Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97700b94-3ec6-472c-97f5-b54fb1f56f76.roa
File: 97700b94-3ec6-472c-97f5-b54fb1f56f76.roa (raw, json)
Hash identifier: C9/+kff3MQBd+NlzAviEhpf86DcshtocRb9RbFLCdis=
Subject key identifier: D6:50:2C:A7:8B:76:C3:A5:35:E1:72:2B:22:50:6B:3B:ED:18:9A:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13C6843D67A1D1C3DC93E2442CD434DF085CA9DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97700b94-3ec6-472c-97f5-b54fb1f56f76.roa
Signing time: Sun 11 Oct 2026 15:20:29 +0000
ROA not before: Sun 11 Oct 2026 15:20:29 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c6:84:3d:67:a1:d1:c3:dc:93:e2:44:2c:d4:34:df:08:5c:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:29 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=e14dd7044b849553a7a7f1ae3412ef534891f589dd429d9aaf2e106f5706a7a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:b4:2a:18:6a:05:5f:ab:6b:c5:73:ba:ab:
d5:12:91:29:ad:9e:62:2b:50:36:46:69:24:e4:c7:
7e:34:b7:ab:fb:49:ad:dc:9c:3a:df:45:db:42:bb:
54:66:94:3c:fb:e5:89:7f:00:42:92:db:64:97:1d:
f2:78:fb:0f:b5:27:88:13:78:5c:c5:bb:41:f2:8f:
0c:75:f2:4b:78:5c:85:f4:ab:5e:79:4a:e7:15:1e:
a4:70:f8:8d:98:79:62:ae:d2:a3:ad:34:7f:bc:42:
d4:85:af:fd:44:3b:1b:48:69:b8:73:52:1b:13:9f:
f2:54:97:27:96:4f:11:a4:ed:c2:be:8d:49:e3:a2:
f8:9b:97:e4:c3:50:ce:44:b7:3c:76:b0:d6:bb:a4:
7c:13:5c:f4:ab:45:c1:65:1d:7b:1e:7f:d0:f9:b2:
23:22:68:29:be:4f:82:67:13:5f:5b:54:01:3e:5d:
68:38:be:e4:e2:e8:ab:3a:30:1b:a7:3c:f8:e3:1a:
59:e7:6b:8d:31:d7:17:cb:ff:c9:44:e8:45:e1:4b:
42:23:db:6c:3c:6d:c0:1d:ef:aa:14:19:27:30:4e:
70:36:a3:38:9f:b8:6a:a7:2b:f6:44:33:5f:4e:08:
c2:a4:68:8d:5e:93:44:88:3c:5e:3e:50:b4:2d:5e:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:2C:A7:8B:76:C3:A5:35:E1:72:2B:22:50:6B:3B:ED:18:9A:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97700b94-3ec6-472c-97f5-b54fb1f56f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2040::/46
Signature Algorithm: sha256WithRSAEncryption
1b:20:4a:8e:ba:ca:9f:c8:09:30:5e:0b:d0:57:0d:e9:a3:59:
c2:7d:bc:0d:a0:bc:87:4e:e0:4c:b5:74:41:fc:6f:e1:25:d6:
1d:f7:ea:b5:7a:e8:34:ea:28:e5:d4:04:a3:42:37:b9:64:b2:
e0:81:30:a0:75:1c:3f:26:e3:e0:1c:08:26:39:49:fe:8f:c8:
62:76:ee:6a:99:6d:ae:ec:b3:0b:81:00:5f:51:b5:bd:fd:5f:
65:54:70:75:8b:c0:5e:82:14:69:e9:99:68:d3:95:6a:57:c4:
9b:54:7a:05:a6:2e:3a:5e:c2:bd:cd:8c:83:71:f9:a5:6a:f2:
4b:b0:ae:70:3a:c3:66:29:10:f7:1c:25:75:8b:af:a6:54:b5:
33:a6:11:55:72:e2:16:f8:74:f1:7d:7f:18:cb:df:e7:2b:e6:
bc:fb:1c:6e:35:04:23:0e:cb:3d:05:86:b1:7b:b4:be:88:a9:
ef:e1:32:49:f9:93:bb:3c:75:1e:e3:e2:0f:e1:0f:42:00:6c:
9e:2b:27:90:ec:44:82:d5:ac:8e:04:ef:d0:0b:29:a4:d1:c9:
9c:86:f2:9c:5a:2b:83:6f:9c:ac:4a:da:61:72:89:34:7e:39:
2f:46:9e:47:38:38:7c:3c:01:56:ab:2d:7f:9a:2a:bf:e2:8c:
e0:71:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:09 2026 by rpki-client