Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: gJMSTmmuUIqgzigRk+7AXttmePjCGyTsTt3vfP+nrv4=
Subject key identifier: 74:10:13:63:AA:21:7D:B9:74:03:7C:C7:44:FC:4B:45:48:32:83:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 039A0F933B8E59324C97CF6B599E7E03F51BD05A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Mon 26 Oct 2026 05:10:05 +0000
ROA not before: Mon 26 Oct 2026 05:10:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9a:0f:93:3b:8e:59:32:4c:97:cf:6b:59:9e:7e:03:f5:1b:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=70aa232a4225ac6a00d613c93c41730308821ee481b2cc192109a97175c0565d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:38:56:b2:12:47:ea:f9:dd:c5:55:ee:a8:
35:b2:59:3a:c6:84:64:92:9f:45:e5:bb:08:d2:83:
99:13:aa:2a:be:e3:a6:ae:c6:7c:ab:48:cf:3c:40:
e0:9f:7f:35:53:46:bf:52:2b:20:e0:32:0e:94:f3:
99:b3:c2:d8:97:f5:a8:9e:f8:4d:e2:7b:7c:4f:8a:
06:e3:b3:8e:3b:77:98:d1:44:d5:81:6c:56:ed:e8:
a8:54:45:b1:e1:3e:02:bf:28:b1:e5:75:49:72:74:
87:34:86:51:c6:26:93:8c:d6:8f:3c:5f:e3:0e:c1:
0a:a5:96:b3:a2:1f:87:62:95:41:97:87:60:7d:af:
09:38:a2:84:6f:f7:31:94:d2:c4:0c:32:35:c1:d0:
78:43:d2:86:ab:a0:de:11:07:d8:cf:ca:8f:32:10:
9b:5f:da:02:1a:32:4f:ef:66:77:66:05:35:8b:8c:
27:22:79:5b:25:3e:15:11:3f:86:a9:40:83:24:fa:
37:77:11:44:32:21:c0:4f:f5:c0:33:bd:1d:e6:af:
b7:d6:f4:82:2e:e3:19:ed:3d:1e:30:9b:b3:4d:e2:
11:cf:d5:e0:1b:f0:8b:c7:59:f4:e9:fe:c4:ce:17:
e7:d4:d7:6d:64:be:a1:9a:60:81:0b:ea:a4:d9:97:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:10:13:63:AA:21:7D:B9:74:03:7C:C7:44:FC:4B:45:48:32:83:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
2e:28:8e:7c:ff:e6:84:e5:e6:4b:72:e6:63:32:cc:0e:7d:00:
fa:de:38:f5:99:bf:fd:88:3c:98:79:56:eb:52:df:0b:f1:79:
16:2c:94:7d:a7:34:5e:d3:15:a7:05:dd:07:b7:22:8e:ef:5f:
31:fc:81:f1:6e:b4:58:aa:04:0a:e6:bc:40:99:25:19:f5:5d:
57:26:3a:3a:e9:34:c6:80:1d:3c:e4:bf:06:4f:15:8c:93:f6:
5f:8d:31:3e:fd:b9:3d:86:c9:71:18:6a:24:b5:ae:4e:f1:62:
a7:63:40:16:1b:6d:e7:66:f5:aa:b8:b1:f7:a6:d2:5b:ed:88:
3b:4e:52:f9:bf:82:fb:44:06:84:62:7b:93:3f:7d:e0:fe:29:
08:b7:01:13:ca:43:7b:92:d1:46:a7:46:9e:32:9d:89:63:82:
f6:cf:8e:09:27:47:c6:9b:97:ce:c3:8f:4b:12:34:f6:0e:97:
45:0b:33:12:3e:5f:52:cd:87:80:93:3f:4a:8e:76:6f:c2:aa:
4b:9d:d0:1e:1c:c7:38:5b:42:1b:52:40:cf:6d:2f:a8:56:9f:
97:89:43:90:8b:b1:2e:ee:50:69:be:8f:81:e9:b2:19:7f:1c:
90:6c:da:0f:59:f8:13:8c:5f:7a:31:af:8f:19:31:3f:53:a8:
f7:a7:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:38 2026 by rpki-client