Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d5bbe6e-da67-4af0-af12-c86f93a16721.roa
File: 7d5bbe6e-da67-4af0-af12-c86f93a16721.roa (raw, json)
Hash identifier: AxSeljkO40NRKewh+uzcCdeMNTKkdHcZU+t8KSaj0FU=
Subject key identifier: 8A:F9:60:27:9E:3F:4D:D8:F7:FD:D4:DC:EB:D8:F2:4C:AA:A0:46:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C6F4E9EF44F9EF8F7C9125463FF9E87189FA731
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d5bbe6e-da67-4af0-af12-c86f93a16721.roa
Signing time: Mon 26 Oct 2026 04:30:28 +0000
ROA not before: Mon 26 Oct 2026 04:30:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:4e:9e:f4:4f:9e:f8:f7:c9:12:54:63:ff:9e:87:18:9f:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=3d96534da1e2876b0f8c23d5931c393a9b0d254afd4219bad28ebfd3b36197a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:32:93:02:a0:6a:23:02:7b:7f:e4:4e:9a:
99:e6:0a:9c:ea:4c:49:b8:47:b4:73:66:59:f1:cc:
f8:41:5c:7e:91:ff:97:c7:38:cf:c4:45:d7:f1:d9:
d8:35:cf:f3:a4:f1:df:e5:a1:a3:34:8f:69:73:0b:
85:4e:71:76:cc:49:c0:6e:e7:8f:77:34:9c:ad:ff:
48:ed:43:fd:a5:76:f6:dc:57:5f:ea:51:30:52:8e:
29:22:58:2b:cc:6e:38:92:ef:e7:4f:8d:ae:84:ba:
d3:4f:e4:27:80:44:bd:bb:37:8e:2e:2d:59:91:c5:
bd:86:f1:d9:a7:2a:84:cb:0d:09:fd:a3:e8:32:a4:
0f:8b:eb:f2:f9:01:b9:b7:ff:d1:6f:c7:cb:1a:12:
ec:88:ef:56:41:14:51:20:6f:48:bb:db:b6:80:64:
1d:47:25:a5:b6:b4:d9:f5:f0:c7:28:5e:7a:19:f7:
3a:64:58:14:5a:7d:d0:45:bc:05:2e:a8:2a:9b:b6:
d9:93:01:fb:9a:b1:97:b6:4f:9a:93:cc:17:93:39:
78:35:7d:17:a6:d2:af:5b:a5:46:fe:51:1f:27:d2:
df:01:f5:cc:ff:80:55:75:d6:40:48:0f:50:50:d1:
42:0d:f5:64:f2:de:1d:2a:ff:28:a8:d4:29:20:94:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:60:27:9E:3F:4D:D8:F7:FD:D4:DC:EB:D8:F2:4C:AA:A0:46:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d5bbe6e-da67-4af0-af12-c86f93a16721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
13:f6:cb:74:97:0b:7b:d5:04:fc:1d:a3:91:42:73:cf:04:56:
32:21:f5:c5:1b:df:8c:eb:2a:0d:bd:ae:4d:64:d1:e2:95:22:
c7:1f:b1:cb:3d:e5:0e:5c:63:79:0a:45:18:9a:b4:0e:28:5c:
a8:12:f5:1b:c5:53:b7:d4:92:0b:62:6f:9d:57:ae:06:be:d8:
0c:bf:87:c2:f1:48:61:c3:c9:51:88:6a:f7:6d:ea:f7:96:58:
7e:8d:33:16:4b:74:da:64:5b:67:25:9e:de:2a:87:5c:ea:6a:
65:69:ba:2c:66:8f:cd:ea:07:24:10:b5:06:69:6b:76:7c:6b:
45:9e:ab:d3:24:af:3f:c4:72:16:a2:eb:d8:5b:38:d8:f4:73:
6f:b5:6d:1d:dc:d3:37:b8:b6:2e:fb:49:08:d2:7c:90:41:a1:
1c:79:77:97:f5:d7:35:f5:ad:c0:3c:e4:7d:6e:b5:03:95:c8:
ec:6c:3f:56:73:a9:f3:38:ee:2b:85:42:ca:4e:ba:06:99:22:
79:de:77:7b:93:db:ac:62:87:c2:b8:4e:ac:d4:6e:82:99:15:
3d:19:75:02:48:bd:f9:51:b0:23:2e:a6:62:40:bd:c6:18:31:
50:57:b2:f9:6e:65:84:00:07:46:8e:b4:f9:ad:4a:87:ea:2f:
be:59:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:53 2026 by rpki-client