Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ea9340f-dd25-4e30-a952-27ce8d9906df.roa
File: 9ea9340f-dd25-4e30-a952-27ce8d9906df.roa (raw, json)
Hash identifier: Zd86wTD0L3OOjiaQ1jGCKnx+Sue2FV18kWqFHslZUpY=
Subject key identifier: CF:4B:64:14:22:23:CC:13:43:9E:72:5C:B5:65:4A:85:19:3E:13:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03099C24343C9B67278FDE8FBCF412D552FD1B95
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ea9340f-dd25-4e30-a952-27ce8d9906df.roa
Signing time: Sun 18 Oct 2026 01:20:11 +0000
ROA not before: Sun 18 Oct 2026 01:20:11 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:09:9c:24:34:3c:9b:67:27:8f:de:8f:bc:f4:12:d5:52:fd:1b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:11 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=c2ba96c2ab5eb4da6bc757679c3983f2b29c0e3ad8f13e73f2c13eb3e801ff12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:ed:c3:96:7c:60:b5:00:bb:6b:af:4f:28:
d5:9f:23:15:86:0f:df:4d:28:54:8b:a9:99:4f:f4:
07:1f:7e:a5:5e:36:2f:d2:29:1f:ab:89:d8:40:bd:
4d:31:50:cf:9f:c8:a3:e7:0f:a5:66:08:ff:15:33:
b8:86:e7:e9:f5:42:6d:05:58:da:1c:ac:a5:5c:6d:
1f:0c:cf:fe:46:30:d8:24:0b:3c:1f:77:d7:ac:0a:
e1:c4:a2:2f:62:d4:f9:3a:6a:c4:c5:fa:03:0f:30:
df:60:85:59:2f:37:3f:08:f9:49:30:52:f9:ff:a6:
29:a2:20:95:b8:9e:d2:13:27:e9:99:af:a0:d4:31:
34:7e:a7:57:df:b8:bb:ed:26:25:ec:c2:d0:9f:54:
73:de:df:be:1a:4f:47:e0:8b:6a:ac:a4:9c:87:0d:
57:83:2f:67:a8:e1:6c:fc:61:72:f0:ce:5d:1f:56:
83:8c:b4:05:5f:4b:88:4c:95:d4:45:be:96:95:87:
ca:be:e9:44:71:f0:aa:96:a9:9d:3f:48:ed:11:d8:
57:2a:d8:07:27:52:d4:a3:06:c9:94:4f:5b:8d:1e:
c0:26:44:7d:2f:2a:f1:ab:ef:1a:39:49:e9:e4:ba:
d6:43:2d:fb:04:51:a0:14:a5:30:64:b5:4b:23:14:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:64:14:22:23:CC:13:43:9E:72:5C:B5:65:4A:85:19:3E:13:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ea9340f-dd25-4e30-a952-27ce8d9906df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b7:07:9d:52:f0:33:9d:6e:63:12:9e:11:8a:2e:c1:c6:90:86:
0e:2c:66:33:17:0b:fd:df:0a:f9:ea:9f:b9:be:25:7c:6c:ed:
cd:dd:2f:ee:3b:30:02:15:cc:a9:49:8b:02:16:ad:0e:fc:0d:
e2:08:57:37:a7:dd:54:8f:c7:83:24:76:08:8f:72:1e:20:6b:
26:c6:5a:78:3b:56:a4:b0:7c:5e:ad:cc:d5:fc:97:31:a3:c8:
d7:d2:cc:c8:c1:6f:02:95:14:20:de:f8:64:6b:09:39:44:eb:
92:b5:57:79:89:71:17:ef:6c:d0:44:b4:9a:be:36:8e:8c:45:
be:e8:c8:22:b1:e6:3b:80:47:eb:74:11:9f:db:4e:50:c0:2d:
0a:7e:19:cd:ac:6f:76:f6:02:c7:91:d2:0c:4a:9d:7b:1e:f1:
0b:0d:16:f1:62:69:6a:52:92:dd:2d:3c:e6:13:29:d7:29:b5:
46:97:65:ad:b2:37:61:d1:53:20:1d:d7:8d:8f:ca:53:00:d7:
3c:50:fa:39:53:78:b2:6d:cd:8b:39:24:45:ce:06:0e:6f:25:
f9:46:51:d6:35:e1:d6:70:83:14:46:4b:7d:e0:eb:4e:d6:8b:
3c:8d:55:db:dc:e2:20:e0:d1:60:ad:8c:db:a1:09:c8:6e:0a:
b9:f8:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:52 2026 by rpki-client