Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e42a1d4-d817-4bff-acce-dc870f3fc8d8.roa
File: 9e42a1d4-d817-4bff-acce-dc870f3fc8d8.roa (raw, json)
Hash identifier: qT8KXGFvOlJgaHNxXnDpYBY75mspZdZLTu6YueAMPyg=
Subject key identifier: 23:A7:4C:8D:84:28:CD:3E:19:53:80:46:C6:0E:07:1B:E0:82:7C:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D1F04B1FB90DDC2A500C9857A4D1F2B3BF92659
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e42a1d4-d817-4bff-acce-dc870f3fc8d8.roa
Signing time: Thu 08 Oct 2026 17:24:35 +0000
ROA not before: Thu 08 Oct 2026 17:24:35 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1f:04:b1:fb:90:dd:c2:a5:00:c9:85:7a:4d:1f:2b:3b:f9:26:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:35 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=af4fac032e7bbcf6eaa2f61e9c8cc1dca9c3762a7b8e7cebfc937050d7670cf6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:23:46:9d:6b:55:0c:d0:b9:25:46:b7:01:
c9:f9:f3:85:ca:c1:d7:ec:c2:8a:e7:90:dc:90:37:
70:85:08:bc:2e:92:f2:67:95:65:3a:51:a4:6e:82:
7d:80:cb:46:9c:0b:be:2b:ac:bc:04:b4:f6:2a:29:
e7:32:df:8e:6b:81:ed:fd:70:0f:f8:0c:37:b8:08:
3a:ae:dc:34:e1:d1:f2:92:9f:78:c9:92:c0:64:97:
e7:1c:27:4b:6a:b1:ae:96:89:dc:99:08:6c:d2:0d:
c5:7c:aa:f7:56:76:7e:b1:f3:0d:12:27:ee:07:f9:
94:c5:1c:a1:ef:f5:3a:44:32:84:73:6f:0d:07:30:
c7:8d:97:05:95:b7:6f:2e:42:1f:dd:9b:7c:02:44:
8f:61:11:b4:05:a5:b6:9d:a2:a9:95:b4:e1:8d:a0:
10:c8:ba:d6:3f:a3:d9:c7:17:6a:d3:de:dd:6e:cc:
27:73:01:15:74:cf:53:62:ba:dc:56:41:c0:15:6f:
a5:18:49:ed:9c:6c:18:24:c4:67:28:2b:58:eb:3b:
79:fa:70:6b:84:9a:82:ca:36:40:dc:38:94:84:54:
30:da:b5:30:82:44:ea:9e:7c:c8:e1:92:52:eb:52:
ad:4d:5e:00:fc:5b:4a:a1:7b:e7:0c:d1:a2:26:4a:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:4C:8D:84:28:CD:3E:19:53:80:46:C6:0E:07:1B:E0:82:7C:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e42a1d4-d817-4bff-acce-dc870f3fc8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:5000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:72:23:12:b8:d5:0e:fc:50:43:70:d2:15:c8:65:9c:1a:73:
a4:01:13:f3:44:7c:68:83:61:23:f3:b1:27:60:e5:99:1b:87:
ac:47:18:04:52:81:4a:4f:1b:35:04:9d:21:cf:cf:cc:96:b7:
9c:2a:52:39:04:fa:d1:9e:55:02:9b:30:2f:8b:5b:3e:ff:bd:
ac:99:65:5e:86:31:dd:94:66:6a:15:bf:fa:e7:38:6c:c3:6e:
f8:8e:48:f9:5a:76:c3:68:12:c1:e5:dc:27:0e:5b:6d:9b:12:
e0:d5:e9:29:08:d3:a4:f6:dd:85:1d:b2:9c:97:83:b7:28:1e:
87:bd:b2:5a:c4:19:12:d8:5a:cd:13:66:f6:22:fc:7b:9b:6c:
61:d6:0a:49:ed:46:eb:33:97:39:5d:d9:30:2b:41:ae:00:f0:
f7:9c:30:00:4d:36:3b:c1:e5:69:2c:42:37:e5:e1:81:03:e8:
d0:e6:bf:d5:13:ea:01:39:d1:0d:1a:8d:0f:18:62:f2:53:3c:
ac:03:23:8e:f9:c0:87:b5:f7:8b:5a:4a:3d:40:5a:de:65:a3:
da:7a:73:d7:02:67:c9:a8:84:99:3e:68:30:02:96:fe:55:33:
f7:31:13:b6:b9:eb:74:3f:0b:98:a0:fb:73:54:ae:02:13:15:
4c:71:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:32:39 2026 by rpki-client