Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
File: 7dbe70b9-8807-4382-b0db-753dfbe69012.roa (raw, json)
Hash identifier: BggEdTbneMxB66g/A1rbeTZOWD6J6KKAvAlDU+Mbj7I=
Subject key identifier: 3D:8F:29:5D:07:55:C3:E7:37:4E:05:8B:16:FE:F9:06:1F:93:5E:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 397BECFCC96B45B81BCF6EA2947740A1633EF1B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
Signing time: Mon 26 Oct 2026 05:31:05 +0000
ROA not before: Mon 26 Oct 2026 05:31:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7b:ec:fc:c9:6b:45:b8:1b:cf:6e:a2:94:77:40:a1:63:3e:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=53c94fe3d0a04ab1af7aee6a84a63deff908aa4d5702bc1664055a7be208c2e4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:cf:32:f1:ac:7d:42:b9:b4:13:49:f5:cb:
91:a2:a2:ff:b9:cf:a0:11:11:32:2f:44:54:c1:ea:
d4:da:3f:38:5c:7f:13:bc:c2:e7:66:fb:f6:0b:2e:
f4:7c:c9:eb:6e:27:f0:f8:bf:80:b4:35:89:9c:52:
79:5e:67:60:04:69:da:b2:37:45:47:71:f8:ed:57:
c8:30:e5:21:80:d3:84:6a:eb:43:30:d3:77:ee:ea:
b6:bd:0f:74:e5:d8:da:4b:98:20:a0:74:b9:79:15:
6f:37:8d:b2:0d:62:f7:08:84:f9:1e:c4:93:58:b6:
1a:4f:78:bd:2e:79:59:f4:1d:e7:3f:fc:61:71:e8:
a6:fd:c4:a0:98:2b:87:9e:15:3c:80:0f:51:08:90:
99:59:10:4b:f9:93:52:82:45:94:72:24:41:e9:1a:
69:6f:51:0b:c0:81:b0:5e:30:47:47:8f:37:cc:8f:
bb:72:a8:fe:39:40:14:b4:e1:90:ae:a6:9c:60:54:
8d:eb:1d:95:85:d5:18:31:0e:10:c5:c6:0f:49:c8:
be:b7:b6:6d:aa:f0:80:ba:01:f4:f3:87:82:56:75:
fe:db:04:32:c0:0c:19:9c:1d:de:d4:fa:02:95:ea:
f1:cf:b0:2a:ae:07:ec:41:4b:74:41:28:57:be:2b:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:29:5D:07:55:C3:E7:37:4E:05:8B:16:FE:F9:06:1F:93:5E:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dbe70b9-8807-4382-b0db-753dfbe69012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/37
Signature Algorithm: sha256WithRSAEncryption
4b:f8:a4:2c:6d:dd:81:37:27:6b:85:cf:2c:45:0a:4b:be:c2:
e6:4a:d8:4f:3c:59:25:47:41:04:56:a8:2f:03:f3:3c:ba:f3:
de:b3:15:3e:04:cd:b8:ae:f0:7c:7f:96:72:a4:a3:71:58:36:
43:a8:9c:c6:1f:57:8d:78:13:66:68:0b:74:7b:e1:5b:72:00:
50:d9:f0:6e:bc:64:5c:7a:38:80:20:b9:0a:83:a0:60:0a:d8:
37:ad:e1:6e:62:f1:61:d7:14:52:e4:e9:8b:2b:47:b0:29:10:
99:b5:e3:91:13:13:59:1e:91:65:99:c0:aa:65:b8:b9:01:49:
22:81:1a:e7:c0:28:20:5d:ca:5b:c0:0a:a6:dd:be:65:99:bf:
60:e5:15:c8:9a:c7:d3:1f:e6:c4:d4:93:23:9a:93:b3:e3:26:
40:79:bc:02:ad:c8:eb:99:37:66:65:55:ca:4c:8e:de:fa:af:
80:1a:fe:3c:9a:88:19:d3:b8:23:94:a7:02:f2:60:16:0c:c1:
c2:42:5d:fb:2c:08:de:40:48:c9:b5:e8:74:a7:a6:65:b9:29:
67:a2:92:6b:9a:2b:c0:97:2b:56:97:9c:a8:ee:0d:cc:db:bb:
a1:2f:f0:d1:3d:97:83:e8:93:e9:20:87:b8:63:0e:31:e2:d1:
34:77:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:58 2026 by rpki-client