Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af9d319-c6c8-4017-98d0-138b7da1fb73.roa
File: 7af9d319-c6c8-4017-98d0-138b7da1fb73.roa (raw, json)
Hash identifier: vQ5OmCb/LvyoRJIA2BpR+QJsoKyqvqMoQAZq+pKd/zw=
Subject key identifier: 5F:FC:B8:5F:84:AE:18:5D:C6:C5:37:F0:08:51:D6:A1:00:50:A1:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5092AC0E25E4B2F65909592454DC0E845DF5E610
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af9d319-c6c8-4017-98d0-138b7da1fb73.roa
Signing time: Thu 08 Oct 2026 17:24:36 +0000
ROA not before: Thu 08 Oct 2026 17:24:36 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:92:ac:0e:25:e4:b2:f6:59:09:59:24:54:dc:0e:84:5d:f5:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:36 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=1839354352e79a08d440c679e3cb79392bcd4a611db5f9dafce2dc0a4249b257, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:19:94:ec:6a:5e:2a:cf:86:da:6a:5b:b9:
47:29:bf:46:85:9b:33:ea:c9:e9:40:8d:0e:53:a9:
fe:17:cb:d5:34:9b:a7:b1:08:87:51:a5:32:2b:ca:
f2:a1:95:2f:54:22:c3:10:4e:ab:5c:8c:4f:b5:d0:
c6:bb:35:41:78:9e:9f:39:e4:f2:dd:df:0e:1e:8f:
a5:19:85:ec:ae:e9:09:48:ad:4c:d3:dd:4f:b3:c9:
22:f4:aa:db:88:90:7f:bd:62:04:35:2a:92:b5:a4:
df:13:71:aa:f9:94:b3:b9:65:7d:58:4c:86:8f:43:
d8:4e:db:75:2b:bb:f9:51:94:83:a8:ad:0f:74:01:
eb:70:3a:56:80:01:ce:9b:6b:9f:61:a6:63:68:00:
4e:02:56:d5:05:4d:e8:b8:41:60:94:99:b4:c2:80:
2d:7b:0d:1e:2b:b9:25:8e:4f:a6:e1:3a:9c:3b:1f:
d2:18:17:c6:7a:9d:ae:ac:c5:ea:48:fc:e5:1f:c7:
d6:20:db:e9:35:27:f1:4e:ac:48:35:c7:f4:d7:32:
98:51:da:dd:cc:85:1b:61:ea:1c:6e:5e:b6:87:1d:
13:04:4c:65:2d:0c:2d:bd:b4:d6:01:31:c4:66:3c:
03:1f:34:1c:f2:78:20:9b:33:7f:b4:8f:41:1b:43:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:B8:5F:84:AE:18:5D:C6:C5:37:F0:08:51:D6:A1:00:50:A1:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af9d319-c6c8-4017-98d0-138b7da1fb73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:800::/40
Signature Algorithm: sha256WithRSAEncryption
18:a2:7d:cd:d1:57:77:92:ed:d7:73:61:60:7e:8c:4d:b7:0e:
56:c1:51:e5:8d:ad:f1:8d:23:4d:45:37:06:06:9d:f5:ca:87:
60:02:94:d4:a7:26:34:e6:31:bd:95:53:59:18:2a:cc:2f:1c:
46:e9:32:98:56:e4:6d:f4:b4:73:60:f6:fe:e7:ed:83:5e:1f:
1d:31:8a:71:8d:7a:b9:69:a4:f4:d6:49:aa:8e:9f:42:c2:c7:
88:c3:15:20:d4:c7:51:4f:60:5d:45:77:9e:6b:60:5a:ef:44:
9c:d6:8a:13:9f:cd:18:72:f1:1e:fc:a0:11:e3:6f:8e:f3:54:
0d:5b:93:03:76:ee:84:cd:7e:dd:0a:07:fa:09:ff:c0:6d:5d:
33:d2:94:26:e8:1c:52:60:28:58:17:4f:f7:82:fc:8e:13:ea:
58:04:2a:5d:f6:33:f7:d9:ed:ef:27:ae:49:0a:33:22:f5:4d:
e4:fc:f5:01:a9:3d:b7:b0:90:30:5d:78:94:82:8b:d8:47:7b:
54:02:eb:31:9b:3e:21:3a:21:60:27:a7:4f:51:fe:85:32:31:
f5:9d:6e:09:e1:06:0a:f4:56:9f:4d:b9:4d:6b:c4:45:b3:7e:
5b:25:16:36:0a:fe:8d:16:9d:2f:13:3e:68:99:27:fd:82:79:
2f:c9:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:33:18 2026 by rpki-client