Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier: bhkOhJl8vcC8rk8KIny75HfrgSzub7m5TRaFD0RFFNw=
Subject key identifier: 27:FD:AB:A9:D0:87:A4:41:B5:E0:F3:96:B8:EF:65:19:8C:A0:D1:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DAA65FD647862ED0FF98035DE6CEA3EE4C559E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time: Mon 26 Oct 2026 05:30:34 +0000
ROA not before: Mon 26 Oct 2026 05:30:34 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:aa:65:fd:64:78:62:ed:0f:f9:80:35:de:6c:ea:3e:e4:c5:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:34 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7639743311f21cb286ccfc8dd554a52b75a604a7e1f01081da58fd718bf1b918, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:9a:51:29:bd:c4:f7:77:69:17:98:71:72:
63:81:3c:73:84:de:43:98:f2:54:6e:67:93:e5:da:
52:29:90:15:11:48:6d:8e:7e:a0:93:e4:fc:67:c4:
54:42:5a:a2:69:3f:ba:e7:f8:34:eb:2b:2c:5b:50:
a6:bf:ce:98:ff:bf:90:50:b2:23:fc:8d:9a:25:f2:
40:74:36:db:f1:4f:62:b8:cf:13:6a:ae:af:b9:a0:
c6:71:36:93:b3:4b:e9:4a:28:23:2c:d9:8f:1c:c6:
b1:73:1e:2d:d4:e7:94:79:95:8d:9c:56:62:87:79:
45:88:c5:24:c2:c6:84:3c:35:b4:27:65:85:51:aa:
87:f7:c6:2a:62:a0:ba:6f:19:36:7c:da:3f:e6:20:
11:3b:52:de:de:4d:26:a3:1b:50:66:d8:3d:6d:56:
4d:26:be:4c:0e:52:90:f8:8d:9d:7e:b7:fc:59:93:
e7:1e:94:a0:19:0b:db:e0:7a:d3:91:3a:5a:25:ff:
b4:b7:5e:2a:72:7f:fd:ab:35:4f:4e:68:05:26:b8:
bb:50:7c:1d:12:33:3b:a9:c9:71:c5:58:2c:df:08:
56:a1:0e:b8:10:80:7b:7b:f6:f8:8f:e8:52:b2:82:
0c:c5:00:55:81:c6:df:b1:e5:3b:ed:ab:10:29:52:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:AB:A9:D0:87:A4:41:B5:E0:F3:96:B8:EF:65:19:8C:A0:D1:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:9000::/40
Signature Algorithm: sha256WithRSAEncryption
12:c7:fd:81:c8:7b:65:fb:d8:33:ab:5b:66:ca:d2:0f:2f:1e:
ce:71:b4:d2:cc:32:20:e3:b2:ff:3a:87:78:83:ee:52:ef:a2:
a0:3b:64:b9:01:4b:1e:88:46:81:8b:ce:e5:ee:a3:d1:3c:aa:
50:84:4c:be:46:ea:29:8c:b8:8a:9a:70:50:30:d7:74:a5:48:
d4:44:ad:c1:d7:ba:84:59:8f:fd:42:b1:56:d6:6c:94:e0:c5:
2b:e3:74:c8:bb:73:bb:5b:9b:39:79:98:52:ce:b1:c8:ae:ee:
43:9b:0d:87:0e:bb:90:0a:73:ad:eb:7a:c2:db:c9:20:c8:36:
52:9a:88:ee:b6:33:02:43:cd:fc:c4:e1:39:23:53:99:a2:67:
51:c9:37:ba:c4:2c:ce:8e:1e:af:f8:74:4b:3e:65:a7:2d:29:
79:d6:67:60:a3:36:fa:ff:44:99:cf:2b:76:f7:fa:65:d8:85:
43:a7:ce:0c:a0:7a:ca:0f:98:c9:a9:03:81:a2:f9:ad:07:66:
f4:50:a6:df:16:55:fc:30:b6:0a:5e:0a:76:7f:af:b5:a7:e3:
e2:17:a6:13:b1:d0:c0:c7:76:0e:da:01:7c:e9:68:df:b7:3f:
28:8d:04:f1:b2:f3:d9:78:24:5f:ee:4c:ed:64:b6:aa:05:31:
84:96:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:59 2026 by rpki-client