Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
File: 8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa (raw, json)
Hash identifier: PZfcKgqJCaYM1sOe9RTSrwyCvtbDEF5XTKC3gXAFnFI=
Subject key identifier: 80:95:39:00:F1:C1:A9:63:2B:3B:C9:5E:E5:8B:AB:14:0A:7D:5B:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47925B6B44B39134453649C1F0807120E1737260
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
Signing time: Thu 29 Oct 2026 01:02:27 +0000
ROA not before: Thu 29 Oct 2026 01:02:27 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:92:5b:6b:44:b3:91:34:45:36:49:c1:f0:80:71:20:e1:73:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:27 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=f644d2d8c14485845601cb87c051c501f5dd436a1eb9e124dff49581f5017e7a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:d6:b9:99:de:d9:24:a8:88:af:45:76:8f:
aa:a3:3e:85:50:8a:0e:ff:11:eb:bd:c5:ba:03:72:
0a:0b:8a:42:8e:fe:42:04:3b:bf:26:91:d5:94:b2:
4f:31:58:84:21:81:b3:a3:5b:bb:6d:33:2c:a5:2d:
24:e6:bf:a1:63:19:55:0d:78:83:f4:6c:e6:cc:2e:
85:34:e4:94:be:96:b9:3a:2c:ba:c0:c8:6f:fc:7c:
9e:67:78:2a:b4:ae:5a:09:2e:25:64:5d:37:a9:c0:
4c:15:2e:7b:46:1f:7e:02:99:c2:13:63:80:08:cb:
34:5d:79:be:5a:3b:f7:0d:f0:36:da:34:8d:c8:b6:
27:25:61:f7:7c:c7:67:39:86:16:46:d8:27:6b:07:
b1:e1:72:1b:43:35:a8:3c:b9:98:4e:93:7a:3b:66:
f9:1d:b3:e8:d6:62:24:58:6e:ab:07:66:95:f7:16:
0e:91:17:b9:03:bb:e2:7a:a1:ff:20:6c:1e:50:f8:
4d:b7:79:6b:7f:a1:6a:4e:23:26:3d:53:22:43:ea:
2e:1f:ba:15:c2:cd:01:0b:31:71:f5:19:11:09:1e:
fb:ad:6b:c9:ff:63:49:c6:0c:b6:95:5d:f8:ea:dc:
33:e0:0d:53:6d:b2:77:86:49:ca:c7:cc:65:67:02:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:39:00:F1:C1:A9:63:2B:3B:C9:5E:E5:8B:AB:14:0A:7D:5B:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8496d29d-c40f-4ea2-b2cd-efc62d1d9296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:c080::/48
Signature Algorithm: sha256WithRSAEncryption
68:54:1a:5f:71:92:2e:7e:f4:0c:1a:aa:32:a6:50:8d:53:50:
40:2e:f0:68:db:0f:64:94:2e:64:fc:6b:b1:f7:69:52:f6:69:
ea:90:41:52:86:a1:08:35:b5:92:f9:ec:da:a3:33:30:d0:fe:
ac:80:49:3a:fb:8b:a2:4c:92:b3:74:90:48:6c:9d:5e:0e:54:
64:b7:92:0a:d9:4e:3c:04:c2:83:56:2e:78:6c:7a:33:b5:54:
f0:ad:52:dc:ed:94:1d:5d:88:0c:43:dc:83:ad:c6:c7:b8:26:
d7:b9:35:ee:e7:50:2e:63:d6:e1:d3:f3:24:64:56:18:9b:63:
1a:f4:8a:8b:9f:1e:89:f5:5f:69:bd:16:0c:29:93:79:e2:13:
23:20:f7:3f:4e:11:e6:61:71:31:97:2a:67:1a:1a:29:35:4b:
89:b0:0d:1c:57:47:8b:dc:8b:d6:7c:87:d9:39:66:4b:ff:74:
5e:35:33:be:fe:a2:a1:6a:b5:48:dd:19:88:27:9f:b8:83:cb:
d6:4a:25:75:58:19:7a:e1:40:27:d1:0b:92:3d:e7:9a:9d:99:
54:cd:e3:fb:97:a5:0c:89:70:f3:92:01:99:9f:aa:11:e1:27:
36:82:8a:8f:5f:fc:62:21:22:39:c1:73:30:10:f3:a6:77:94:
1e:a3:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:16 2026 by rpki-client