Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cb139da-3bae-47c6-982d-c36083d71801.roa
File: 8cb139da-3bae-47c6-982d-c36083d71801.roa (raw, json)
Hash identifier: Q4633dHX88/QeiS3Nrmmbh5MQYct3ujjVhEvBaWtEpg=
Subject key identifier: E1:0B:3A:D8:24:FC:4E:B7:02:76:C6:59:E7:A8:2E:38:C2:4F:C6:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3247BFE2E4969CA5C2C80AADBB399D95F4DF9A0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cb139da-3bae-47c6-982d-c36083d71801.roa
Signing time: Thu 29 Oct 2026 01:02:46 +0000
ROA not before: Thu 29 Oct 2026 01:02:46 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:47:bf:e2:e4:96:9c:a5:c2:c8:0a:ad:bb:39:9d:95:f4:df:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:46 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=db79c02fa2128e87ae4d6122b9b14bbbee07ec58196a24815ef1415b2df0f208, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:91:18:75:9b:d3:d8:50:fe:36:a8:84:06:
83:3e:bd:2e:18:60:a4:61:12:2b:88:ec:b7:02:19:
8d:e5:89:cd:74:8a:ab:25:01:a5:40:43:fd:76:f6:
78:4a:5a:7d:17:78:d7:17:85:4f:25:75:e3:b0:dd:
d6:82:37:a0:7c:df:13:a6:fe:90:6e:88:da:16:68:
29:8c:40:8c:7d:c5:7f:2c:80:9c:b9:74:86:aa:99:
00:30:99:7f:84:e9:9a:c3:17:ec:4b:bc:88:90:69:
32:85:57:ea:0f:09:f6:b5:cf:96:59:9f:8d:b1:c2:
32:89:de:6f:5b:83:ca:ed:3b:6d:fb:80:10:c7:18:
66:05:25:d7:a1:35:91:30:d2:bd:1b:86:7a:07:41:
4a:f6:58:d8:dc:8e:5f:9c:1c:36:ef:f3:27:60:09:
b5:4e:92:ce:3c:7e:18:ca:0b:06:e0:c0:22:9d:b0:
cb:16:e2:bf:82:31:ca:23:35:e4:60:24:69:f8:56:
14:58:5f:b5:1d:15:b7:b9:c7:09:f5:a1:7c:de:ba:
3e:e1:0e:fa:4a:24:f3:32:af:f0:57:61:48:e2:8b:
bf:a9:48:c9:58:1a:e1:6b:dd:21:c4:6a:cc:9f:89:
58:49:4d:13:3f:dc:b5:1f:82:27:59:69:9d:61:79:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:3A:D8:24:FC:4E:B7:02:76:C6:59:E7:A8:2E:38:C2:4F:C6:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cb139da-3bae-47c6-982d-c36083d71801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9000::/40
Signature Algorithm: sha256WithRSAEncryption
75:45:3d:5f:4c:0b:39:ae:06:b9:15:ab:fa:ac:dd:88:0e:1c:
85:9e:a0:a0:2a:22:dd:1c:28:16:03:cc:83:3a:8e:0f:58:48:
a5:92:1f:81:7f:8f:57:89:11:9e:24:7b:0d:c6:f2:93:fa:15:
10:78:92:b0:de:a2:16:98:e1:ad:ea:d4:ab:6a:86:4b:32:c0:
af:58:f3:0a:42:f3:55:f7:cc:6f:1d:4b:26:70:73:15:f8:d0:
98:c2:96:ca:25:f7:8d:8d:32:8d:e7:1a:b8:d2:54:5d:f7:bf:
27:9d:f2:e0:09:4d:05:2d:c3:e4:10:41:d6:6c:fe:dd:ff:c8:
00:4d:d3:9f:94:87:78:21:88:77:e6:ec:cf:fc:3c:7d:e1:2f:
ae:fd:57:5a:d2:35:cb:6f:a3:99:72:6d:39:98:2f:21:3a:10:
a8:59:4d:6f:00:02:b8:b7:51:9b:73:8a:f8:ca:9e:da:c6:fa:
b8:10:2f:9f:3a:c2:9d:44:09:56:f7:ba:33:8a:57:d9:d2:56:
80:22:49:77:98:31:f0:e2:9e:06:0a:83:c7:5a:ef:c1:8c:c4:
9c:8a:dc:0d:6f:ef:03:ea:44:0d:75:63:e3:bd:8d:d1:b0:83:
cd:35:2c:21:b9:5b:4a:92:77:27:e2:c5:ef:54:a4:a5:00:8c:
ef:bb:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:20 2026 by rpki-client