Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f6cab6f-44be-4f80-9040-c2f9ab0e0575.roa
File: 8f6cab6f-44be-4f80-9040-c2f9ab0e0575.roa (raw, json)
Hash identifier: Lbz6UyXL9LPbHTD9Z/WbQd8pguVlxnKNDPgheoLDudA=
Subject key identifier: FE:2B:AF:50:4C:3D:A6:CF:3C:DF:E8:67:EC:65:43:4B:24:92:48:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7978F2E1F76CFE228C12AEEC4434F24FD413773F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f6cab6f-44be-4f80-9040-c2f9ab0e0575.roa
Signing time: Sun 11 Oct 2026 15:20:09 +0000
ROA not before: Sun 11 Oct 2026 15:20:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:78:f2:e1:f7:6c:fe:22:8c:12:ae:ec:44:34:f2:4f:d4:13:77:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=55324d5d3f927a8c31ec6791c0b92a5eda33da070d1d6bfa1d41585e7405ef36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:f2:72:30:b3:08:07:6d:21:21:0a:3a:5d:
aa:06:9c:f5:a6:f4:5b:5a:d7:2b:01:fc:13:ce:d2:
52:c1:27:f5:dd:92:3d:65:a7:a8:99:8a:1c:c7:91:
f6:23:94:15:15:a8:2f:a3:f0:03:aa:43:e1:fc:87:
d6:6f:42:94:8a:e5:6c:0a:84:b5:9f:73:b3:fb:3e:
40:36:7c:c5:31:6d:4f:07:10:dd:89:55:bc:ff:43:
78:c6:43:c5:34:f5:cd:50:aa:bb:9c:f5:e6:43:f2:
7a:cb:64:b8:5c:eb:e2:80:db:50:89:93:48:70:e2:
d0:48:b5:f6:32:61:d2:1d:e4:63:8d:4c:44:c9:57:
85:68:49:78:c9:cc:55:ff:46:1f:a2:92:08:3c:90:
3f:0b:96:4c:39:97:4c:a5:9d:6d:5e:a8:ca:77:e7:
45:0e:28:d6:7b:34:9d:27:70:f6:7b:4e:d7:1b:b5:
ff:1a:e5:f2:f7:87:e2:4d:3e:7d:dd:8a:47:81:e7:
75:21:28:f9:ee:8e:1c:69:f1:dd:13:a4:30:8d:20:
f5:1d:7b:d2:84:24:ae:b0:b5:ba:77:5f:e2:24:b7:
ad:e9:9e:c0:3b:1b:3a:8b:6b:30:5f:82:bd:21:24:
65:8a:6f:e8:b7:1e:6b:34:09:7d:65:74:4b:85:d2:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:AF:50:4C:3D:A6:CF:3C:DF:E8:67:EC:65:43:4B:24:92:48:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f6cab6f-44be-4f80-9040-c2f9ab0e0575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8000::/40
Signature Algorithm: sha256WithRSAEncryption
89:e2:9d:12:7d:fe:b5:1b:c6:e1:54:52:90:69:a6:9e:34:60:
ad:c0:17:b2:64:fb:ce:97:64:40:83:e7:ce:4d:d6:7b:b2:45:
a5:b8:c1:9f:f2:ec:35:88:9f:5e:72:34:b6:d2:4e:83:1f:4e:
b9:73:f2:d3:29:8f:56:ba:3c:f3:b2:97:ec:6d:e0:fc:f8:c1:
c5:29:0b:c3:ae:ec:6f:01:4d:40:d5:22:2b:8a:4c:b5:30:89:
a5:6f:15:e0:45:1e:4e:2e:72:44:db:07:49:1b:b3:cb:da:a0:
a7:cc:b5:44:f2:16:34:64:60:3d:73:7a:2f:3c:2f:9b:7d:77:
a5:6f:f1:8d:91:b4:58:e7:f9:de:42:d9:22:f3:28:2b:04:7c:
db:eb:88:ec:9c:7a:f8:8f:f9:e7:21:64:bc:1e:2f:77:2b:07:
f0:23:63:b3:6c:22:40:26:66:d2:34:c0:35:b5:ca:bf:45:b9:
82:e9:65:16:66:2f:d9:7e:dc:a5:aa:41:fc:f6:3d:d7:d9:aa:
77:69:bc:1b:0b:41:bd:c7:2b:0b:83:ac:29:ea:46:2f:04:4a:
ad:17:f0:de:13:ee:61:0d:cd:81:0f:d9:60:b8:25:a6:96:e6:
d8:03:da:13:5a:16:28:56:7c:74:bf:ad:e4:7c:a2:ec:2f:42:
97:bb:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:24 2026 by rpki-client