Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbeedab-21fb-4993-b3ce-b753ba293d00.roa
File: abbeedab-21fb-4993-b3ce-b753ba293d00.roa (raw, json)
Hash identifier: 6OXm0zWO8tcxI3ibeNXBJ4qG7lIyrDV/fcJVf+hld2c=
Subject key identifier: 9D:87:F9:5B:88:7A:64:2F:2B:34:E6:8D:6F:6B:77:87:64:05:1B:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 179B2024514EE8179EEEF5FD52B2806F960F3A1F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbeedab-21fb-4993-b3ce-b753ba293d00.roa
Signing time: Mon 26 Oct 2026 04:40:52 +0000
ROA not before: Mon 26 Oct 2026 04:40:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9b:20:24:51:4e:e8:17:9e:ee:f5:fd:52:b2:80:6f:96:0f:3a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=437e8bd8aec8f70717a32c19d92dce8d56874f453007ceefdb6552a4550c8230, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:70:4e:1f:5b:86:21:c9:f9:4b:b7:b3:16:
75:ea:1b:e3:5e:91:45:2b:55:89:c1:a9:f1:4a:69:
9d:52:8c:cc:0e:a4:23:79:29:2e:99:fb:bf:8f:0b:
42:db:cc:1b:65:08:c0:b4:25:54:99:28:0f:89:17:
54:95:cb:5c:b8:f4:28:9e:aa:42:3a:a9:0e:cd:ef:
a8:ae:ab:d5:ad:67:08:d6:a2:f2:7a:31:59:cf:12:
6c:28:4d:05:01:6f:8a:6d:da:25:4e:ae:12:5a:d5:
70:da:be:31:70:bd:a5:5e:63:55:51:8a:42:34:c7:
17:2d:0e:41:e7:51:ae:4c:16:0e:0e:14:32:c3:37:
2d:92:02:51:91:b5:e8:a4:df:b2:42:f3:ac:83:6f:
0a:66:3c:89:f4:db:04:61:cd:b7:51:12:1b:86:ef:
45:05:c9:5c:46:f5:46:fa:18:72:41:77:58:58:6b:
87:93:5e:65:aa:34:68:73:97:22:0b:e7:d7:57:15:
16:00:4e:de:39:bf:5b:64:4b:39:62:e7:d6:16:f8:
19:8c:31:08:be:52:d5:99:9d:ef:7c:a2:7b:84:ff:
c6:61:d1:d1:80:94:d3:1c:19:46:9b:62:3b:d3:b0:
1e:de:05:8f:9a:76:59:02:a2:9e:6c:1f:30:2e:7c:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:F9:5B:88:7A:64:2F:2B:34:E6:8D:6F:6B:77:87:64:05:1B:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbeedab-21fb-4993-b3ce-b753ba293d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:e000::/40
Signature Algorithm: sha256WithRSAEncryption
07:4f:fd:c3:d6:c2:48:6a:db:70:f9:8e:a1:4f:04:21:61:b5:
40:e8:25:3c:58:df:e0:d7:4d:5c:2e:2b:c7:88:9f:ee:58:2a:
80:eb:01:97:c8:f5:11:e9:a5:07:22:74:11:0d:a6:8c:df:8f:
5c:e2:15:2d:b0:52:62:5b:04:79:58:58:72:e5:db:bc:15:9f:
3c:75:60:86:87:bc:3a:06:94:d7:16:20:81:68:50:8a:19:56:
29:a3:51:bd:3e:b9:72:fd:9b:67:77:ee:dc:49:b5:a3:07:7d:
d9:59:cd:bf:4b:7e:69:f3:89:73:94:b8:91:7b:93:78:c2:d2:
64:4e:1f:08:43:ae:a5:38:69:da:33:26:6e:7e:34:64:d0:b8:
30:66:ec:8d:b7:62:44:a1:a0:41:66:84:90:27:e9:75:32:65:
85:e6:13:25:5b:59:18:7d:5c:25:e5:8d:5c:8c:14:19:18:ca:
3b:14:42:d3:03:12:9f:cf:25:9b:80:ad:54:bf:ff:83:15:a9:
dd:89:64:dd:75:f6:ee:0d:ad:1f:b3:fb:8a:28:03:25:75:e2:
4b:31:96:aa:30:1f:86:4b:e5:74:9d:4b:9e:c5:bf:bc:8f:30:
8d:af:a8:92:29:13:55:ab:e0:c1:a4:9e:b5:2b:8c:fc:52:72:
28:63:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:00:34 2026 by rpki-client