Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8aeef071-ad76-436d-a059-ad727b09eb3b.roa
File: 8aeef071-ad76-436d-a059-ad727b09eb3b.roa (raw, json)
Hash identifier: q64idAmfE9B2kbdmkkTufCOysEp5rayi8c6CgS6pLGM=
Subject key identifier: 12:C7:1A:D4:4F:8C:23:7E:3F:63:C3:DA:49:54:4B:05:56:F9:6F:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AA3F40F293640234CDD4092C13B70B168746C53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8aeef071-ad76-436d-a059-ad727b09eb3b.roa
Signing time: Mon 26 Oct 2026 05:20:06 +0000
ROA not before: Mon 26 Oct 2026 05:20:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a3:f4:0f:29:36:40:23:4c:dd:40:92:c1:3b:70:b1:68:74:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f8960860dad2ad6f034b4a8f1967c53ce6b73fb19885fb825ea646e3dc020975, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:fc:e2:fa:59:9b:59:05:a3:fc:6b:61:fc:
c9:d2:e4:db:51:19:d4:da:5c:27:2f:ce:fd:2f:8e:
5a:f7:9a:cb:21:d0:ec:03:54:8c:9a:14:27:d3:52:
83:97:53:3e:49:75:c9:d1:d3:4b:9b:27:18:e5:f3:
2c:68:c3:8a:a8:4d:70:ad:d0:f5:da:b6:ba:e0:f3:
ac:b0:46:9a:3e:5a:73:4c:df:57:e1:7d:5b:e8:60:
dd:40:56:ed:86:bd:20:89:99:f4:ee:04:1f:71:8a:
79:c2:d9:59:94:5a:30:bd:a9:b2:cc:e4:6e:6f:47:
7e:72:7c:27:63:59:34:f3:18:9e:5b:15:f0:98:1d:
92:e3:a3:48:3d:31:59:e1:d8:87:27:df:55:e5:ef:
bf:44:77:79:68:97:5a:f1:3c:1f:b3:87:cf:8f:f0:
d4:47:ba:9b:2e:a5:50:8d:15:cd:49:13:d1:38:56:
1e:db:e7:55:7b:e6:f4:9d:99:05:9d:6c:52:f6:f6:
ff:12:a9:ea:5b:bf:56:8f:bc:24:cf:c9:4e:17:ca:
92:62:df:92:d7:d8:1c:bf:f8:b4:fd:23:14:e8:98:
cf:ee:ac:e7:83:9c:36:15:d1:f5:12:ca:07:3f:4c:
e5:cc:54:71:95:fd:69:49:ea:89:e8:e9:77:c3:4e:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:1A:D4:4F:8C:23:7E:3F:63:C3:DA:49:54:4B:05:56:F9:6F:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8aeef071-ad76-436d-a059-ad727b09eb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:7c:db:dc:52:b2:06:94:5e:30:3e:ba:5f:7d:b3:e6:6b:16:
96:8f:57:2c:fe:fe:60:5d:63:26:de:0a:5f:81:ea:7d:dd:b6:
6c:fe:c4:a7:7c:2b:f1:fd:5a:d4:85:cd:64:bd:ff:f2:e9:17:
5d:af:ee:85:e1:12:fe:d8:da:f2:d5:2f:ba:74:7e:e1:bb:8e:
57:0a:cd:0b:b4:29:c9:c2:a5:83:5c:38:77:6e:94:81:ed:ce:
40:94:7b:82:8d:a2:0f:d1:4e:ec:c4:64:92:1c:31:be:2f:d6:
a4:56:72:79:b2:92:1b:88:c2:ee:c4:54:62:70:fd:e9:fd:bf:
a9:bd:b7:b8:64:32:cd:be:3f:2f:f1:fc:bc:a9:86:a6:c7:7c:
66:09:00:01:a6:bf:8e:80:0d:97:0e:12:7a:62:02:bf:b5:8e:
17:90:89:25:46:3d:1a:e7:52:7a:48:a9:e0:85:a3:f6:c0:95:
8d:54:17:89:72:85:9e:d8:96:8c:48:65:7b:a0:75:f6:47:10:
21:2d:62:ea:f7:53:a3:30:15:2e:a3:0b:08:b1:3f:c8:0a:14:
a8:76:fe:67:e8:9f:22:61:48:0c:6f:92:54:8d:65:58:68:34:
54:2b:f2:8d:8f:cf:63:7c:97:13:9d:b8:10:fa:b0:06:a2:9d:
46:15:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:28 2026 by rpki-client