Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
File: 94b69c02-a117-42df-89a0-b463fa809f2d.roa (raw, json)
Hash identifier: M0Bhjq2aeWqY/6GJ4tpmKO6aLKxxFDmoVsCwXhJLheo=
Subject key identifier: 1A:B6:25:25:51:63:64:0D:9A:AA:B7:B6:38:88:9A:8B:C0:63:EC:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13BCBF61C8FC528F451CBDB18A83A2C811641EAB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
Signing time: Mon 26 Oct 2026 05:20:45 +0000
ROA not before: Mon 26 Oct 2026 05:20:45 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bc:bf:61:c8:fc:52:8f:45:1c:bd:b1:8a:83:a2:c8:11:64:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:45 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4b5649831edd782bdb33869b5375b819bf65aa48c8cecc624856024c7dfcc707, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:fc:10:d2:e6:7e:63:89:9c:88:57:7e:54:
23:ad:aa:20:95:0b:4e:78:71:66:cc:cd:62:50:4e:
41:d3:48:fc:53:e1:ee:23:11:0c:ad:fb:90:e7:5c:
52:22:43:ed:d4:d8:d9:b2:35:2a:4f:ff:1c:ae:cf:
97:e5:ad:ec:7f:40:7f:91:1f:be:0e:ac:34:f9:8d:
00:44:d3:1c:b4:a4:10:df:d0:67:90:29:4e:38:37:
1d:e8:8a:39:44:51:b0:7d:e5:eb:63:55:aa:b8:00:
a2:86:ea:75:16:8c:78:88:44:f6:66:9f:b3:ea:21:
a5:67:b6:96:5a:6b:84:7d:e4:fc:dd:9d:cb:be:96:
3f:7b:ac:0b:3c:b3:95:7a:32:a0:87:4a:77:dc:2a:
2a:e3:45:2f:34:85:eb:ca:d3:95:73:f2:19:a1:7a:
4d:a0:10:e3:f5:9e:7b:bf:41:39:1e:db:08:47:2c:
5f:10:67:0a:89:37:f0:af:d1:44:b3:ff:c9:7a:5c:
b7:9f:22:1e:57:93:21:58:a4:ec:92:e1:43:fb:25:
57:90:14:e9:2c:c1:03:2c:d5:0c:dd:5f:a2:54:1d:
ce:01:b4:af:46:d8:6d:dd:92:02:3e:7e:b4:7f:49:
d2:b7:e1:6c:3d:14:d0:3b:85:5d:bb:fa:fd:e8:e0:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:25:25:51:63:64:0D:9A:AA:B7:B6:38:88:9A:8B:C0:63:EC:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:2000::/40
Signature Algorithm: sha256WithRSAEncryption
87:dd:78:cd:7e:a3:b1:05:74:10:06:42:20:a3:fa:53:0b:34:
2f:12:f0:84:72:b4:26:8d:e5:53:d6:83:39:94:8b:a8:a9:ff:
79:9f:f6:e6:f1:4a:2b:d4:38:53:48:c4:95:8b:1c:71:67:50:
c8:b6:c8:16:aa:0f:c8:8c:92:82:49:4e:c1:15:ca:80:2a:f2:
0e:0f:90:0b:de:37:ac:ec:4e:1f:31:79:82:85:1a:40:6f:f6:
03:c0:da:c9:df:dc:25:c3:42:36:06:ab:e3:24:be:6d:31:45:
5f:2b:e1:a8:22:03:3b:dd:0b:d3:35:af:de:75:0a:9c:1b:dc:
4d:4b:7c:a3:63:91:47:01:2f:a1:5b:d6:ec:a9:ef:7c:32:9b:
c7:ef:86:13:c4:2b:ac:fa:4a:57:03:3a:05:d9:9f:30:cb:1c:
a0:85:eb:e1:b1:e9:11:cf:e2:21:88:f0:dc:85:d2:82:00:31:
d9:59:c6:63:4f:9d:3f:c2:7d:6b:7b:f6:6a:b1:02:26:c3:be:
76:fe:e0:8f:de:35:4e:da:0b:1f:7a:41:a1:a5:cf:0c:b8:af:
cc:45:0f:ea:1d:b8:74:81:2d:68:11:7c:e3:50:b7:a2:30:3b:
b7:df:d3:d8:a1:26:1d:96:c7:2d:f1:e6:81:63:41:35:30:19:
84:df:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:17:48 2026 by rpki-client