Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa
File: 8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa (raw, json)
Hash identifier: nD5Ofgy3UTO5MSLYTK5KI/usw3PonHTCX8VCD4Ft7Wg=
Subject key identifier: 89:CC:9B:03:EF:4B:BE:76:CF:18:84:52:B2:15:7A:74:2B:E7:64:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C63D22144AA1BE29ECF30FE8B9713F8FE887DF1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa
Signing time: Sun 11 Oct 2026 15:10:12 +0000
ROA not before: Sun 11 Oct 2026 15:10:12 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:9040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:63:d2:21:44:aa:1b:e2:9e:cf:30:fe:8b:97:13:f8:fe:88:7d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:12 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=8fe82767dfdf5f8743494c224220987ff2074e1ba9cad443a1a6fe9070afc011, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:e1:6b:12:a6:73:db:14:3c:8c:59:ff:1b:
be:49:76:f3:19:95:a4:30:9b:a8:cb:cd:5b:c2:a2:
71:5c:ba:7e:19:e7:97:cd:68:63:e9:ed:e7:6e:5f:
07:22:81:a8:d3:3c:be:96:b1:c2:e0:cd:d0:62:cc:
e7:32:f2:51:7c:db:77:33:69:52:99:1e:c1:9a:1a:
0e:86:45:c9:5e:9a:29:f2:81:ac:27:0c:80:7b:37:
88:8f:c4:06:cb:5c:40:72:2b:ea:2b:1b:53:1d:23:
63:fb:c4:3d:55:45:79:cb:18:a2:f7:cf:a0:7b:ec:
24:37:76:98:c8:fc:ce:be:13:aa:1c:d2:1b:f2:d1:
da:6b:fb:3a:d6:09:65:7d:5e:7a:31:19:0d:ca:e5:
bb:3c:98:11:58:e5:2f:16:1f:2a:04:71:d3:c6:e2:
b4:07:e9:4a:d8:b7:e9:a6:cf:a8:dd:e1:d6:af:1c:
da:37:65:f7:2f:70:0f:76:02:a4:2c:c7:aa:2c:30:
8b:54:76:bf:e7:ee:63:ce:20:9f:31:63:55:3b:93:
14:4d:06:2a:03:d2:7e:cc:e1:0e:fd:5d:d2:d2:e7:
20:5d:a5:b2:29:f2:6b:de:f4:ca:d6:d8:fc:3f:21:
03:b3:d5:ba:e0:c1:6c:ea:d8:e3:01:99:1f:35:85:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CC:9B:03:EF:4B:BE:76:CF:18:84:52:B2:15:7A:74:2B:E7:64:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8518b81d-c700-4d3f-8ef4-5abe8d348d3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:9040::/46
Signature Algorithm: sha256WithRSAEncryption
04:0f:a3:9a:34:32:11:8f:5a:e3:d2:7d:e7:ca:8e:11:21:da:
f2:5e:47:cc:0c:5f:5b:c3:aa:dc:48:74:1a:0d:27:c2:62:33:
d2:0f:82:32:ca:d8:01:31:cc:bc:ef:14:91:98:92:c0:e5:f0:
3b:74:d7:1c:55:98:79:36:c7:42:ce:ab:53:fb:bc:63:f5:0c:
bb:39:c4:f0:e2:50:83:05:ce:ff:72:2d:30:d7:a0:0f:a5:56:
db:c5:43:ae:13:c4:cc:f4:96:d9:3f:7f:11:5e:da:1f:63:bd:
46:0e:26:6c:9d:5b:8a:ef:74:8d:98:e1:53:c6:9a:6a:34:47:
74:a6:6c:80:5e:7d:db:9f:cb:27:4f:e7:f9:38:38:84:c9:1a:
0d:02:c0:a0:5b:03:55:23:09:30:51:b9:48:54:0b:0b:5b:5f:
d0:60:77:a5:c2:31:18:0b:44:c4:f3:fa:82:31:16:d9:88:2a:
09:83:41:21:38:13:23:98:32:ed:e1:9c:b6:8a:46:51:09:0d:
7c:a3:f1:38:b1:fb:74:d4:28:8b:c8:56:3f:41:d3:a4:2a:17:
38:52:4c:56:5a:4b:ae:b1:08:cb:46:aa:36:e1:17:90:1b:ba:
27:a5:ac:b8:0a:5d:fa:ab:d9:c0:ee:bb:44:81:f0:32:04:76:
8b:91:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:31 2026 by rpki-client