45:74:
e8:16:88:c7:6b:05:5f:ae:fb:0f:d6:ac:07:81:3e:d4:17:90:
f2:d8:c3:40:2b:e0:c6:79:6a:01:35:50:01:36:af:f4:56:1d:
74:ad:0e:01:0d:b7:3f:c6:ee:d6:71:74:43:6a:26:cf:0a:e4:
eb:bf:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:59:20 2026 by rpki-client