Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
File: 8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa (raw, json)
Hash identifier: wxKLYvrdO8bIk7eYIfie2svTjJua4IGC89DLfWB/OUs=
Subject key identifier: 7F:A4:0B:12:09:9F:70:D5:6B:D8:B3:19:5B:98:3F:AD:14:CE:9A:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 440407504219C401E85A99042699DE13B325A3B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
Signing time: Mon 26 Oct 2026 05:20:21 +0000
ROA not before: Mon 26 Oct 2026 05:20:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:04:07:50:42:19:c4:01:e8:5a:99:04:26:99:de:13:b3:25:a3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=fdec208492eff4612f74dcf1ee68430e89b64ba1c614b1c935ae5e769883355e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:d2:78:b1:0a:4d:d1:9f:3d:8b:db:60:b5:
1b:02:00:db:38:f5:13:ff:01:93:8f:ff:20:50:af:
66:11:80:84:02:b0:ba:ca:b1:63:1a:88:61:dc:08:
3b:73:90:56:51:56:bf:37:dc:a9:df:aa:c0:62:af:
a7:15:ba:64:61:d6:a6:b1:04:dc:70:fb:1e:84:0c:
e5:6b:42:d5:20:05:a9:ab:fa:a6:49:1a:32:7e:a1:
41:84:9e:91:9b:a3:c6:6e:84:cc:a6:98:ea:57:5a:
10:37:84:72:f9:d4:5b:a7:1a:bb:dd:fb:dc:14:a2:
b8:64:07:f4:9d:7d:7e:94:21:b8:f5:54:7e:de:be:
6c:05:7b:b4:70:6c:d9:fb:dc:f5:91:29:03:bc:76:
2c:e1:c8:3b:9c:3a:2b:47:6d:b7:e1:01:0f:5b:98:
a8:1e:86:8c:e0:ec:eb:ba:0e:0b:03:64:d2:91:7f:
13:7d:ce:72:9e:cf:3e:d9:b1:72:a6:c3:b5:98:80:
b9:27:49:de:94:fb:44:44:a8:a6:e8:74:c3:a6:72:
38:e9:a2:e8:4c:6e:83:1b:7e:26:75:eb:5f:ea:22:
b2:49:39:6d:84:51:23:26:d5:0c:59:29:b6:21:07:
76:75:15:fa:07:e1:5b:fd:d4:f5:b9:d2:a8:6e:75:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:0B:12:09:9F:70:D5:6B:D8:B3:19:5B:98:3F:AD:14:CE:9A:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a57e982-c6b8-4aa7-b30a-38bed64dfc31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
24:36:81:bc:35:0d:fe:77:d8:50:2a:87:9d:01:e7:be:70:76:
30:99:dc:46:68:b1:c1:83:14:f4:ab:f6:54:7b:25:9a:1f:a4:
d7:d9:14:33:67:a6:f0:c8:4d:d9:a6:76:cb:63:cc:aa:96:94:
55:7c:d7:2f:15:72:6a:e0:fb:30:f9:30:35:3e:87:22:93:0b:
a9:04:d6:f6:8c:58:4e:e0:22:dd:55:62:ed:52:cb:8b:c9:c8:
6e:0b:30:f2:b8:0d:7c:2a:fb:f9:d2:e6:43:39:24:8b:7f:29:
b6:f2:01:93:cd:d8:e5:c5:fc:f0:00:b2:f7:fd:16:b0:e2:40:
6e:1c:c4:5c:e1:98:03:5d:8e:fb:25:86:d4:8b:37:a1:23:dd:
04:72:43:26:7c:ac:08:e6:d2:7d:d8:67:91:3d:85:eb:b3:06:
7b:ef:cb:d4:57:b6:cb:69:4e:ec:11:a0:c0:d4:8e:0e:f3:ac:
5b:9d:f9:58:28:74:11:25:45:1f:a5:db:87:44:6e:87:16:76:
34:f2:6c:aa:fe:ea:79:8c:f1:5c:43:b3:5d:9c:bf:32:82:61:
ff:25:2a:6e:7b:2f:51:2f:36:98:12:7c:ef:05:4c:24:63:c1:
ec:8f:70:74:58:f3:e3:c7:14:0c:38:71:08:2a:71:c5:a8:8b:
06:b5:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:33:41 2026 by rpki-client