Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa
File: 91473fe5-f129-48d9-8d23-63d62cec663a.roa (raw, json)
Hash identifier: CxIHwoUWRNxcTnZbYDrCI6lmnutXZrhEr61buKv9YQk=
Subject key identifier: 0F:6F:67:6C:32:51:44:BB:32:87:0A:C4:D1:05:24:81:0F:1D:09:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32FB450C295443150D925C6C406B4B872C289DE3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa
Signing time: Sat 24 Oct 2026 02:03:12 +0000
ROA not before: Sat 24 Oct 2026 02:03:12 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fb:45:0c:29:54:43:15:0d:92:5c:6c:40:6b:4b:87:2c:28:9d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:03:12 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=cf1c1ad2a1ecd53fae4ac01c3fe57f21c8a25022730edc6c97b27f0d21242a42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:15:22:27:48:95:f6:67:eb:26:79:d5:d7:
ec:cb:82:b4:5c:58:14:89:fa:ed:35:b3:8a:a0:02:
88:66:ef:90:fc:59:7b:b5:fb:e3:52:c5:de:30:34:
6f:92:6c:4b:b8:7b:c0:c2:de:99:69:23:6b:f3:0a:
2f:38:da:8c:28:94:a7:0d:76:9d:79:bd:bd:5b:f5:
ba:c6:f7:a3:cb:89:45:c8:11:d5:f6:be:e1:85:dd:
6c:2e:ce:d3:79:59:a2:40:7c:df:a9:68:91:a8:80:
7f:d4:0e:e9:66:e2:3b:f1:89:f8:30:ed:6a:a0:53:
58:b2:7c:c7:d0:4d:d6:6f:f7:72:bd:e2:0e:05:4a:
67:2a:9b:5e:e7:45:24:ae:d8:51:69:26:ff:f8:f3:
1f:de:20:41:1f:69:24:90:b6:33:ef:98:a8:8a:0b:
e7:cf:26:e3:8d:f2:d6:47:4c:53:14:a7:43:62:ff:
26:9e:26:5d:9d:2e:33:28:6c:cb:2d:72:3c:10:f5:
a5:ce:c8:89:c1:d1:a2:a8:77:45:cd:c9:fe:9e:2f:
47:32:72:b7:68:a4:a0:69:f5:76:9f:7c:18:bd:78:
b0:93:4c:45:68:3c:55:dc:73:26:b4:20:69:8b:cf:
ae:0d:1e:fe:b5:b8:c4:07:af:8e:b7:4f:10:63:f4:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:67:6C:32:51:44:BB:32:87:0A:C4:D1:05:24:81:0F:1D:09:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:840::/48
Signature Algorithm: sha256WithRSAEncryption
06:ae:76:d8:9d:21:55:14:ba:17:62:44:6a:5f:08:94:4b:82:
2c:42:ae:8b:c1:43:92:b1:75:ae:d6:cb:c7:f4:26:8d:c0:fa:
a5:a6:44:c3:1b:93:a0:64:d4:46:ca:9e:b9:da:09:fe:43:45:
74:2e:ba:da:ec:f4:ea:0e:e3:ce:53:a4:1a:73:27:ba:05:31:
68:30:54:c7:62:d7:d0:a5:24:12:a7:56:da:73:7c:77:3d:50:
d6:45:b0:40:af:cc:53:08:b1:62:1d:94:5f:48:e4:dc:3c:e8:
69:a6:8e:a1:9a:f8:45:af:b6:33:5f:be:bd:1b:08:03:7d:11:
14:a6:89:8e:fd:7c:6d:a8:6c:8e:dc:1d:26:b0:14:1b:a8:2b:
aa:7f:89:fe:e2:3b:33:58:8c:01:43:34:46:92:13:cc:9c:b4:
63:06:27:00:c8:27:16:80:65:f0:e2:8e:64:21:c2:f8:9a:6e:
54:e7:e6:9d:19:00:cd:5f:75:37:45:2e:dc:62:eb:21:64:d1:
91:f0:fe:f0:50:b9:95:01:9c:5d:34:e6:11:6a:59:4f:83:e6:
f4:56:29:06:c4:df:36:b8:f3:ae:4f:a6:3b:45:e6:09:7e:2e:
22:b9:15:0f:f2:a4:e6:0a:fa:ee:b4:15:29:e5:a4:e9:13:63:
e3:55:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:52:08 2026 by rpki-client