Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84822380-4084-4c46-8745-4e82faaddd84.roa
File: 84822380-4084-4c46-8745-4e82faaddd84.roa (raw, json)
Hash identifier: 4kgQQmoWnd/ttRYylWTLFkInt0XgNsnI2nJxq+/zKDE=
Subject key identifier: 0C:93:9E:9C:40:06:F6:45:C7:07:68:97:DC:2A:85:7F:99:92:63:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 108B4E289DBD553045ACF356D47C40F9F8E62054
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84822380-4084-4c46-8745-4e82faaddd84.roa
Signing time: Mon 26 Oct 2026 04:50:41 +0000
ROA not before: Mon 26 Oct 2026 04:50:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8b:4e:28:9d:bd:55:30:45:ac:f3:56:d4:7c:40:f9:f8:e6:20:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=6e6ae62934d8bba53e5d353bd2bba8822b6186a3f313395890cfcdd76d14b71e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:21:af:97:44:0e:a8:25:22:47:0d:4e:cd:
9b:d9:86:aa:02:0f:f3:8f:28:59:ec:9e:f1:eb:89:
f7:e4:d6:74:42:e9:7a:1b:48:4a:fd:cd:04:1a:7f:
5e:8b:82:e1:02:f8:b5:6a:96:74:a9:42:fc:26:4f:
7b:28:0b:5d:61:45:5b:f7:b0:0f:91:8c:69:40:1b:
1e:39:d3:11:03:9f:88:c0:84:01:d8:78:d9:01:75:
3c:b9:8f:90:ac:51:d8:51:24:8c:82:34:65:e1:bd:
f4:db:6a:05:90:80:4b:d3:ea:47:7a:be:64:0e:03:
b4:59:a7:6b:3c:fe:ec:a4:70:01:5c:84:36:7f:18:
ac:f8:82:05:7d:b4:83:8b:dc:31:0d:08:68:49:76:
fe:fa:ca:64:d7:60:4e:19:a6:c1:51:3c:52:27:78:
77:b6:fc:7c:6a:7b:24:1e:7f:1d:43:a7:c1:90:36:
4d:9a:ad:a9:4f:19:4e:23:3d:d9:76:a3:bd:58:15:
6c:a0:67:ff:5d:b4:37:15:ec:5c:8f:74:f9:23:1b:
73:54:97:cf:bb:0e:80:e3:15:62:59:9c:a6:4d:97:
05:f9:30:6b:4f:29:69:37:70:81:4c:b4:e4:60:2f:
06:02:f0:93:aa:e9:8c:61:f5:2a:3b:a9:73:3e:60:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:93:9E:9C:40:06:F6:45:C7:07:68:97:DC:2A:85:7F:99:92:63:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84822380-4084-4c46-8745-4e82faaddd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:800::/38
Signature Algorithm: sha256WithRSAEncryption
94:c9:0f:81:5c:d4:63:3e:e6:aa:70:15:f1:e8:ef:d5:02:37:
da:87:86:c1:24:8a:81:2e:e8:cd:84:b1:58:18:2a:44:f8:c6:
c4:0d:c0:12:43:de:5d:33:f1:40:0d:4b:91:d7:a9:f0:40:ac:
cb:94:e6:ac:11:9f:0c:11:9d:06:f7:ad:f6:01:86:91:65:19:
06:5d:da:b4:03:bd:d9:26:dd:10:55:63:26:40:f6:5a:07:2d:
ee:99:c7:74:1e:30:9a:e6:b2:fb:88:a1:28:fa:ae:96:70:1e:
ec:d3:af:ca:fb:2a:f8:4e:ff:2d:11:7a:6e:97:3e:f1:3f:5c:
ac:2d:f7:66:73:e9:84:c6:c1:ec:6f:7d:f4:3d:28:e6:57:41:
84:4a:ec:17:3a:e1:5b:6b:24:d4:00:e8:3d:7d:70:b0:c3:58:
28:07:ef:2b:46:4d:13:69:c8:af:4c:df:c4:3b:cc:40:11:e1:
ca:b1:c9:66:2b:32:7f:9e:87:a9:0b:8c:4b:90:79:9f:ce:86:
ee:a4:1a:40:4b:53:f6:1d:f4:f1:20:51:e7:15:ff:fd:6b:e0:
01:78:e1:bc:f2:bd:54:c5:df:4c:b0:d3:8b:8c:54:69:aa:54:
cc:c5:19:f2:0d:b8:0c:36:36:62:fa:f8:72:2a:d8:f9:82:0b:
bd:93:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:46 2026 by rpki-client