Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
File: 87ec9982-c725-40e5-b829-ff0f06d939c8.roa (raw, json)
Hash identifier: BazKt7S7N+qg3qgWY/VWY8m/31dayvLU0XwxdCbrIG8=
Subject key identifier: 00:B0:40:99:64:4F:E9:8E:2A:F7:55:7E:B9:11:6F:36:01:C5:13:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77A633F84C854E26FC995F649E4E267848C53EB4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
Signing time: Mon 26 Oct 2026 04:30:43 +0000
ROA not before: Mon 26 Oct 2026 04:30:43 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a6:33:f8:4c:85:4e:26:fc:99:5f:64:9e:4e:26:78:48:c5:3e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:43 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=109bb9ccd9a33a7009076736c45b34f6fc95b9ff568005ba5ad90e9fa8e26e16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:85:fe:4a:75:d8:f5:db:92:31:57:29:0a:
42:2e:1c:9b:48:3d:ad:76:b5:74:c8:ef:f3:8e:51:
c5:b6:33:d4:13:22:ef:17:fb:e5:8a:de:da:20:8f:
96:0e:e6:48:26:27:fb:35:a5:3b:fe:2c:4f:36:e1:
9a:d5:72:f5:24:57:73:d0:63:9d:76:a1:4e:7c:a1:
a1:6c:6c:24:ff:9a:ef:26:c7:66:7f:af:fd:b0:f6:
43:73:97:ab:4f:bc:bf:de:d0:a3:e3:9f:4d:cc:c3:
87:4d:06:4c:d1:eb:49:03:ec:69:1a:45:6e:92:96:
5c:4c:1f:08:28:7b:4b:4a:8e:55:1d:05:29:c7:06:
74:c4:a1:d3:50:ca:f8:b9:d6:cc:1b:1c:26:7a:4d:
2a:7e:9d:dc:91:e6:71:6d:09:f0:bc:61:40:d3:16:
cc:a0:48:c3:6d:e2:ec:03:37:3c:59:05:e5:a5:2b:
3b:2c:b9:a0:c6:df:df:4f:35:5d:e8:39:96:6f:ab:
7d:ac:6b:23:31:cc:2f:ae:e2:d3:92:da:f9:ec:11:
2b:83:a9:30:85:7a:7b:70:4a:50:3a:8f:64:30:10:
b8:de:41:0d:82:e3:b1:ce:ae:d0:27:cc:db:23:3d:
e7:c4:3b:ce:88:26:fb:d9:d0:23:f9:f6:3f:9f:20:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:40:99:64:4F:E9:8E:2A:F7:55:7E:B9:11:6F:36:01:C5:13:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:9000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:32:9e:a7:75:cb:6b:92:a9:76:96:a7:64:35:a9:ef:ee:95:
f6:5d:65:f2:6b:79:fc:f8:10:18:ae:ba:1f:99:30:46:a7:79:
6e:98:d9:29:f7:c7:04:a6:0e:67:04:ce:01:2e:f1:fb:da:8e:
c9:f8:48:c0:e4:51:eb:a1:f1:b5:0f:d2:f5:3d:24:ab:31:2f:
51:e8:44:fb:d9:01:5e:78:2f:ff:4f:1a:fb:06:8c:57:5f:7a:
b2:3f:42:8b:ed:e0:2b:22:69:55:f1:61:ed:f4:ba:48:e2:81:
fe:94:bc:1f:1d:d4:4b:a0:64:ff:94:e3:c7:6e:56:a0:60:c3:
02:23:b1:11:6b:43:00:2a:2b:0d:b1:6f:b5:16:38:d3:a8:e2:
6e:f5:4e:10:42:59:cc:a5:76:ff:27:0e:9b:e9:27:64:12:d2:
ac:72:ea:83:55:ac:75:d0:4d:04:f6:25:8b:ae:b5:b1:31:97:
04:66:54:20:42:a0:19:51:26:42:b8:37:a4:72:59:dd:e7:00:
d7:1f:78:16:73:a3:22:f2:08:0f:1d:f5:a8:2e:24:d2:10:d6:
1f:a1:1d:a7:3b:94:c4:99:ea:03:68:f0:9d:7b:ab:d2:fc:84:
f2:8b:79:27:a3:c1:03:e9:16:25:14:f9:df:4b:f1:03:7c:9d:
b8:ff:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:42 2026 by rpki-client