Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
File: 94d1ece6-a642-4297-8fb7-d7003b36fe75.roa (raw, json)
Hash identifier: G99ByRldB8jRau2mlacE44r+goigaKSORsBJ9/WRAH4=
Subject key identifier: 36:C7:51:B6:06:D6:5E:8B:93:25:70:99:F2:E8:6F:06:8E:A5:CE:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22CF4FC83091281174AB46595D1DAA8B127843D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
Signing time: Mon 26 Oct 2026 05:21:05 +0000
ROA not before: Mon 26 Oct 2026 05:21:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cf:4f:c8:30:91:28:11:74:ab:46:59:5d:1d:aa:8b:12:78:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:21:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2f8ad129dfdbe307e836d31f425a1838375025dc375547c459f639736e126ac2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:29:6e:fe:8b:b8:b1:b6:6b:bc:4e:f4:a0:
1c:92:af:ce:e0:24:ec:a1:93:64:ef:60:77:b5:58:
36:7f:76:1f:7b:83:03:b1:54:52:ac:66:7f:40:59:
2d:39:32:ba:6e:3b:cb:2c:ef:bc:50:de:25:d5:25:
0a:95:10:c8:30:ab:28:b1:11:9e:82:0c:e1:6d:5f:
56:fc:60:6d:d2:c9:a3:1c:5f:f9:94:63:22:63:c7:
1a:c5:f5:5b:78:82:60:e7:ec:74:ab:4e:53:98:b1:
59:77:92:82:cb:cb:67:86:5a:96:cc:1f:1d:8d:3d:
9a:9d:e6:5f:d4:b8:e0:cd:da:32:b5:d0:3c:75:a2:
ea:3c:da:5f:52:00:07:49:d1:e0:6f:79:6f:7f:df:
77:36:81:96:a1:62:2c:7b:a2:8c:44:2d:38:b5:d4:
70:80:3b:d9:f9:bc:b0:ce:29:d8:51:9b:71:39:37:
5c:b7:b0:dc:58:d0:29:26:86:17:5b:0f:08:bb:5f:
e2:e6:a5:19:7b:04:98:39:ce:d7:3a:45:7d:b5:eb:
ad:41:55:ba:e5:a9:e3:60:66:7b:03:a8:a7:ab:ff:
98:96:13:eb:95:75:fa:98:61:0d:f0:a7:a8:23:31:
b7:c6:df:04:12:f6:9b:c0:84:dc:f6:c4:e3:50:73:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C7:51:B6:06:D6:5E:8B:93:25:70:99:F2:E8:6F:06:8E:A5:CE:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:800::/38
Signature Algorithm: sha256WithRSAEncryption
c7:d6:31:d2:3e:29:77:15:0e:ba:67:1f:85:ab:ce:c9:cb:c3:
15:5f:45:96:46:0f:de:a4:2e:f8:6c:7e:96:9a:5f:34:fe:be:
c3:7a:2c:57:f7:64:56:0d:e7:bb:cd:42:79:f0:4b:6f:08:ef:
a2:79:5a:6e:c4:d0:aa:73:00:0c:6b:11:ad:af:27:e8:21:dc:
92:80:25:24:32:b9:da:51:2f:f3:3d:66:e4:f1:bc:04:ca:4c:
0e:e3:06:a1:7c:0c:6e:90:49:39:b3:e2:f0:6e:e3:45:0b:c5:
63:e6:aa:3b:9e:07:a3:85:be:2f:8e:97:dd:55:2d:d2:3a:5d:
a9:be:db:18:91:0d:d7:58:b2:16:d0:7c:2b:77:5a:0e:5a:00:
30:e0:1f:1c:0e:c8:1d:27:4b:5f:2e:2f:9b:6a:b0:e9:fa:4c:
24:51:be:1a:37:75:a2:42:76:d8:96:c6:8e:be:9c:c1:16:0e:
0b:36:7f:0f:55:bf:86:21:17:1b:d0:92:44:bf:00:9d:40:12:
47:38:ad:7c:6e:9b:69:c3:e2:10:a5:3b:62:07:5e:4f:ae:31:
21:ea:5c:eb:c8:06:a2:90:d4:dd:f9:fd:b1:9f:bf:55:f5:76:
8b:a6:e9:77:38:d3:1e:55:f0:39:db:e3:ec:8e:ab:40:67:fb:
fd:29:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:42 2026 by rpki-client