Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
File: 7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa (raw, json)
Hash identifier: akWSuGO7b7Jxt9RLb1MsApW1Vd/eiFiSi5br/0RnxW0=
Subject key identifier: AC:5C:09:A6:BF:8B:0D:71:3D:95:A6:8F:AA:70:D2:20:B9:FB:2E:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2FD510D0B477A77864AE76342715243B850643F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
Signing time: Fri 23 Oct 2026 01:50:09 +0000
ROA not before: Fri 23 Oct 2026 01:50:09 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d5:10:d0:b4:77:a7:78:64:ae:76:34:27:15:24:3b:85:06:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:09 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=5e737022a5df9132b6dec8484c93444842bad6e7d42ef08d6defe540b6bce3de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:95:23:0c:db:16:94:75:81:1c:80:6e:0a:
37:28:4d:5b:c8:03:46:e3:34:21:16:93:04:5c:a8:
9f:f8:23:66:de:5f:ab:5b:bb:fe:9e:ff:2f:2d:e4:
0b:30:2a:6d:74:e5:5b:8f:06:68:e2:55:24:ab:08:
08:76:cc:86:bc:6f:ce:0e:d9:69:e6:9a:28:cd:09:
e4:9b:dd:a5:88:11:a7:5a:87:73:c6:28:8f:4d:38:
ca:9f:f7:fe:aa:27:6b:ca:84:bf:d0:ee:77:1b:09:
c3:88:20:d1:6a:4e:f3:d9:9b:39:0a:e4:69:a3:04:
11:f2:0b:d8:67:a9:ff:c6:4e:fb:b1:5f:da:c0:bb:
1f:a4:1a:cc:1e:cf:32:22:5a:78:b5:e4:7e:46:42:
8e:58:5e:29:67:8f:57:44:4a:1f:2d:0e:a3:5f:aa:
1a:a3:f1:4a:7c:f7:50:46:0f:bd:d2:00:a3:1b:b4:
2e:f7:9d:b9:44:0d:99:4b:a5:f4:26:ae:87:3c:69:
72:09:6f:ee:a7:d2:75:86:83:52:b9:08:e5:e5:ad:
89:67:92:51:ae:49:c2:1f:2b:90:2d:24:ac:f8:a6:
63:8f:02:81:cc:1b:5b:02:75:20:18:28:63:9c:2d:
53:f4:7d:23:f5:3f:c9:1a:c1:9a:dc:0e:90:c6:c0:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5C:09:A6:BF:8B:0D:71:3D:95:A6:8F:AA:70:D2:20:B9:FB:2E:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:6000::/48
Signature Algorithm: sha256WithRSAEncryption
50:e0:c2:88:4b:fa:9a:45:ef:6a:9e:af:fb:09:4e:c5:e9:de:
0e:a9:38:9e:b4:39:4d:d7:2c:a0:77:6e:ca:21:1b:6d:a1:93:
e1:a7:90:c2:55:a1:bf:84:a2:90:4a:5a:5d:88:8b:84:23:4d:
0a:d3:de:fb:26:0f:a2:60:8f:74:1f:c2:4b:4c:bb:72:94:a5:
57:3e:67:83:39:97:a2:d0:0f:7e:73:62:ae:1e:9f:32:20:a3:
a1:fa:41:e6:56:06:e0:6c:b5:84:bc:3e:8c:b7:b9:fc:b2:25:
17:1d:52:23:49:2e:59:ce:da:91:8c:9b:d4:fd:39:2f:c9:f1:
dc:d7:c6:14:de:19:e5:73:ac:af:f1:9b:11:32:87:10:43:d2:
85:e0:77:c6:f5:57:b6:94:2e:d0:b6:27:2e:a1:06:c5:a7:a8:
33:68:ee:4b:8f:57:0b:8f:be:1d:2e:4e:21:19:2b:af:e4:aa:
f1:81:6a:4f:d1:13:6a:38:05:b8:23:aa:ba:47:ce:35:a0:80:
36:39:2a:c3:de:ec:34:32:96:d8:b7:b3:eb:72:27:ab:b4:ed:
66:94:74:13:71:4a:3c:c6:5e:5c:41:e0:3f:a7:26:df:fa:d1:
c0:73:68:de:f6:36:4c:3a:ba:7b:dd:00:5b:bc:7a:cd:bc:ae:
75:50:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:57 2026 by rpki-client