Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
File: 7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa (raw, json)
Hash identifier: 8IOU5tpapCL+/ymL9LLWiK0Wf8+KGyoKHFU9EA6IfiE=
Subject key identifier: F1:19:03:E5:E6:45:BC:10:38:55:28:2C:96:F7:72:F2:C1:B3:D3:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33D029E2B79C588EAAFBE951B01130C99D84ADE3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
Signing time: Mon 26 Oct 2026 04:30:12 +0000
ROA not before: Mon 26 Oct 2026 04:30:12 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d0:29:e2:b7:9c:58:8e:aa:fb:e9:51:b0:11:30:c9:9d:84:ad:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:12 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=befdb59cb7341a51017476a0557f2be39ed510cbfb190fb269d3e32bdec63ef4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:9a:a9:17:9f:02:bd:f0:0d:dc:67:b0:21:
60:58:db:9a:dc:a0:36:fa:2b:c0:b8:6e:7b:9c:46:
a3:6c:7e:e6:31:0a:87:2b:29:47:2c:a4:62:c2:49:
42:f8:9b:91:3f:d0:ab:27:84:2e:ce:a8:a3:f6:96:
62:87:89:24:28:95:0c:a0:69:61:2a:49:fe:2f:9b:
63:5b:25:e8:de:4d:e3:d0:84:44:e7:46:a3:13:2a:
db:5f:4e:08:3f:7f:e9:39:11:09:37:c8:20:24:0e:
24:88:24:b9:f6:ae:82:b3:8e:8e:34:55:6f:2c:a8:
18:e2:60:24:4b:58:20:62:0a:d2:e2:d1:30:b9:c7:
d5:fb:d6:c3:aa:32:55:0c:c9:7e:33:c7:62:99:72:
9c:b7:54:4a:e2:b4:2b:c1:6b:c0:a0:fc:48:dc:64:
17:04:1e:49:b5:81:c1:47:93:02:16:d7:9f:dd:59:
85:f9:07:40:00:75:a0:17:9c:80:b8:d7:21:33:e4:
87:e7:6f:0b:bc:10:71:58:37:ca:ce:e3:e0:17:1a:
a6:ab:83:cd:e6:2a:b5:c9:79:a0:8d:02:dd:70:e9:
b3:b0:ce:36:34:06:54:ef:c8:e8:48:47:fa:05:3d:
e9:2a:f4:b0:c0:59:cc:9f:38:e5:bf:6e:c0:07:f2:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:03:E5:E6:45:BC:10:38:55:28:2C:96:F7:72:F2:C1:B3:D3:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
96:3a:3e:b3:53:2f:1b:3c:31:72:4a:d9:5d:9d:83:c0:65:42:
43:c2:68:e6:e4:0c:28:01:e6:e3:e9:3a:c5:f9:cb:8a:ed:45:
a1:3f:03:28:e5:8f:6c:e9:e9:3f:1e:de:2e:d4:93:b1:46:71:
14:0f:ac:0e:9e:d5:8d:7e:f9:bb:bb:4d:c8:de:55:29:49:cb:
f0:e6:a3:75:7c:9f:68:4f:ac:9e:79:49:15:89:73:1a:d2:f1:
a7:5b:bd:59:a2:a1:33:7d:50:7c:05:35:31:a9:53:67:c0:63:
15:cb:1a:ff:47:1e:0f:9c:e7:65:d9:38:20:b6:1e:ef:d3:6b:
37:40:5d:ea:a0:63:6b:3a:1c:94:04:c2:a6:a4:8c:b9:8e:cb:
0a:25:04:ec:c7:88:81:8a:22:3c:18:51:65:62:95:5e:d6:a3:
fa:ec:71:d2:4c:9f:1b:81:12:85:16:bd:3c:42:3f:50:eb:46:
41:98:2a:cd:74:3b:e6:48:37:7a:e9:93:12:06:88:d2:7e:f4:
7d:35:d3:dc:d8:d7:94:73:b2:14:0a:fe:04:8c:ec:7a:f7:ab:
68:cc:0d:cc:ac:e5:46:4b:eb:56:33:85:69:67:15:d7:ff:0b:
48:04:e8:30:93:a3:70:38:95:77:70:12:0f:98:fa:8c:61:90:
c2:92:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:17 2026 by rpki-client