Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
File: 915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa (raw, json)
Hash identifier: csUOvWuBHK48+y7NlG3ZDCQWUHP2DvleWysUG/0rSvk=
Subject key identifier: C4:73:1E:79:54:C6:0C:A8:FE:F3:3C:C2:91:1A:7C:D3:B3:38:45:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C16D871E93C55E444A0259488FF40C0031304A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
Signing time: Mon 26 Oct 2026 05:21:05 +0000
ROA not before: Mon 26 Oct 2026 05:21:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:16:d8:71:e9:3c:55:e4:44:a0:25:94:88:ff:40:c0:03:13:04:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:21:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=62fb5e157b631c1f8d4839e00386e325beb4f363f269c1e8b7e589cf443c2f53, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:6f:0c:43:df:fe:4f:3f:71:2f:e4:6a:9d:
8e:4d:09:b5:a4:6c:50:31:78:37:4f:7c:68:b0:66:
ed:c5:ca:07:96:7c:98:d2:a5:6b:38:fb:64:c0:8c:
55:9a:17:87:b1:0f:bb:0d:e9:2a:42:e0:ca:d4:b5:
b1:5b:9a:be:a3:41:6d:52:99:18:a2:51:b1:c1:78:
93:4e:8c:e8:f5:4c:bd:2b:de:3d:df:52:a9:9c:dd:
3c:6f:fb:ae:ab:a2:fb:6b:eb:53:1d:52:94:89:28:
b0:94:e2:76:ea:47:30:63:25:64:c2:53:fc:a4:c0:
14:5d:38:66:73:45:b2:0e:bf:94:b1:aa:ab:92:c5:
5b:00:31:e8:43:d0:a2:17:23:f7:58:db:05:da:c4:
8e:50:11:1f:a3:8e:86:03:a7:95:9b:a9:45:76:df:
af:e4:17:b3:df:0f:8c:96:af:38:65:eb:e8:b5:c2:
f7:8b:1e:2d:bc:3a:06:c7:e9:65:6f:70:e2:0d:63:
94:e1:e6:71:41:27:52:29:98:c9:3d:6b:f7:2e:ed:
af:f6:d9:95:81:e8:2d:45:7b:1a:5e:73:60:af:f2:
c0:0a:50:4c:c2:39:cc:f4:1d:8f:5b:39:58:86:e2:
0f:32:98:c7:5e:11:3d:b3:c7:87:59:23:0e:7e:ee:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:73:1E:79:54:C6:0C:A8:FE:F3:3C:C2:91:1A:7C:D3:B3:38:45:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8000::/36
Signature Algorithm: sha256WithRSAEncryption
b2:cf:e4:7a:6c:33:00:4c:50:61:cd:32:18:74:b5:1e:30:b6:
78:8d:3d:e2:a8:72:d3:01:6d:55:ec:1b:91:c4:97:a8:a4:44:
c0:50:c4:ef:bc:5e:5d:36:87:b2:34:4f:6a:65:47:d9:d8:0e:
0f:00:d9:71:e6:8b:97:a8:7f:4d:66:b7:cb:2f:2d:eb:fa:ed:
6f:b2:85:3d:31:ba:d1:9d:8e:55:c7:80:92:59:76:8e:50:96:
94:da:c2:57:79:07:81:98:f5:d3:d4:7f:e6:07:c4:03:6b:94:
0d:8a:11:97:93:58:56:9a:e7:10:2c:16:15:7a:3e:e1:bf:12:
00:f1:3f:99:78:7d:86:2d:2e:e1:d8:0b:10:7b:be:9a:53:29:
c8:58:bb:24:19:55:0f:de:70:e3:99:6c:1d:86:bf:8c:7c:28:
c2:dd:21:77:bb:ab:c6:ec:6c:d1:d1:fd:83:f4:df:9e:09:bb:
7d:ba:bf:1d:55:9a:ea:a7:67:f1:fa:4d:cf:a7:a1:51:23:b0:
76:e0:04:c9:db:54:2b:8a:c8:84:05:90:66:07:38:83:d2:6d:
24:2a:5c:b6:95:a8:f7:8e:4d:e8:c0:3c:fb:2a:83:91:40:05:
13:f3:0d:99:7e:24:ea:1a:79:d7:b8:12:96:47:11:7e:66:69:
fa:74:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:26 2026 by rpki-client