Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
File: 904a13d7-baa1-4bc7-b805-601d0b998680.roa (raw, json)
Hash identifier: NtzebZQaSrNOpiZmYOJ4jduRzAwxUHTaFXww9ZxY0lY=
Subject key identifier: F1:11:D7:1D:E6:15:0C:69:C5:B6:96:8D:DD:EA:0B:B2:F6:7B:78:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16D099A25E3E575AE91837E049C0385A5CB4F389
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
Signing time: Mon 26 Oct 2026 05:02:52 +0000
ROA not before: Mon 26 Oct 2026 05:02:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d0:99:a2:5e:3e:57:5a:e9:18:37:e0:49:c0:38:5a:5c:b4:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=beeaf1f308cb27bccf905ef2caf15d1f157fff4282403caf64e7cac34f4a9f78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:45:f3:a3:57:ea:61:c7:d2:50:da:5b:e0:
67:ca:bc:03:66:83:2f:c3:0b:6f:ae:98:4f:0a:8b:
be:ba:83:53:3c:6a:c3:24:4c:53:cc:a7:20:35:3e:
ee:95:46:b3:01:c0:a3:e0:e3:6f:00:9c:ae:5b:07:
1b:fe:e8:0f:fe:44:53:14:9f:63:c2:17:87:65:14:
3d:a8:3f:9b:ea:8d:e5:e2:24:69:0a:f2:79:3c:da:
5e:bc:8f:7d:8c:a0:e9:7b:4d:8e:58:d3:94:47:d8:
16:6e:61:9f:dd:81:40:26:e6:0f:e7:27:56:1d:57:
63:c6:44:94:c6:80:54:53:96:03:07:ce:83:3c:d3:
3a:2a:94:15:43:5f:48:b0:7c:01:fe:9b:9f:72:b8:
42:d8:a0:23:d7:89:92:ee:a9:81:d9:19:b2:b1:80:
a6:35:ab:a4:97:73:3a:1e:df:21:95:0f:f6:a1:e5:
4a:10:32:2c:83:5f:97:8f:6f:58:8e:2e:25:2e:e9:
e5:90:eb:0d:f8:0d:a2:5e:46:76:7c:cb:88:c8:e4:
a9:8e:2f:4a:b1:08:95:dd:f4:8e:a0:9b:74:b2:a4:
a2:1e:35:c6:30:a8:0c:cc:76:da:47:eb:94:a7:11:
ea:fc:53:8e:08:cc:2c:1b:d2:e8:2b:7b:f7:d9:de:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:D7:1D:E6:15:0C:69:C5:B6:96:8D:DD:EA:0B:B2:F6:7B:78:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:8000::/40
Signature Algorithm: sha256WithRSAEncryption
39:23:36:b2:54:70:f3:77:f2:6c:81:53:ef:1c:41:63:eb:5e:
45:5f:f1:ed:6e:61:99:72:ad:bc:ec:14:63:0e:fb:8a:da:f6:
f6:6b:c4:cc:94:34:2c:e5:f4:f8:ec:e6:e8:04:7a:9a:9f:a7:
9e:81:7c:74:b8:90:4d:ea:fd:a3:91:48:00:2e:15:a3:cc:16:
77:95:93:ae:eb:6f:97:27:3a:49:85:e6:50:b9:cd:a0:36:06:
f3:b8:af:55:f7:b5:59:44:bf:be:ff:8b:ea:17:1e:01:41:ac:
69:ee:58:28:de:0a:4e:76:df:60:36:65:00:04:6e:6c:19:22:
00:a6:fb:cc:95:d0:3a:f9:9d:1b:8a:a6:7b:e8:fe:b5:ab:ae:
31:41:4e:d6:7a:bc:ae:a1:8c:49:d4:13:3d:af:ea:f7:ea:1c:
8c:f4:5c:b0:45:a4:ad:c3:7d:7f:e7:50:65:77:f9:3b:88:2c:
ea:1a:3e:fe:4b:b2:0a:ba:90:a2:d9:56:0a:ef:f6:a8:f8:65:
65:b3:01:71:70:ef:0f:55:64:44:f0:04:9a:96:a0:65:10:d3:
cb:f3:d3:4f:2a:7c:97:f0:96:cd:24:da:54:8c:35:2c:4e:ad:
4d:db:49:31:27:1b:55:45:4a:f8:3e:1a:fb:9e:4e:1d:65:ef:
d1:20:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:16 2026 by rpki-client