Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
File: 98ae6903-6674-49ca-b677-ce1e731619a3.roa (raw, json)
Hash identifier: D+/7rd/DSx5MSmdJORbhajI71lGT90N00fUJ5YXF7C4=
Subject key identifier: 9E:A5:D5:91:BD:29:C3:FA:C1:0A:1D:83:F1:F7:70:D5:6E:2C:B9:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4ACDE87EB96200DA9844157AA58E50D0AB9C8662
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
Signing time: Tue 27 Oct 2026 00:02:22 +0000
ROA not before: Tue 27 Oct 2026 00:02:22 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:cd:e8:7e:b9:62:00:da:98:44:15:7a:a5:8e:50:d0:ab:9c:86:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:22 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=d4a33cb5d19ea2271535100445eed1ca15e91cb50ddffb79f80fbe7a0f91043d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:f5:3d:f3:a1:2d:f4:4e:67:ee:45:6a:14:
5d:91:0c:74:4c:a0:e5:d2:9b:d5:42:74:ce:24:5a:
fc:ef:a1:67:0f:8d:81:e0:f9:04:9a:5a:76:62:98:
73:0a:b2:99:d1:a3:de:ea:2b:e4:a9:d9:11:12:ea:
66:9d:07:f2:f8:e4:83:98:55:4d:5e:aa:d6:2c:9a:
4d:8c:16:a9:dc:8b:cd:58:9e:ce:68:2f:37:15:c6:
20:98:76:dc:67:26:86:96:82:ea:f9:e8:ee:0a:c4:
86:b8:3b:97:0e:5c:8d:b7:64:40:d4:0e:47:49:b2:
fd:37:3a:a7:dd:12:d1:a1:99:cc:ed:3a:91:a3:9a:
6e:c6:fc:6d:3a:0c:25:39:d3:26:58:11:06:4c:bd:
97:90:6f:89:80:1a:c3:39:aa:71:5e:cf:3d:18:90:
87:d3:34:bf:7a:91:ff:37:a8:44:c8:ba:a4:3e:bd:
03:74:54:cc:c5:cf:c2:3b:4f:75:e7:42:5e:fd:b4:
6a:b9:18:f7:3d:e2:44:6d:ea:1f:26:2a:d5:1f:ba:
15:45:6b:7e:be:a5:1a:93:e8:6b:07:c4:c1:b0:6f:
2a:4d:9f:a6:a8:04:b3:66:3d:29:71:3b:e5:43:43:
d0:3f:83:7e:dd:09:14:ba:60:cc:4e:5c:ce:07:8c:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A5:D5:91:BD:29:C3:FA:C1:0A:1D:83:F1:F7:70:D5:6E:2C:B9:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1c00::/38
Signature Algorithm: sha256WithRSAEncryption
43:f8:c0:ff:1e:c2:89:39:f9:67:df:bd:1a:17:0e:36:f7:47:
c4:89:76:c9:2d:40:e3:04:c9:0a:cc:3b:e2:51:c7:9c:cf:1b:
89:26:55:7a:c9:8d:fe:04:53:ae:03:fe:34:a3:cc:cf:1a:35:
97:37:47:ca:71:72:1c:ac:73:9b:3a:87:07:96:75:20:28:4c:
b4:b3:13:b1:95:15:1b:ef:6d:80:f4:31:df:ce:14:dd:bc:bb:
f3:b5:b0:f8:cb:4c:c4:5e:8f:fb:0a:f0:d1:c9:e5:03:53:56:
53:bb:05:16:e3:fa:a8:88:df:a6:ff:1a:a3:fd:73:4c:00:f9:
a5:a8:79:09:d5:6d:24:5c:ed:c2:a2:f3:fd:f2:f9:b5:f0:84:
4a:4e:42:84:a8:49:37:9d:cc:c0:9f:f5:f7:3a:8a:a2:d3:60:
12:10:be:6e:fc:d7:f2:b0:8e:a8:3c:97:ff:be:bd:ce:3e:fd:
ee:ce:0a:59:04:23:89:58:66:59:eb:35:2d:94:80:a8:7d:f4:
05:6e:bc:e9:1a:c8:0c:77:0f:70:9a:3a:f9:5b:0f:80:b5:06:
bb:20:20:d2:a6:27:3e:7d:66:c6:8a:45:1e:cc:4c:21:ef:33:
fb:81:09:ca:e6:af:1f:92:84:dd:8c:2d:70:6e:ed:1c:b2:0c:
c6:bc:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:05 2026 by rpki-client