Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b37c46d-5f10-445b-9772-1120143beab3.roa
File: 8b37c46d-5f10-445b-9772-1120143beab3.roa (raw, json)
Hash identifier: HU6XlBTOJMNBWSLtJwhobAedY4MydmYngY1ZoBm/DkU=
Subject key identifier: 19:84:62:2D:C4:E8:71:57:08:5B:28:DF:B6:33:74:C8:0E:EE:B9:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A03B970BEE6D0B385B5A57C4CE5A7812AA5DCDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b37c46d-5f10-445b-9772-1120143beab3.roa
Signing time: Fri 09 Oct 2026 01:30:35 +0000
ROA not before: Fri 09 Oct 2026 01:30:35 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:03:b9:70:be:e6:d0:b3:85:b5:a5:7c:4c:e5:a7:81:2a:a5:dc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:35 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=9cecb5fb6c346c6c4b3c5f796092aa2e0b77e0d7a9e54d86374a9188379e1a2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:9e:f6:5f:54:4b:db:75:9e:59:f7:19:ec:
05:26:f8:e2:92:02:54:cb:1f:35:ac:55:94:7d:4a:
82:99:6b:f3:df:42:64:d3:4d:0d:a2:e4:bb:55:cc:
0f:56:e3:7a:1c:5f:d4:1b:82:50:11:d5:5e:2f:43:
37:00:43:51:dd:39:b5:17:f8:b6:4d:3f:46:0f:1b:
d8:ce:5f:75:d7:aa:46:0d:9e:43:8a:76:19:50:15:
9d:8e:16:4e:8a:f8:ad:1a:9f:fa:a4:77:80:b9:49:
13:80:68:1d:3c:a5:13:f6:ed:1b:40:f2:cc:96:7e:
00:ea:0b:00:8e:9b:61:33:08:6c:a1:3f:fe:2b:db:
38:a7:36:58:2d:c1:64:fd:44:b2:a8:5e:ee:6c:38:
79:5d:25:0c:a5:5f:d6:73:dd:73:bd:65:99:1a:7a:
5b:1a:65:55:08:be:5a:d6:82:18:dd:d1:db:c9:a3:
00:c8:b3:b9:ce:95:9c:c3:f4:63:70:6f:c2:96:87:
91:c7:76:6e:6e:54:f8:f7:fa:f9:18:d1:13:7e:69:
77:49:e0:2e:ad:c9:90:81:cf:f0:87:75:d6:81:b2:
18:3e:55:3e:3c:6c:ec:f9:30:69:ff:f9:67:fd:8a:
15:20:cd:76:20:75:fc:ab:17:a9:47:b3:17:6e:03:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:62:2D:C4:E8:71:57:08:5B:28:DF:B6:33:74:C8:0E:EE:B9:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b37c46d-5f10-445b-9772-1120143beab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:9080::/48
Signature Algorithm: sha256WithRSAEncryption
95:c4:d7:fb:ef:76:1f:de:32:0c:9f:59:8c:93:56:5f:e9:8a:
5c:5d:5a:fd:5b:f8:55:08:e8:45:a4:dd:bd:7b:6d:d1:69:7b:
d0:2a:b3:f7:3d:02:78:2b:9b:59:92:7d:36:9c:53:8b:c6:cd:
3e:47:8d:b2:9e:0c:0a:8f:96:7d:ab:d2:41:de:c6:22:8b:0a:
4b:12:dc:9e:53:45:c3:ca:41:1c:fe:62:c4:81:73:b9:fc:80:
1b:77:e6:8d:d3:3c:23:58:93:d6:a2:c7:37:ca:0c:8c:38:ff:
b2:4c:40:d6:ef:c5:70:27:fd:d2:02:6a:aa:ff:f5:49:5c:c2:
f5:c2:df:d5:84:79:bc:39:c7:79:64:10:d7:c0:ff:be:98:90:
67:a6:6a:c8:6f:7e:16:3d:0e:e4:1f:c9:c1:21:e5:e7:6f:49:
82:b6:11:6b:68:cf:33:72:b5:66:d2:5d:40:53:12:e8:ba:fb:
73:28:ed:ab:67:e7:5c:1c:c3:8a:2b:4d:b8:6b:c2:18:27:3a:
a6:df:9a:fe:25:cc:e1:0b:b1:b3:8a:8b:1c:27:c5:a6:38:04:
56:39:1f:d3:93:b2:1a:21:09:a4:ef:13:0c:11:ad:eb:15:48:
99:9c:ce:7d:9d:92:38:78:87:dc:43:67:05:4e:de:99:71:e6:
55:af:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:00 2026 by rpki-client