Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
File: ad363c67-ff83-46aa-9474-de02e382946b.roa (raw, json)
Hash identifier: ATfjgPGxNJU0LM2QmzGLmhk3kHHB9zysHO3JW79jafw=
Subject key identifier: 9A:6F:52:DD:A5:CF:BD:DA:F0:7F:49:C9:F0:63:23:B3:FD:87:73:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 708A0BFE7791B2F9D160A85DCC446AD416B19EBB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
Signing time: Mon 26 Oct 2026 04:50:53 +0000
ROA not before: Mon 26 Oct 2026 04:50:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8a:0b:fe:77:91:b2:f9:d1:60:a8:5d:cc:44:6a:d4:16:b1:9e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=99b47042084d4013cbff57913cfb6bab0936cdffd750ebc4c32e9f6e2a758a17, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:39:b6:40:ee:89:96:52:3b:c0:5b:11:04:
a7:21:88:b8:25:89:7b:1f:70:8e:72:13:0d:f5:b7:
78:bf:82:e9:09:8e:eb:55:ef:c6:a5:fe:ab:ac:b2:
e2:c2:36:94:78:a2:01:73:7a:f9:ff:77:9e:a2:72:
21:3e:b0:f8:5b:cc:ba:47:95:dd:9d:53:ac:20:ef:
dc:11:3e:3b:4e:9a:a8:48:02:c5:33:95:47:fe:00:
06:36:d7:64:0e:07:24:e8:84:6a:7b:3b:04:f6:a9:
cc:27:92:41:14:7a:cb:86:6e:ca:a4:d5:44:54:82:
f5:8f:87:d2:41:4b:0e:d8:46:e9:a6:34:aa:a2:65:
65:67:f7:94:91:fe:73:78:85:f1:7e:91:38:e5:cf:
2f:d6:78:89:a7:11:3c:d8:7a:86:30:86:33:ed:e4:
0c:d0:b7:f9:f6:10:a3:2f:11:f0:d3:51:88:e8:e9:
2c:4e:79:c7:4c:f8:aa:31:41:3b:92:ae:31:5e:46:
43:e4:ee:f4:98:25:06:92:ca:4e:43:76:13:50:f4:
e2:4d:e1:b8:7a:cc:65:f5:ca:bf:c0:5b:44:75:ce:
3c:d5:3b:6c:f5:43:c4:59:36:62:cd:aa:11:3c:d4:
9f:01:be:ca:3c:bb:78:34:5d:b5:06:39:d4:13:98:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:52:DD:A5:CF:BD:DA:F0:7F:49:C9:F0:63:23:B3:FD:87:73:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:b000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:05:55:50:b5:03:8b:3d:1e:20:e0:c6:c7:a6:07:47:9c:9b:
8d:4c:7b:81:80:4e:0e:dd:85:f0:e1:ed:b3:c0:7d:7b:0f:25:
60:a9:7c:99:9d:eb:9a:26:cc:22:c6:eb:c7:f7:94:01:48:69:
25:b9:e9:7a:82:81:69:53:20:0c:19:da:43:fd:d3:8d:58:8a:
76:de:be:9d:42:36:08:85:a6:7e:aa:e8:ae:df:75:21:2a:70:
c3:64:cb:af:a8:4f:1f:a6:36:4f:ad:dd:05:f3:9b:d8:8a:a2:
ce:78:1a:3e:9e:0b:a7:59:b6:80:a9:db:e3:d8:a1:cc:2f:b4:
7b:8d:20:54:08:7d:97:ff:1a:a0:72:9f:bb:23:61:56:37:d8:
66:22:17:77:9a:b3:8a:63:8e:28:05:85:d0:3f:59:f9:f6:31:
a2:e0:ab:dd:6e:45:7e:12:40:2e:69:88:04:b6:9e:0f:66:a6:
a7:8d:80:df:62:c8:32:e4:f5:71:6e:bc:06:f2:35:03:29:d1:
11:f9:8b:0f:56:b3:c2:90:47:f6:60:6b:a3:71:d4:8a:d1:cd:
49:7d:90:4e:5e:7f:8e:72:e2:d4:51:28:80:96:d9:c0:e8:ef:
6b:ad:18:75:e8:59:7e:d3:e5:51:cf:c8:a5:82:7e:1f:70:31:
9c:35:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:50 2026 by rpki-client