Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
File: a0c32c3b-d8db-4386-9538-641f27723456.roa (raw, json)
Hash identifier: yKsqWWFCE0dYI4uKpAW1NRgdHwnmqRM62+AiToomRmc=
Subject key identifier: 43:71:B6:EE:8A:1B:EB:66:1A:73:C6:46:51:B6:C6:A4:24:E4:63:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29B17B8B476F7627D6C22893792684FB3B8AA8A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
Signing time: Thu 15 Oct 2026 03:20:11 +0000
ROA not before: Thu 15 Oct 2026 03:20:11 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b1:7b:8b:47:6f:76:27:d6:c2:28:93:79:26:84:fb:3b:8a:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:11 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=2f05d72f20f7b8d6fe00e2c9518504b4f1e550aeaedcec66f6600c6e00703859, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:b6:a6:3d:f8:b2:74:11:12:4c:22:31:a5:
06:20:b9:99:3a:41:88:75:85:b8:09:f4:85:49:92:
e2:c6:f6:d1:12:68:02:2b:a4:d1:83:cc:e2:d1:f9:
c0:39:a8:92:2f:86:52:85:19:28:9f:ad:57:67:bb:
83:e7:10:31:3f:c1:35:ec:0b:e0:dc:88:ec:a5:bf:
c7:b0:8b:8b:28:0b:b0:44:f1:63:f8:f9:4f:89:bf:
ca:77:70:2e:19:e2:2d:11:86:73:69:02:21:6f:10:
e6:d7:13:4f:39:60:b0:0f:33:3a:ee:a5:7e:30:8a:
4e:1b:a8:fc:15:05:a3:7c:c9:9f:7b:cf:8e:17:e4:
a3:ce:b3:f6:5f:f2:74:0e:55:78:1d:c3:43:0b:99:
4f:4b:0c:23:65:89:7c:69:7f:11:be:85:3b:f4:53:
03:47:07:ba:b7:41:2a:6e:d7:0d:b2:3e:a3:26:d7:
c8:7a:c7:ff:ae:38:f2:99:28:d0:29:1b:ce:40:f6:
36:41:b7:36:e0:17:e2:16:7c:e5:72:8e:d8:2e:4d:
a4:58:76:c9:05:1c:ff:c8:38:79:f1:95:9d:ec:a2:
57:55:5c:a5:db:46:82:a9:15:4c:2b:d8:ab:b1:59:
53:6c:79:f0:d2:10:e8:6b:28:f9:fc:b1:5f:31:e5:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:B6:EE:8A:1B:EB:66:1A:73:C6:46:51:B6:C6:A4:24:E4:63:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5000::/40
Signature Algorithm: sha256WithRSAEncryption
3f:83:a6:bd:36:f8:01:05:0a:1c:22:dd:eb:a9:7d:9f:d1:a9:
f0:6a:83:56:1c:7e:d0:7c:32:aa:d5:27:59:6b:31:be:0e:6a:
fb:7e:f3:8c:06:03:8a:fa:10:8f:66:ad:67:3c:66:44:d3:d1:
e2:3d:85:3a:b6:26:36:76:34:f7:4c:c6:50:5e:3a:74:19:fd:
d5:3d:3a:f7:8b:a0:df:e0:a0:27:be:12:1f:f2:03:66:ff:b9:
f0:0e:5c:cd:84:d4:78:e8:0d:2d:c7:53:d4:e8:5c:00:10:b6:
ff:bc:4f:a5:56:88:d3:f8:c8:f4:19:09:07:d8:fc:f9:f6:c9:
46:49:8b:0a:0b:79:08:da:70:d1:5e:ba:4f:99:ec:1d:cf:c8:
d8:95:dc:8c:dd:d9:3b:5d:d8:8b:0c:70:e6:56:77:98:ed:a2:
b4:70:8d:b1:26:b2:0c:a4:68:20:4b:ec:4d:78:af:1e:c6:ea:
29:e3:31:ae:b0:87:09:7b:41:17:7e:32:dc:47:c0:0c:9b:44:
db:c0:6a:f8:cd:f3:13:8f:d5:00:56:4d:6b:43:b7:64:4a:b2:
c4:21:6a:0a:e7:f3:fb:92:fb:77:4a:1e:74:df:8d:2c:7a:f4:
2c:f7:0f:54:dd:3a:e6:c8:da:89:eb:e3:95:3f:b4:7b:e6:2d:
b7:1b:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:22 2026 by rpki-client