Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e690adc-099c-4d58-ad1b-856f693d90b3.roa
File: 7e690adc-099c-4d58-ad1b-856f693d90b3.roa (raw, json)
Hash identifier: p82TwyG6Me5g0ojhPb8a9r5TEnAuYpD5fG6Ptg83eVY=
Subject key identifier: 62:9D:DF:23:30:26:22:D4:57:D8:B3:12:34:B4:A6:8C:9E:06:1C:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17FDC43F751C225082B3F2B791A9323EC513F17B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e690adc-099c-4d58-ad1b-856f693d90b3.roa
Signing time: Sun 18 Oct 2026 01:30:32 +0000
ROA not before: Sun 18 Oct 2026 01:30:32 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fd:c4:3f:75:1c:22:50:82:b3:f2:b7:91:a9:32:3e:c5:13:f1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:32 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=29dcfaa3ff00f385b51b070b9bb530f8ebb8a9f1292d171efab13ccb7b3cd30b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:b8:e3:8f:fb:59:ff:3c:3d:62:ba:84:24:
a3:be:26:ce:b4:b3:16:53:1c:a1:af:bb:01:8d:0f:
25:4f:43:fb:ce:83:65:1f:14:f3:d7:71:6a:3c:c6:
ab:95:dd:89:e8:4d:20:c9:50:b1:d7:6a:06:a2:2b:
94:71:5a:69:00:24:b5:27:04:ab:1e:18:00:d9:fd:
f1:0b:51:a9:0b:b5:1a:8d:a5:2d:b6:fa:20:4c:f0:
ee:b5:73:7f:2c:bd:03:4e:25:53:04:17:3b:f8:96:
77:91:1e:00:73:50:b8:8e:63:6d:a6:20:a6:fe:8c:
61:b5:9f:16:0f:94:60:31:3a:84:f9:98:5b:a4:57:
c4:b5:94:c9:51:27:6a:56:83:9e:d6:73:df:58:5c:
c5:87:e8:b5:54:da:6a:44:b0:2b:93:23:e9:22:fe:
50:3a:0b:67:30:ca:f0:7e:5a:34:bd:0b:5c:b8:2f:
d4:08:f1:9c:a2:49:99:57:0c:29:61:11:c5:c2:fe:
fb:80:ce:a1:a7:ef:5e:d6:97:80:51:94:57:bb:66:
40:77:78:e9:bc:d5:3b:3b:9b:57:f3:1b:6e:62:dc:
a5:e8:06:e1:19:aa:8e:e2:63:cd:08:3d:64:d8:a0:
5e:75:53:a1:61:d5:3b:b4:d1:52:60:d1:02:ec:fd:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:DF:23:30:26:22:D4:57:D8:B3:12:34:B4:A6:8C:9E:06:1C:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e690adc-099c-4d58-ad1b-856f693d90b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:c000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:99:0e:b8:b0:c8:01:6d:e0:46:a5:dc:c4:b8:5d:2d:0c:1e:
7b:ff:32:a1:72:74:2e:7f:af:f1:31:fa:56:14:c7:a0:90:a1:
00:fa:a5:a5:92:1a:03:72:46:29:7b:8e:f7:61:5d:f2:e5:44:
dd:cc:12:5e:f1:2c:bc:9e:e5:ac:2d:cd:1d:de:b6:2a:40:38:
5b:59:99:c1:bf:39:0c:90:30:db:68:fd:d5:dc:4c:71:64:e7:
19:85:df:9e:ca:3e:c1:bc:71:4a:b6:4d:10:16:64:bc:c2:f9:
d9:40:65:8b:c6:c6:56:99:7c:6e:87:4c:a7:d5:33:14:90:d8:
31:d6:76:62:2c:e6:4e:2a:64:25:fd:a6:65:60:8a:7d:7c:f9:
ae:3b:b6:57:3c:dd:49:c5:73:78:0d:fb:88:86:a4:b2:23:0a:
b1:bd:60:c4:87:75:6d:73:d6:bf:f7:49:9a:ca:04:f3:cc:5d:
56:ed:cd:75:b4:e7:3e:23:a1:bf:5f:a7:37:e7:f0:43:b3:33:
78:13:ac:f8:91:07:20:eb:d7:27:01:57:81:cc:88:64:58:34:
cc:03:cc:28:dd:9d:e0:0a:ff:f5:2c:3a:cc:8b:6c:f4:51:30:
4c:a1:86:4b:9f:eb:df:41:d2:51:67:f6:86:bb:14:21:d9:b8:
e5:2e:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:01 2026 by rpki-client