Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a025e69-9e3e-460c-9734-42e9bd14485c.roa
File: 7a025e69-9e3e-460c-9734-42e9bd14485c.roa (raw, json)
Hash identifier: F2Y4o9TYe7ppzpBdA9LDVOieNtZ1vWGtfMyVij1WF5Y=
Subject key identifier: 77:BC:4F:05:8C:08:AF:EB:AE:FC:69:AA:23:F3:C7:47:59:06:0B:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A094AC87CA9B0EF9C398937E44C2599435C936D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a025e69-9e3e-460c-9734-42e9bd14485c.roa
Signing time: Sun 18 Oct 2026 01:20:08 +0000
ROA not before: Sun 18 Oct 2026 01:20:08 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:09:4a:c8:7c:a9:b0:ef:9c:39:89:37:e4:4c:25:99:43:5c:93:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:08 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=bf4f8e557799d06417d31c24f32272888c8c269860403ce92ded0f658f71d48a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:41:9e:c6:a7:a0:f2:ea:6c:2d:a2:d2:3c:
17:3a:b1:69:27:a5:56:2b:fc:89:96:ee:62:e0:15:
99:4b:64:55:66:26:9d:82:13:6c:d2:16:59:bb:ca:
81:50:95:75:66:3b:de:c1:79:4e:76:98:6d:6e:43:
79:66:ff:ab:aa:51:85:e0:a9:06:97:80:3f:5a:ad:
eb:38:94:aa:5f:75:9d:7e:48:69:49:fd:d4:35:98:
e1:0a:8f:87:e2:bc:9e:f1:ad:73:b2:6f:7a:e7:91:
b3:52:d1:a6:24:20:6d:d5:f9:57:39:51:51:57:16:
17:dc:eb:bf:ab:94:1d:50:06:31:c9:2b:5b:67:c6:
10:77:9c:11:1c:b3:53:45:1c:d8:7e:a9:20:11:77:
57:6a:c1:1f:e0:a1:b0:b1:98:3f:7e:08:dc:1c:2f:
ff:b8:b8:4a:ed:04:59:b1:05:0d:2c:f7:81:a0:75:
8f:a5:f3:f6:dc:63:a5:94:7f:8e:b7:fc:ad:f6:c6:
6e:4d:7d:08:d0:34:0f:0d:8c:fe:86:51:81:28:57:
c9:b1:12:a4:d5:ff:fd:1d:8c:6d:ce:67:2e:53:29:
ec:c1:8f:31:cb:2a:e1:58:00:9a:dc:30:94:48:8c:
05:a0:f3:5b:f0:8b:34:a8:87:92:01:b6:92:4d:5d:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BC:4F:05:8C:08:AF:EB:AE:FC:69:AA:23:F3:C7:47:59:06:0B:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a025e69-9e3e-460c-9734-42e9bd14485c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
58:2f:ad:66:54:be:6c:3b:64:99:25:0b:c9:5b:91:8c:e6:81:
8c:c6:9b:db:db:a5:e9:84:e5:b1:ab:32:34:49:98:17:6d:1f:
90:22:76:78:2a:42:61:d0:c4:b4:de:9c:a1:fa:54:43:6c:df:
f9:38:cf:07:c2:ed:9c:76:7a:43:80:2d:1f:93:1e:47:ed:82:
e1:44:31:54:69:7d:a1:c7:46:5c:9c:37:a8:d8:fc:91:a3:df:
44:48:02:f6:30:89:2c:de:73:99:fa:75:4f:94:90:83:f1:78:
0d:f9:b5:16:f5:33:ca:58:db:b5:b0:47:c3:b6:33:bb:74:1d:
98:f2:13:0d:32:32:aa:ac:87:bd:f1:83:39:fd:fd:8c:33:c5:
f5:9c:c7:a2:6b:68:af:3d:34:29:67:28:54:f3:8d:a5:00:1b:
48:ce:15:61:5f:fd:2d:2f:a3:a8:4f:d5:bb:14:29:8e:9a:0b:
bf:84:19:5c:ea:1f:32:49:ee:8a:73:97:75:25:9b:5e:9f:13:
a5:30:32:a4:fa:08:9d:fb:ed:f8:bf:6d:23:a5:40:2a:fe:1b:
70:4f:a4:75:e0:25:b5:5f:2c:96:3f:06:5a:ac:2d:55:a6:22:
a3:9d:90:fc:ec:fa:88:ab:c5:dc:cb:41:31:89:3c:d9:82:81:
20:64:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:17 2026 by rpki-client