Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
File: 88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa (raw, json)
Hash identifier: riFOWwNREur0v/2Ik61vfXQEuKL3FvjUR677L5I/dkI=
Subject key identifier: 2D:48:DA:0D:AC:5A:8E:85:AB:50:41:F6:0A:73:CC:D8:0F:41:94:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DBB57BDBF3CC61124B9AA063EF042C8A5CD6310
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
Signing time: Mon 26 Oct 2026 04:50:38 +0000
ROA not before: Mon 26 Oct 2026 04:50:38 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bb:57:bd:bf:3c:c6:11:24:b9:aa:06:3e:f0:42:c8:a5:cd:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:38 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f5fb5cae1126547aa4046ff4f3baccaaa5f5e8842d5302322d0cb0ed669d550c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:2b:01:f1:5e:d8:0f:68:76:f6:8c:75:29:
3f:c3:53:27:e3:38:9f:50:3f:4b:a1:93:85:06:10:
be:54:93:11:7a:21:9e:3a:f3:26:7d:48:77:a3:40:
c7:02:02:47:08:50:84:54:62:4d:54:ad:7d:c4:ea:
94:58:5c:19:2f:f7:d9:77:7d:09:56:5d:5e:08:4d:
ac:72:cc:04:89:3a:93:bc:e3:6e:c2:6c:d8:27:28:
d1:15:e3:5e:05:e5:d1:a3:a5:ab:4c:86:ec:cd:e8:
51:56:7f:e9:06:59:8a:6a:44:52:6c:16:6b:08:16:
55:c1:8c:20:9a:cf:a6:51:72:be:cd:df:4d:42:83:
85:38:b6:32:88:61:ea:e2:b7:ed:f4:5b:50:98:b6:
f9:21:95:4a:64:29:43:3e:32:ed:12:20:d8:c4:4d:
3e:f2:d8:6f:58:3c:f2:97:93:4e:15:b3:e0:4b:d5:
1a:0d:ef:73:41:6f:ae:88:a3:9f:bd:f5:a2:ce:35:
8a:4d:47:1b:e9:a7:18:d5:d9:91:b8:40:0f:68:e4:
d5:ed:f1:69:20:39:60:e7:65:fc:b4:4b:78:77:9b:
fe:36:e8:b1:b2:53:f4:44:0d:8a:b5:09:7e:38:6a:
07:7a:22:e4:74:58:3d:69:f5:c9:4c:07:b4:1a:62:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:DA:0D:AC:5A:8E:85:AB:50:41:F6:0A:73:CC:D8:0F:41:94:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:c00::/38
Signature Algorithm: sha256WithRSAEncryption
68:b9:cc:f2:3f:cf:4c:14:6a:38:14:a7:ee:aa:a4:4b:42:a3:
ca:c5:6e:fb:24:7b:ba:4b:82:5b:26:05:d8:1a:4e:7e:fc:ed:
43:b8:21:58:78:d3:01:db:a4:45:a9:a7:71:cb:ea:7a:8c:92:
05:a3:71:1a:97:a2:f9:42:62:b9:f0:90:3c:d4:ed:55:2e:8d:
e1:8b:26:cf:de:45:aa:2e:cd:77:15:a4:4b:70:4d:7d:8e:a1:
70:ec:d7:97:b7:41:1c:67:a8:67:2a:bf:25:1a:74:b7:bc:cf:
e6:c1:66:41:4c:a7:6d:a4:f7:5a:db:09:5d:da:13:e5:12:18:
79:8b:e1:2f:98:74:71:19:59:cd:9c:13:e1:eb:51:cb:82:77:
eb:78:84:85:36:63:4f:ce:29:68:30:bb:a0:3c:40:b3:af:ae:
6c:45:00:ff:fd:1f:94:35:bd:db:fd:0e:a3:c1:9a:01:77:26:
74:9d:dc:44:2d:1b:fb:25:5d:5b:3f:a8:e5:7f:86:70:84:7a:
41:5e:d8:41:b5:58:ef:b0:ae:17:45:98:65:0a:f5:0d:9d:6c:
44:0c:63:2a:ba:78:85:db:4d:61:1e:ce:6d:d8:06:3e:30:f0:
1a:63:84:e2:15:dd:50:34:24:05:93:c4:a9:7c:d8:8e:a3:0a:
58:15:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:09 2026 by rpki-client