Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa
File: 8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa (raw, json)
Hash identifier: H5e+BZjRQ9Dr6iMcrQxcoTfGKuHkd3TFwvQcqtkHJhQ=
Subject key identifier: A2:3A:74:C7:D5:A9:63:6D:08:49:41:AB:BE:A1:DC:19:23:3E:14:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45BFF9B4361B69AC813858AFBA5C88ACB2505519
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa
Signing time: Thu 29 Oct 2026 01:02:18 +0000
ROA not before: Thu 29 Oct 2026 01:02:18 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bf:f9:b4:36:1b:69:ac:81:38:58:af:ba:5c:88:ac:b2:50:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:18 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=8814bcd47dc516b4f79e022374e9a5942e199a5510994b3cf2d2618793462258, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:42:0a:14:9f:2f:f9:02:ca:62:63:a7:ef:
c8:4f:71:7f:95:4e:52:f4:68:04:e3:6e:49:58:d6:
76:68:2a:f0:fb:e7:09:ac:ff:e9:a8:a0:1e:c8:df:
1b:47:ec:15:7a:fe:ef:28:69:e0:c4:ab:ea:b7:c6:
1e:00:13:4d:34:2e:81:c9:a4:79:1b:57:f2:57:34:
d8:27:a6:b9:9d:9e:2e:0c:06:bb:05:10:28:63:01:
ce:0f:e5:5b:18:95:b4:b5:ef:b2:2d:67:30:cf:22:
52:de:09:0f:14:58:6e:fd:0c:02:f6:d8:af:c6:f1:
1f:55:1b:60:06:26:6a:46:e6:a2:3a:7b:e4:44:36:
2c:10:bd:3c:ae:f0:eb:58:a3:0f:cd:d6:82:39:ab:
c1:d3:f1:a8:a1:7f:54:a4:be:9f:d0:d2:d9:b7:b6:
23:6b:86:11:fc:d9:4e:1c:86:f3:96:0b:a3:f4:5e:
88:fe:49:bc:74:a9:e6:c7:d0:3e:26:83:18:f2:37:
8f:a7:c8:d2:79:21:73:06:10:12:13:16:86:c1:4e:
df:bf:57:75:46:42:23:0e:97:de:b6:84:f2:e7:cc:
71:a7:9e:1a:2a:fd:62:4c:78:c9:53:b0:9a:18:85:
22:6a:c4:f5:e1:9a:06:c2:00:ce:b7:9a:b9:30:4b:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:74:C7:D5:A9:63:6D:08:49:41:AB:BE:A1:DC:19:23:3E:14:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc4a6f3-a25f-4cdf-839b-b98d93af942d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:6080::/48
Signature Algorithm: sha256WithRSAEncryption
9a:9b:77:d6:75:b4:b8:97:c7:7d:f5:27:48:b5:53:ae:58:c6:
1a:e9:dc:fd:48:53:92:51:97:e4:e5:ba:82:1b:44:1c:00:ed:
c4:4c:cf:05:8f:b2:82:7c:fb:72:72:5c:16:50:12:d6:a6:51:
c9:bb:2a:54:ed:eb:e8:5b:31:18:4b:53:cb:da:69:8a:98:a2:
9f:2b:bf:00:41:93:c5:3a:52:98:15:0d:19:59:10:f8:a0:10:
4e:7d:72:d3:d8:e5:42:b7:17:bf:bc:6c:6d:53:42:6a:a7:df:
4f:33:e4:18:25:7d:1c:f7:cb:d6:d0:ef:73:62:85:6b:02:8a:
24:45:2c:12:e4:ab:88:14:17:4b:dd:5d:a8:77:26:b5:01:f2:
ea:66:ed:eb:60:21:8e:1f:1b:ca:27:a0:9f:97:07:30:19:b5:
be:ad:fc:7c:3a:c1:dc:1a:97:08:27:98:5b:4d:94:07:be:9c:
f5:c1:8d:06:a4:a6:93:5c:a1:28:26:d3:87:8c:87:2b:ba:b2:
11:b3:87:67:20:5c:63:b8:b0:6c:ac:a2:69:7e:08:66:52:95:
b6:87:ec:76:12:de:4d:8a:98:cd:19:aa:16:54:48:18:f5:0d:
b6:fb:48:39:da:e7:4c:01:af:8c:e8:92:65:72:27:49:fe:3c:
67:f8:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:23:01 2026 by rpki-client