Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8778ab87-2b27-4bd2-bbca-7793fbfefb19.roa
File: 8778ab87-2b27-4bd2-bbca-7793fbfefb19.roa (raw, json)
Hash identifier: 2nrAqDhcaLJCnrszPWXpTOCAdHB2gKckNtCfQUoOEEc=
Subject key identifier: AE:00:59:CB:DE:F3:A5:E5:41:97:FA:FE:76:8B:E8:3B:A8:E7:9B:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14BAA7AD4577E0CD18CD74DEB18CA7EE4FEFA153
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8778ab87-2b27-4bd2-bbca-7793fbfefb19.roa
Signing time: Thu 29 Oct 2026 01:02:28 +0000
ROA not before: Thu 29 Oct 2026 01:02:28 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ba:a7:ad:45:77:e0:cd:18:cd:74:de:b1:8c:a7:ee:4f:ef:a1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:28 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=dd69f0a67fb9e9fe1315717ca49ddc0d095e0fb80d57d100141c4b1df9d0dce3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:37:c2:8b:a6:3a:f0:67:43:f9:b1:b3:62:
fa:03:6a:95:8d:26:2f:f1:55:09:b6:eb:dc:2d:b6:
29:98:cc:e4:fb:be:e5:a3:94:01:25:ba:73:91:a4:
e1:43:eb:50:3d:8f:dc:af:30:6a:b7:8f:93:be:ca:
85:7c:7c:05:ec:0a:cc:25:5c:5f:50:09:dc:2f:4d:
e2:98:c7:f2:e6:0b:60:47:27:b1:d7:1e:e1:e0:62:
26:3e:48:7a:7f:38:f4:9a:43:84:71:68:0a:b5:1c:
e3:37:5d:16:c7:f7:e2:87:42:b1:50:37:79:7b:bf:
20:48:bf:b5:69:83:f6:22:a8:1c:71:3c:fd:8a:45:
d2:0f:ac:18:f6:f9:4d:7d:4f:70:a3:bb:54:9f:e4:
60:38:c3:45:6b:c0:d9:1e:15:9c:b5:c7:9d:5b:a5:
e9:05:6f:a0:8b:ab:09:20:2c:d9:30:6b:65:6f:b9:
67:af:e0:2e:69:6b:bd:02:b1:ca:5d:2e:f2:26:b6:
89:9a:d6:a3:a6:d5:3e:cb:5b:99:56:99:30:b7:ad:
80:7f:0f:df:de:1a:6d:2d:d6:42:e3:63:ca:04:49:
22:ea:bc:11:11:01:32:51:dc:ed:05:ca:b5:7c:69:
c6:a1:19:fc:e4:6e:3f:9f:8b:23:a2:3f:70:01:29:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:59:CB:DE:F3:A5:E5:41:97:FA:FE:76:8B:E8:3B:A8:E7:9B:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8778ab87-2b27-4bd2-bbca-7793fbfefb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:a1:5f:88:5a:a0:4c:eb:f5:a7:64:b3:21:48:09:bb:21:33:
26:b8:b7:29:7e:eb:82:82:df:b2:5e:5b:08:b7:b0:09:cb:45:
fd:f4:46:61:f2:6b:03:5c:f6:6e:f0:85:2d:81:39:94:c8:4b:
1c:93:79:c0:44:6b:d2:7d:54:e2:95:ca:e0:f4:6c:7a:7f:e6:
e7:7b:2a:c4:bd:ca:2d:22:1c:46:5d:1a:4e:df:5f:e9:48:9a:
4f:70:51:12:f9:b0:7a:ba:15:42:2e:e6:87:91:04:5b:44:ed:
ce:46:dc:65:d4:68:1b:d9:a4:0a:95:c2:3b:0f:03:b4:ff:00:
0b:2a:5e:9e:84:05:1a:52:50:06:b4:a5:77:4d:e1:f4:f6:d1:
6d:bd:ec:7a:fa:66:fa:62:51:68:52:85:2b:a3:d9:82:6a:2c:
71:c3:be:00:ff:26:b7:31:d4:9b:5e:cb:87:74:96:aa:bd:55:
00:e6:1c:b8:3b:3e:ed:4d:54:06:dc:66:48:9f:7e:7a:17:97:
66:6c:71:ff:aa:eb:17:fd:34:9f:44:1c:0c:7a:8a:89:4a:96:
d2:d3:09:0e:4c:2e:20:8a:c4:be:6d:4b:bf:60:c8:22:62:8e:
f8:c2:99:d9:fe:5d:bb:67:ea:e2:57:5e:5b:b7:b9:7a:19:78:
71:3c:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:44:56 2026 by rpki-client