Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa
File: 9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa (raw, json)
Hash identifier: rBHQpoap5Go+2iG5sLXBrQZOlchy2GyEXKkxGvpJhk0=
Subject key identifier: 98:CA:1D:BE:36:E0:F7:29:F5:9B:06:00:53:C5:36:33:EE:65:A2:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 654359A0B11AAC19B9CEF456EF675FEC1795061D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa
Signing time: Mon 26 Oct 2026 04:40:40 +0000
ROA not before: Mon 26 Oct 2026 04:40:40 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:43:59:a0:b1:1a:ac:19:b9:ce:f4:56:ef:67:5f:ec:17:95:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:40 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0fd8ed2f027c85c28a64773d85401e8f76a750a1d72dd6d17c7d1f454cbe612e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:5d:f0:39:74:ce:29:7b:65:89:81:fc:d0:
22:d4:2a:31:3d:75:a1:d5:c2:60:39:a6:aa:71:d3:
74:4c:e7:5a:d7:6a:54:7f:c4:c4:d3:4e:24:d8:79:
73:82:7b:c0:af:40:fa:47:b6:26:7d:42:5f:ee:29:
1c:e3:fd:3e:95:9e:0a:48:ee:c4:e0:1f:8b:a1:ab:
d4:58:bf:f8:53:9e:1e:6a:6a:55:fb:f2:c2:6c:6b:
37:5a:d6:b2:c6:32:24:e6:f9:75:58:bf:1e:df:dd:
ef:64:77:6f:0d:f5:87:41:79:5a:05:00:7d:bf:d0:
58:c0:be:3d:ba:a5:42:fb:41:61:7a:07:52:2f:35:
b9:79:54:40:77:69:0e:4b:e1:7b:59:89:6e:9c:50:
87:42:4a:c8:c5:b7:77:9b:29:7d:2d:53:6c:bd:ce:
ca:48:43:dc:3e:f9:22:ee:e3:8e:1a:5b:1e:31:5b:
a6:03:5b:9e:a4:af:50:d2:fe:60:50:77:ce:e5:b2:
12:4a:35:e1:e8:e2:56:05:f6:27:28:4d:13:7b:28:
cc:77:c1:8c:d4:5d:47:50:01:47:60:c9:23:31:b4:
bb:ec:9d:bf:2a:14:1b:2f:f2:62:8f:42:6b:87:d8:
dd:94:4b:a9:08:cb:3a:f6:0e:e5:f6:bd:0b:a3:cf:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:1D:BE:36:E0:F7:29:F5:9B:06:00:53:C5:36:33:EE:65:A2:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:6000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:6e:2a:01:cf:14:8d:2d:62:f0:f6:ac:2d:a0:98:08:0e:e6:
54:5d:44:4c:53:0c:3f:39:01:cc:52:53:86:55:73:74:e6:dd:
41:a1:f9:14:5c:a2:04:0f:4b:73:50:47:70:76:40:b4:bd:30:
4f:68:02:77:e6:61:ae:a6:c5:e0:dd:99:1f:8b:7f:34:11:f5:
eb:0e:d2:97:fd:86:ea:45:c5:db:ff:f1:1b:45:06:e1:98:0b:
ca:54:f3:aa:87:dc:2d:6c:e3:52:20:e4:dd:80:e6:4f:06:b9:
e9:d6:95:01:f6:84:df:53:35:6d:4e:ba:2b:8b:b8:b8:7c:e1:
7a:07:b5:60:85:29:3f:6f:50:fa:b4:35:bd:40:e3:f7:4f:83:
66:db:9d:34:79:b9:17:8a:e1:35:50:58:fb:61:3f:de:7d:0a:
3e:f4:ae:24:ab:af:e5:9c:42:63:b8:3e:dd:7f:9e:b6:4d:72:
0c:a6:bd:a8:23:43:12:34:0c:d0:c7:11:42:c1:0e:52:e4:69:
3c:2a:af:bc:ba:73:95:9f:eb:99:e8:0c:ed:77:9a:11:45:c7:
97:d8:37:94:d9:c4:1c:e2:6a:f0:3a:c1:e0:20:de:74:45:2a:
52:b9:03:52:ea:ce:98:80:30:11:93:18:c0:2d:4a:1f:26:e3:
d4:35:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:17 2026 by rpki-client