Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: Wu1IeHUXaRVF2WXbLRaNv0eFrdCdX8p+8V3Q6kVQ3tk=
Subject key identifier: 61:23:48:D6:B2:6B:18:A8:02:22:F3:59:EA:AF:16:DC:76:FF:E7:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 325486B8878506D16552338D02E3F1FBF29764F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Mon 26 Oct 2026 04:40:56 +0000
ROA not before: Mon 26 Oct 2026 04:40:56 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:54:86:b8:87:85:06:d1:65:52:33:8d:02:e3:f1:fb:f2:97:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:56 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=516533e3677a9c9dc025eb123ca98ae2c7ec76d892a3222353b9572f884afa09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:24:38:b5:68:79:d7:2a:a7:e8:90:94:5a:
b1:cb:d2:2d:48:95:39:e9:ba:2c:41:fc:2a:b2:9c:
ac:9f:b1:b7:cf:75:4d:a7:8d:37:64:cc:c4:bf:9f:
1f:fb:f1:f9:1b:7b:c4:75:29:01:43:a6:db:42:a1:
73:d9:73:65:c4:8e:7f:92:de:0a:bb:0a:c4:47:08:
50:53:46:f4:36:84:86:14:c1:00:4c:ae:09:c1:75:
80:28:9b:90:22:bd:55:ee:0f:14:c8:0e:fc:df:db:
67:2e:8d:ac:41:6d:59:fc:0d:16:53:27:2f:5e:f8:
3c:aa:68:96:16:94:aa:8e:25:db:71:5c:11:42:c8:
d3:14:30:ba:a9:69:fa:5b:81:3d:72:5a:c1:b0:f6:
3e:78:27:42:ab:39:d6:34:c6:9e:95:ad:aa:e7:0b:
de:65:77:64:66:3e:c9:e8:33:40:b6:0d:c1:43:03:
3f:9a:e8:af:a7:fc:5c:a9:87:12:60:ea:7e:03:66:
f1:a9:15:73:a1:88:87:bb:ed:0a:07:be:87:55:5d:
c7:9c:d2:67:7e:b8:3a:df:d7:c9:00:c2:c5:25:b6:
07:ff:d6:7d:e6:ac:87:4e:34:e3:16:4b:1b:f9:25:
01:9e:ec:f5:da:ba:3e:cd:f1:d2:f1:d1:f7:2e:a8:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:23:48:D6:B2:6B:18:A8:02:22:F3:59:EA:AF:16:DC:76:FF:E7:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:7c:b9:a6:58:0b:76:a8:46:62:6d:0e:e7:66:de:06:c7:e8:
a5:79:e2:86:99:40:40:92:af:06:50:de:33:7d:b1:69:47:dd:
2e:e7:bc:4e:1d:37:1e:4c:e3:e0:92:9b:45:e2:09:94:0e:51:
60:7c:b4:96:30:c5:cb:d4:1d:12:52:2e:cd:16:84:94:40:02:
cf:35:c5:6d:a1:28:f0:37:65:89:96:b5:63:5b:de:ad:29:4c:
9d:c6:cc:cf:54:92:68:02:fe:83:86:99:e1:19:bc:d4:a2:4e:
23:45:63:8e:1f:f6:6d:dd:27:c9:c5:ff:5e:0a:f4:47:11:a1:
0c:dd:2a:44:1b:57:e5:95:d3:4c:c1:8d:d9:3d:b2:ca:20:1f:
ed:07:e9:5f:ca:92:7a:2b:99:3a:fe:90:3a:8c:e7:e1:51:dd:
fa:4b:66:76:ab:d6:b4:79:10:5d:ce:b1:82:05:92:f9:0c:47:
f7:b6:d1:96:ab:12:82:3e:93:2d:20:90:a6:02:ac:5f:b5:62:
0d:b7:40:e5:54:50:18:10:fb:ce:2b:a2:f6:d4:e4:ed:6e:22:
9a:da:7b:eb:23:d7:43:b2:39:34:c1:12:18:9a:7b:7c:7a:78:
62:3d:3f:24:77:a9:4a:96:45:5f:ea:cd:1e:80:32:e1:c9:8b:
86:0b:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:47:55 2026 by rpki-client