Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce3337a-f2db-4c25-9379-784423d494de.roa
File: 7ce3337a-f2db-4c25-9379-784423d494de.roa (raw, json)
Hash identifier: tTY9OlgNwgG5YShNLjLD7ugIQwVRjr7cwmOSqI5nZ0w=
Subject key identifier: ED:71:30:7A:48:1A:A6:58:26:03:96:3E:9A:E2:8F:CE:D5:59:79:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 651C43C6DDCC642CE6D53220A43AA9AC1D844690
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce3337a-f2db-4c25-9379-784423d494de.roa
Signing time: Fri 09 Oct 2026 01:20:10 +0000
ROA not before: Fri 09 Oct 2026 01:20:10 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1c:43:c6:dd:cc:64:2c:e6:d5:32:20:a4:3a:a9:ac:1d:84:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:10 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=4ed6a8e3912ec4cd8d445b689909b32d802cab5acc1dc59ece69bf4fe0c02472, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:0e:25:f9:70:55:9f:cf:27:50:4c:0d:53:
cd:d4:83:0e:7a:8c:23:5e:38:8c:5b:d1:19:26:cb:
a5:7e:57:1d:41:b5:1c:d7:31:cd:cd:df:10:b5:eb:
31:7d:e7:5c:02:86:93:0c:25:9d:41:8e:32:77:d2:
e1:9e:98:03:6f:85:c7:ae:7a:d3:71:85:e8:3e:1c:
3f:79:e8:a8:d8:60:a2:c2:93:47:ee:c7:39:3e:2f:
1c:a5:5b:a4:ee:c5:d4:e4:b0:03:0f:cd:39:fa:8a:
67:6d:63:68:b7:9e:0b:0f:3f:c2:4e:bb:6d:99:c4:
91:d0:19:14:36:54:4f:e9:39:c2:99:66:56:c0:d3:
9c:86:27:ad:9e:66:74:25:e1:d5:c3:07:c6:b8:41:
c0:c8:1d:ec:07:f1:19:80:02:52:34:11:2a:a4:17:
55:de:6f:49:5c:bb:2a:c4:57:ba:2c:c4:28:07:f8:
1b:05:a5:67:2a:5c:6a:36:51:14:d3:a5:32:ba:ff:
cb:b2:20:df:a3:9c:ba:14:81:81:8c:05:08:22:5f:
77:02:d9:a5:5d:6c:38:d5:ec:66:bc:45:ee:dc:0c:
40:b6:56:2f:6a:f4:32:52:25:8f:3a:d4:c6:d0:17:
4a:8c:dc:dd:42:aa:dc:ef:0f:cd:68:39:72:0b:cd:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:30:7A:48:1A:A6:58:26:03:96:3E:9A:E2:8F:CE:D5:59:79:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce3337a-f2db-4c25-9379-784423d494de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:9040::/48
Signature Algorithm: sha256WithRSAEncryption
7d:f2:34:87:3e:71:84:4c:39:4e:ab:f8:2e:2d:0f:55:37:36:
16:df:65:e1:ad:2f:10:02:0b:b8:ca:bb:a3:d9:87:dd:16:99:
01:1b:87:13:4f:bf:79:c7:4f:41:4f:a0:cd:bd:d4:b2:87:c2:
8e:bf:63:e9:3d:6e:bd:77:8c:59:13:e4:87:f1:5a:7a:92:a2:
ae:cb:59:41:a6:e3:42:e7:fc:9b:8a:23:14:35:f1:b2:90:ec:
48:ea:ec:f6:4e:89:13:12:90:63:69:e0:2d:57:dc:48:d3:f7:
23:ae:50:ee:9a:51:e8:cc:4f:51:70:17:c1:31:e3:dc:bb:97:
c5:5c:00:63:2e:7e:a4:7f:64:d5:7d:fc:da:41:d5:f9:f5:7e:
1a:a2:a0:da:03:f4:3e:d0:79:c2:a8:21:cf:e8:0f:9b:75:2e:
fa:63:83:e6:31:f9:a7:54:37:f7:81:4d:ea:03:e0:44:af:98:
a5:89:d8:a4:34:a6:f8:90:0f:d6:c6:ec:06:35:2a:1c:66:e0:
62:f0:6c:fb:85:54:39:51:42:06:39:07:7d:f5:75:b2:c5:d7:
b6:80:b0:62:22:62:85:fc:fe:88:48:c2:cf:c5:7e:20:89:6f:
f8:b2:ab:3c:c0:11:9e:75:f0:51:3b:df:a2:29:6c:20:25:69:
5c:80:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:21 2026 by rpki-client