Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91ee3655-dcb4-41c6-b4a4-270ca5cacf7a.roa
File: 91ee3655-dcb4-41c6-b4a4-270ca5cacf7a.roa (raw, json)
Hash identifier: GRCNiO3ENB5Bxbmc0x99qiBQo3LBMws4u4Cj0wJ1zOI=
Subject key identifier: 20:FF:F8:71:20:88:74:60:F2:5E:EE:1E:5E:F4:02:C1:BA:45:B8:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F8D32E97446EE03379D318B91BC1815738A1698
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91ee3655-dcb4-41c6-b4a4-270ca5cacf7a.roa
Signing time: Mon 26 Oct 2026 04:40:36 +0000
ROA not before: Mon 26 Oct 2026 04:40:36 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8d:32:e9:74:46:ee:03:37:9d:31:8b:91:bc:18:15:73:8a:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:36 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=39eea5d0715ce05f889b5f6e7fcaddaba551eedc4936ea9d6a54f55bb20b849c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:a1:df:88:3c:d5:62:48:f6:92:c5:f0:3b:
b7:77:23:ff:95:cb:51:62:b1:18:1b:ba:02:5a:ec:
24:4c:b0:83:22:d4:aa:75:1e:d6:ce:e9:30:fa:28:
76:ab:b2:46:b3:ed:42:be:a9:b3:41:0c:a9:2c:ea:
88:c1:7b:0f:3f:79:e4:1f:59:af:c7:cb:65:b4:63:
c4:37:09:16:13:4e:3c:4b:ac:a7:2f:19:a1:cf:04:
1d:7b:23:c8:29:f6:31:3a:c6:ae:8c:bb:b5:83:62:
0d:be:15:e8:cf:61:5c:1a:fe:53:8c:0d:f4:56:cf:
ef:67:a0:c0:45:c1:62:63:1b:00:cf:f5:42:21:66:
8c:f1:5a:ea:97:5d:f3:62:05:f2:b8:a8:3e:ce:10:
02:67:0c:96:7d:58:e3:b8:84:b1:73:87:ef:e3:ea:
37:e9:a8:62:c1:4e:d1:91:35:73:6a:76:90:b4:65:
9e:00:16:a2:6a:11:77:07:7e:20:4a:1e:56:16:d9:
a9:ad:0e:a9:d3:87:f5:e8:ac:25:29:b1:1f:d5:78:
6e:73:a8:a2:6d:cd:ee:b0:b1:e3:30:19:d1:24:cb:
66:97:33:ad:5d:2a:1a:5e:aa:54:da:41:ea:8e:09:
85:59:33:18:96:57:5b:bb:75:00:f4:0b:f3:3d:ae:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FF:F8:71:20:88:74:60:F2:5E:EE:1E:5E:F4:02:C1:BA:45:B8:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91ee3655-dcb4-41c6-b4a4-270ca5cacf7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8080::/48
Signature Algorithm: sha256WithRSAEncryption
c6:7a:ae:00:ca:27:5a:64:12:39:a1:93:dc:5e:a3:8f:83:62:
92:1c:66:36:62:f0:43:f1:18:89:ba:ce:3b:3c:84:51:7e:22:
a6:8a:6d:14:b0:26:f4:57:20:92:30:cc:48:1a:bd:ba:9e:aa:
a0:15:94:80:66:21:ab:15:2d:53:9e:95:96:9f:c0:75:f8:d5:
9d:e4:53:da:29:16:09:9f:cc:e4:6c:a4:1e:b8:bc:06:9b:b6:
9d:c5:14:fb:f5:c4:27:70:89:31:f5:c5:df:83:65:d9:0a:86:
76:6c:b6:96:ca:f4:0b:7b:a5:36:8d:02:a7:80:70:bc:4a:c8:
63:d4:f8:b0:fe:bb:b0:92:4a:ff:e9:cb:5b:44:f4:f0:e2:b9:
8a:bf:30:46:c7:51:7f:64:2e:78:1c:1e:92:18:1f:b8:30:9d:
f3:fd:a6:fc:98:dc:90:26:76:7b:58:0f:8d:7e:36:16:37:b0:
e9:e0:37:84:a2:c6:54:f0:04:53:b4:fc:71:0d:e8:3f:1e:37:
a4:29:c1:83:66:0b:c5:9a:95:7d:7e:9d:3f:50:77:ec:fa:c0:
ab:45:18:35:a5:9c:64:92:95:58:d6:0d:92:6b:91:52:3b:7b:
6c:cf:5e:47:fd:1a:71:d6:99:d5:82:8e:ca:e8:3e:f0:23:31:
82:98:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:24 2026 by rpki-client