Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
File: 950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa (raw, json)
Hash identifier: QAWkzEojsCWAUHKtmYXK/8Of77dlNx4kfNhD7GN0dr0=
Subject key identifier: F5:35:D8:7F:98:D6:E0:7F:01:7B:A3:4C:2E:BD:9E:A1:18:68:61:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02D0BBD00E56085AB0137D69D299251566B8EA2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
Signing time: Sun 11 Oct 2026 15:20:09 +0000
ROA not before: Sun 11 Oct 2026 15:20:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d0:bb:d0:0e:56:08:5a:b0:13:7d:69:d2:99:25:15:66:b8:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=d54681514491507ba106a5f11c7fd73c8b43a84a829f303d44b575862b7b43b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:86:bb:cb:9c:e8:56:0f:2c:f6:df:e4:e2:
aa:70:9e:75:77:e9:9a:70:d3:ed:d4:b8:aa:b8:4a:
99:88:3f:de:2f:56:11:de:56:fa:b4:a2:6f:27:3a:
33:fc:c6:c6:1c:40:fb:97:6e:36:3b:ce:8f:cf:01:
73:f2:8e:94:07:79:f4:9f:48:7b:64:2a:1e:fb:c9:
4a:bb:37:0b:db:7f:0b:26:77:9c:c2:25:a1:57:c1:
c0:ae:a6:88:7a:7f:9b:b1:ac:e7:c5:06:b6:f7:5d:
12:4a:0f:4d:ed:08:44:c7:25:c4:18:53:de:1c:99:
4c:2f:1d:2d:14:d8:0e:f4:25:b4:80:df:fd:71:2c:
32:6d:06:f7:c7:ef:27:87:2b:2b:56:09:b2:14:30:
d1:21:59:3f:f5:88:06:aa:5c:e6:fc:f8:78:8c:14:
c8:d9:42:b9:83:6b:a3:2d:47:25:b2:88:11:31:04:
cb:ff:16:87:ad:61:d6:c9:30:6b:98:a6:d6:e6:2c:
c5:5b:65:b9:f7:07:4d:a1:4c:9c:a3:6c:4d:84:f0:
c2:6b:60:eb:75:f5:33:06:17:be:c5:aa:d2:5d:40:
a3:ae:fc:c9:c5:c4:7e:e4:b7:22:f0:11:c3:a9:32:
c2:6c:22:1c:69:82:b5:cd:ee:b9:93:aa:fe:31:11:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:D8:7F:98:D6:E0:7F:01:7B:A3:4C:2E:BD:9E:A1:18:68:61:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
30:d6:83:b8:a2:be:f6:98:64:1f:3a:98:31:e6:22:77:43:80:
34:5a:5b:38:48:59:45:23:af:f3:6a:33:08:dc:58:4d:76:58:
26:ef:47:20:31:58:e2:75:88:54:c3:74:1d:55:61:4c:75:59:
5a:d2:3d:03:3b:01:e6:9f:d2:d4:5d:3f:95:c2:60:ad:84:96:
fb:6d:45:84:91:c9:d5:57:16:f2:96:76:27:9b:b4:bd:67:e9:
ce:dc:eb:72:b7:46:74:cf:3c:6c:86:e5:cd:ce:b4:3e:4b:a7:
70:ec:5e:68:39:94:2c:a2:3b:3b:70:c4:59:52:f3:d8:8d:cb:
6a:30:00:36:ff:f2:d7:e1:8b:74:d8:75:c5:eb:f9:10:e7:1e:
93:4d:03:0f:b0:9d:44:37:8f:d3:52:4d:52:9f:e0:3d:6e:8b:
58:af:86:cf:bc:bb:33:13:d5:0f:6a:37:4b:7b:dc:39:a8:0a:
64:40:0d:b3:b8:77:d6:a2:3f:a6:77:be:06:53:99:51:84:fa:
94:51:91:b3:42:0c:80:0d:ed:14:3e:b2:b7:03:1e:de:1b:9d:
80:ad:a3:ea:79:c5:c0:61:d1:90:fa:44:74:cf:80:68:ab:04:
3b:4b:63:e5:ad:2f:f9:94:db:48:75:18:ab:5b:8e:6c:28:64:
f8:bd:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 16:40:00 2026 by rpki-client