Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
File: a039a10b-545b-441d-bef2-b67325de50a1.roa (raw, json)
Hash identifier: MU4y4uyxP1NwiALhLOmp3FgqtivR2Lk7qtwbbg9IhCw=
Subject key identifier: B4:F3:2A:00:78:A3:EF:6B:8B:0C:C2:09:50:F5:72:59:59:7D:A0:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5598E5A7F700ED5BD8C9297F14B18505BFC80CE3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
Signing time: Mon 26 Oct 2026 04:40:09 +0000
ROA not before: Mon 26 Oct 2026 04:40:09 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:98:e5:a7:f7:00:ed:5b:d8:c9:29:7f:14:b1:85:05:bf:c8:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:09 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0aced2c7fcb735420cca57da8baae3833fcbbf81dd1dcd9a027b95ba8621ca16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:46:10:34:ab:bc:7e:d7:e1:ea:a3:f7:25:
fb:13:de:87:29:de:8e:25:6f:7e:04:72:29:d7:df:
8c:15:f7:6c:90:4f:b6:d1:0f:79:dd:93:36:ab:2b:
07:f4:8b:a9:fe:fa:11:ec:51:77:1e:36:41:ab:d1:
ab:9c:cb:d4:8b:ea:81:2f:86:95:68:4a:b7:01:ab:
38:a3:b4:ce:b8:94:06:4f:c5:40:b8:4a:cf:b6:75:
7d:d9:09:cd:fb:d7:f0:8b:3d:d8:5a:07:85:d0:ae:
b8:d3:f2:8c:6e:11:fe:04:58:d3:d0:ce:35:de:62:
39:6e:db:19:1f:1e:d0:d9:c0:a9:a7:40:58:e5:7b:
45:00:0a:d2:fb:7d:98:46:fa:ad:fb:61:df:3c:b4:
54:36:1e:3d:8c:6c:74:6d:10:99:a2:74:82:ec:99:
6e:71:28:3f:3b:1f:63:8a:bc:d4:b7:d1:5e:84:82:
44:e5:1e:03:27:b6:ec:3b:c2:28:86:ad:74:b0:44:
b1:c2:1a:e7:ea:18:dd:d1:b0:88:a2:8c:f4:52:a0:
a7:e3:79:4d:06:b9:4c:5d:85:84:11:13:dd:17:33:
90:7a:1a:3a:01:75:cf:ad:4c:e7:7f:35:6e:0e:d7:
4a:89:d1:14:04:a1:e9:0f:bb:6f:17:63:e0:2f:47:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:2A:00:78:A3:EF:6B:8B:0C:C2:09:50:F5:72:59:59:7D:A0:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:6000::/40
Signature Algorithm: sha256WithRSAEncryption
05:11:7b:4b:39:f1:2b:94:b6:89:91:bf:66:bd:84:af:76:33:
89:fe:87:0f:fe:24:39:ba:5f:4c:3b:6b:4b:3d:b7:6b:06:ac:
53:0e:bf:aa:07:60:c9:1e:bd:40:c0:e7:44:42:d4:71:15:f2:
f5:08:38:c6:84:f6:e8:33:f8:97:c5:2c:cd:b6:9e:28:38:3b:
de:ae:d6:4a:50:ea:e2:5d:68:2c:3f:d6:9e:ce:ad:8c:8b:7b:
e0:a4:ca:f6:42:fa:8f:ef:14:a1:39:40:53:b9:2b:46:ec:fe:
a4:c0:e4:49:9e:03:54:7a:f0:53:bf:7b:d8:cc:85:78:d4:35:
cf:61:cc:c7:7d:72:4d:eb:0a:2a:25:c4:72:33:44:52:22:88:
cc:ad:41:c3:38:f2:73:57:5d:bb:0c:d1:4a:cb:b8:11:f4:78:
e8:0a:fc:44:f2:74:37:84:c5:d9:1e:a8:78:b4:fd:ed:9e:d8:
8c:6c:1c:be:2d:c8:4b:be:48:0f:72:5c:57:1a:ef:41:ab:c6:
10:e1:f8:94:14:b1:65:e8:22:c6:3e:68:76:b1:23:6f:0d:43:
8f:6d:c0:d1:b4:91:5f:46:3a:03:ee:61:2f:78:e0:b2:63:33:
e9:33:4c:a6:fa:48:8b:f1:f0:53:81:d9:6d:53:49:96:d3:eb:
21:38:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:15 2026 by rpki-client