Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
File: 7af2d4a0-df22-4933-b605-1ecbbd66f982.roa (raw, json)
Hash identifier: 7+q+Ru95ah2DVyHCIDr4MJ4Z44GokXGKyeowGSK3Roc=
Subject key identifier: E0:CC:27:8F:45:A8:90:84:17:11:2C:BA:68:8E:C7:46:A3:79:AB:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67DDD56DF7282CBD637A62AB803573D7EB262B3D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
Signing time: Mon 26 Oct 2026 04:50:38 +0000
ROA not before: Mon 26 Oct 2026 04:50:38 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:dd:d5:6d:f7:28:2c:bd:63:7a:62:ab:80:35:73:d7:eb:26:2b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:38 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=fc92c2f5f6226d43834034a2753c1e6bebbb60e24cf518174b48971ef8d5099c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:1b:14:98:a9:53:dd:39:9f:fc:5d:2a:8a:
54:fc:8f:21:23:9c:bc:8f:23:cd:db:cc:14:0c:30:
e8:3f:7a:1b:bc:4b:d5:c2:7e:7a:53:44:88:c1:a9:
21:8f:5d:95:51:bf:f9:9a:e0:25:6d:a7:69:3e:ea:
56:1f:e7:ac:71:58:56:15:f9:21:01:98:c9:2a:cb:
d9:02:11:4f:45:55:65:59:f4:0c:58:26:4d:a3:c3:
64:9a:6d:e9:73:39:31:74:3a:30:d3:3d:23:38:55:
d4:c7:2e:75:a9:80:13:ec:80:34:71:f0:29:ff:0b:
e6:a6:03:9d:c0:17:8f:f9:e5:7c:56:b1:46:04:cb:
6a:43:1f:15:87:3d:63:ff:40:ea:07:3e:7d:75:a9:
71:c7:35:27:2b:ce:5a:2a:fb:5b:71:78:64:d1:bd:
78:25:53:83:d3:e5:d4:87:4d:b6:f2:c0:69:5b:9e:
06:c9:03:5e:c1:d6:ec:bd:7b:55:09:4d:1c:89:53:
96:25:25:ea:c5:c2:bb:fb:47:55:ed:a6:99:e7:ae:
e9:3d:e7:2e:2d:18:bf:61:70:60:2c:6b:23:c3:a2:
50:1a:3d:89:ce:47:74:dd:d4:5a:f7:e7:f5:21:d5:
99:b3:56:39:83:69:cc:1c:7e:80:8c:2a:f5:31:00:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:27:8F:45:A8:90:84:17:11:2C:BA:68:8E:C7:46:A3:79:AB:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:c00::/38
Signature Algorithm: sha256WithRSAEncryption
c6:8e:cb:cf:d0:fb:2a:57:be:2c:48:76:78:60:4b:5b:8d:0b:
4a:05:89:16:c3:aa:01:74:41:6f:c4:d3:6a:6a:86:c3:7e:37:
05:56:eb:99:ab:33:58:ae:8e:10:99:1b:9d:c8:d2:e6:6d:3c:
e8:b7:fb:e8:68:85:15:70:78:1a:5b:d3:4f:82:3e:e1:bf:a7:
c1:cc:e2:ec:a6:16:77:43:38:9f:1f:f2:2a:c9:ae:0a:3c:42:
a6:80:ad:76:30:50:36:15:f6:dd:48:8b:3f:2f:33:79:05:21:
34:ca:a4:8f:37:8d:8a:af:d6:16:a1:fb:a3:d7:12:99:dd:5b:
e1:c9:ee:28:26:f9:e8:39:0d:dd:aa:e7:95:85:a3:0f:cd:b2:
c0:f3:f8:d0:af:df:85:ad:9d:27:b9:87:14:67:f5:94:14:ea:
8a:6d:05:93:77:9e:83:ed:cb:9a:9b:31:f6:52:4c:75:b7:6d:
c3:79:b4:4c:a6:1c:3c:6e:7e:68:22:f2:0b:03:f9:f2:51:b2:
d1:28:4a:aa:33:27:2f:a3:8d:7c:67:95:27:f7:01:40:6a:85:
fe:b5:02:18:f9:e8:73:23:9c:96:41:08:75:77:4e:b9:34:15:
06:65:27:aa:79:eb:71:1b:60:9b:37:0b:6c:ed:79:14:4b:ec:
e2:2b:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 18:47:28 2026 by rpki-client