Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98fe2ee0-5abd-4efe-9a8e-eebf18311d9c.roa
File: 98fe2ee0-5abd-4efe-9a8e-eebf18311d9c.roa (raw, json)
Hash identifier: Sc9SWGdOrK3DyArMNSEBo9P89tyv0Qq4fUblb51m3Yw=
Subject key identifier: CB:2C:3B:ED:1B:FF:B5:08:F6:13:2C:03:79:8F:6D:B1:C4:56:C7:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E60F43CC6C5B3C298BEFE698343793702735F03
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98fe2ee0-5abd-4efe-9a8e-eebf18311d9c.roa
Signing time: Thu 08 Oct 2026 17:24:45 +0000
ROA not before: Thu 08 Oct 2026 17:24:45 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:f4:3c:c6:c5:b3:c2:98:be:fe:69:83:43:79:37:02:73:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:45 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=613387f5da8d0128e4e8ebb57dbfa8f3f5050b06c9cbbf7b07c4d04908f0435d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:25:43:8a:b1:92:ad:a8:23:69:92:e4:98:
07:0f:63:ae:93:1c:0c:c2:17:1f:f1:c2:73:fa:f7:
55:34:e8:d4:9b:1e:1b:48:a8:6f:13:c1:b9:88:2b:
27:87:90:ea:b3:14:3f:e5:c5:93:7d:b8:f4:d8:e6:
27:52:2d:ff:c8:bb:d0:04:c7:0b:24:6f:61:20:ce:
37:a4:51:3a:b4:b7:0c:8c:7b:65:6e:25:a2:33:01:
83:75:f3:ca:a4:20:c2:de:70:27:b6:be:93:be:b9:
66:31:19:25:73:15:d6:ab:df:f7:a0:1d:cb:03:61:
49:4d:78:06:49:98:6b:0e:83:db:5a:c6:b1:49:db:
e8:31:f2:03:76:72:18:36:67:cc:5e:b1:66:da:52:
07:96:c4:24:dc:da:ff:0d:9d:10:67:8e:ab:a8:c4:
e0:7c:20:7d:c1:5a:f2:40:e9:82:95:08:65:43:73:
6d:c7:fc:df:93:0b:76:a1:71:67:76:f6:51:16:e9:
6f:b8:ba:e1:31:48:62:31:fa:cb:68:7e:57:ed:e6:
c8:ba:11:30:f9:1b:42:e4:f6:93:4a:e2:26:dc:e1:
85:f3:56:24:c6:0a:95:da:6f:02:17:c8:a2:c3:6d:
19:99:b5:f5:12:82:9a:f7:d7:7c:83:d6:b1:14:9f:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2C:3B:ED:1B:FF:B5:08:F6:13:2C:03:79:8F:6D:B1:C4:56:C7:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98fe2ee0-5abd-4efe-9a8e-eebf18311d9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:9000::/40
Signature Algorithm: sha256WithRSAEncryption
00:15:2a:09:34:76:ea:63:5a:ba:fb:46:35:ce:8d:ce:d5:3b:
0c:34:36:50:ad:b0:8c:00:b8:f8:71:9f:39:21:98:9c:d5:5f:
fc:df:16:07:ff:d9:ef:a6:c4:fe:de:65:e7:c2:e6:2d:4e:3b:
8a:a0:a6:31:1f:da:1c:50:76:d1:ce:d9:5d:3c:7a:40:e1:a1:
1e:86:e3:2f:bb:fb:c5:07:28:ac:65:c5:db:f9:7d:41:94:bd:
cf:8f:32:04:f5:48:11:75:21:54:78:1a:26:2c:fe:51:15:2c:
61:f0:b6:37:80:d4:fb:92:62:80:2d:d8:76:3e:02:8e:33:ae:
da:f7:aa:2a:bf:8d:57:cb:4d:6b:be:b2:93:40:88:d4:42:32:
28:59:15:1e:3f:dc:0d:07:bb:38:ac:18:12:3c:92:77:c2:cf:
e1:85:59:78:a9:f1:93:34:73:1c:f7:18:a2:45:6d:e8:84:eb:
7b:3c:73:9f:37:7f:7e:8e:61:57:9c:ca:50:ea:62:0f:8f:8f:
19:29:3a:6f:19:49:e9:b9:3a:8b:24:ac:aa:8a:1f:a3:eb:d6:
3c:1a:9b:78:5d:9f:89:f5:65:ff:59:73:a3:ff:7f:52:6d:53:
f5:08:a5:c2:79:b7:29:a1:e6:28:89:b9:60:4f:a4:24:58:d5:
84:2a:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:02:16 2026 by rpki-client