Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
File: 8bc6184b-4b16-4844-96e2-71541ff10974.roa (raw, json)
Hash identifier: lMM+GULQaKQyEOJHoO80hpEhxmAFAchT9p6C3Uo543k=
Subject key identifier: E0:1C:45:07:D6:00:C6:31:ED:59:E5:5E:5B:4F:82:F6:3D:41:A8:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05A1014431D533E799E934A91347A5520F0EF126
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
Signing time: Thu 15 Oct 2026 03:30:54 +0000
ROA not before: Thu 15 Oct 2026 03:30:54 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a1:01:44:31:d5:33:e7:99:e9:34:a9:13:47:a5:52:0f:0e:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:54 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=13d41c3973afd5e5cd344270cc2a944dcff9e5f5109b8835dbb95e8f4bcbcdf2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:ab:3f:ff:61:31:19:b4:75:30:25:ae:cc:
da:ef:2c:e5:1d:37:86:2c:ea:a0:19:23:97:e5:ca:
77:98:8e:47:42:ce:80:d5:94:c6:70:fb:2b:00:21:
14:61:f9:78:a7:d3:fa:3f:ba:c0:55:0d:64:91:62:
0b:32:98:e1:bd:25:4b:38:ab:49:29:05:37:4a:60:
1b:03:12:3e:08:10:5b:3f:fb:cd:ec:ec:9d:d1:26:
14:4b:0e:47:c1:46:95:f3:e1:b2:1c:c4:66:28:ad:
05:a4:22:a4:31:59:16:bf:2a:85:be:92:8f:67:40:
b1:1e:3a:2d:83:50:d4:3b:b0:09:72:a1:b9:61:d6:
32:d0:99:a9:a0:90:e6:2f:a1:07:d5:c2:65:14:71:
8b:75:87:a5:f3:36:04:33:99:0f:2a:e9:c9:d4:39:
fa:3c:af:1f:f4:66:54:e9:71:06:4c:8f:e0:d2:89:
6b:1b:0c:03:a5:c6:fd:49:76:63:a9:b1:6d:cf:d4:
57:fe:0f:94:a0:a3:84:28:25:f9:36:60:0b:b8:ef:
31:21:cd:57:78:a4:22:36:bb:2e:17:56:98:fb:84:
00:1f:80:11:a3:98:28:8c:97:78:09:21:cb:71:4f:
8c:d0:1b:ef:fe:6f:c7:84:aa:32:d5:37:97:2a:d1:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1C:45:07:D6:00:C6:31:ED:59:E5:5E:5B:4F:82:F6:3D:41:A8:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c000::/40
Signature Algorithm: sha256WithRSAEncryption
31:13:d8:88:6b:e3:2c:0a:c9:26:65:6f:60:df:5b:cc:bc:ab:
77:b0:a3:1e:72:3c:ac:ba:ac:bc:7e:0b:2a:40:4e:93:77:96:
95:28:bd:70:94:c2:0e:96:f7:16:68:13:26:91:c8:92:7f:4b:
ea:81:10:5e:80:69:ba:e8:be:f1:a5:f4:b3:47:74:4c:7a:24:
92:11:17:58:8e:2b:ae:ed:d6:95:d2:94:09:b2:e0:de:43:ba:
cf:76:1c:14:18:1e:e8:0c:78:e0:f8:bb:74:dc:cd:ce:0e:89:
43:b5:8e:f5:66:67:5c:52:9e:9f:69:80:04:77:00:fc:20:6f:
81:fc:54:ce:3a:83:e8:52:49:7b:24:2b:54:19:b3:02:d2:82:
b7:50:60:b2:e1:94:58:a5:d2:10:a8:e9:79:c1:75:dd:22:b0:
f6:4a:31:3f:97:73:24:3a:b2:7a:eb:57:96:9e:6e:73:d9:30:
3c:81:cb:c2:a7:e2:82:d4:94:68:52:02:c7:26:24:7a:7d:ee:
66:0a:0b:1c:41:3f:80:02:04:1c:64:87:c0:17:e5:75:fd:63:
34:54:b7:19:82:a9:0a:a9:d4:16:1e:3e:9d:ba:3b:d4:3a:48:
d9:cf:5d:88:88:0f:71:ca:ed:e0:97:4f:c0:fc:82:37:68:3d:
05:19:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:12 2026 by rpki-client