Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa
File: adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa (raw, json)
Hash identifier: 44+fiPYiFOnrV7g7RJn0zG9jmlFd5MPHn79w2XrEjIY=
Subject key identifier: 7E:89:14:7A:71:79:0B:C4:2E:FE:D1:8B:ED:4A:C3:8F:6D:C4:88:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25A042FC4867BADE400F080E7AA132003AB3B864
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa
Signing time: Sun 11 Oct 2026 15:10:09 +0000
ROA not before: Sun 11 Oct 2026 15:10:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:1080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a0:42:fc:48:67:ba:de:40:0f:08:0e:7a:a1:32:00:3a:b3:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=143ebb2008855dfde7d1bb0be7ac38dad5ce34fa336345e97230aad83ed510eb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:a7:c6:20:21:73:71:fd:ef:0f:1c:61:a1:
c1:c6:d6:09:88:ec:18:08:d8:dd:63:62:ba:fc:09:
7f:4a:df:dd:f6:b0:24:dc:1e:e1:d6:b9:cc:11:4c:
5c:07:1f:7b:1e:12:cd:96:1a:9d:14:8a:64:68:0b:
84:7d:7c:ef:d3:da:e2:61:4c:53:ce:43:25:cd:88:
ca:6d:e9:47:2b:b9:24:c2:63:d4:2d:ff:5d:9f:20:
04:5e:9f:db:b5:68:3d:b7:01:ca:dd:be:f7:94:f9:
b0:2e:b3:9b:85:70:16:cc:0a:24:2a:ad:a1:80:ec:
1e:5c:26:94:68:55:17:c3:09:e9:f7:71:22:1d:a2:
6a:d6:45:9e:b3:fc:05:91:7f:79:58:5c:fc:00:c7:
57:3f:17:53:10:99:f6:5d:88:bc:f0:b5:90:45:1f:
ad:0c:30:26:97:a0:f3:44:4c:73:26:e8:b3:66:43:
38:5c:3a:39:40:20:1a:8e:a9:15:24:34:75:c8:98:
2e:cc:05:07:ca:70:45:29:8a:06:eb:20:95:28:9a:
6b:81:ef:09:a2:47:84:e8:d3:9a:f7:9f:28:fa:84:
25:1e:26:8f:33:00:f0:4c:93:c8:70:94:18:a7:dc:
e3:e2:84:ce:84:eb:d5:5d:9b:29:97:d7:29:ff:3c:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:14:7A:71:79:0B:C4:2E:FE:D1:8B:ED:4A:C3:8F:6D:C4:88:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adb1351f-3dd5-4e4f-8955-1514f42e48e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:1080::/46
Signature Algorithm: sha256WithRSAEncryption
61:1e:c2:d0:30:9b:8b:e8:7a:85:6c:1d:b0:ee:15:f1:35:1a:
8e:14:31:ac:24:8a:ec:ba:19:5b:01:dc:0c:4a:35:c3:29:7b:
16:5a:32:98:0b:1f:c2:48:25:19:10:a1:9c:4e:1f:66:07:0e:
c9:d4:8c:e7:47:bf:90:7e:d1:89:73:31:c3:33:4e:60:48:38:
38:4b:e2:72:9d:96:80:a6:d6:d0:0d:e3:1f:8e:fa:8d:e8:a2:
e1:59:22:bc:b7:5f:d0:7b:b3:d6:85:b4:6d:f9:0a:e8:03:e0:
73:4d:53:8f:2d:33:87:3d:f8:61:f3:c1:3e:20:de:56:fe:08:
47:dd:89:53:75:90:aa:62:f6:2e:55:82:3d:98:2d:8a:29:11:
be:56:e4:95:4c:5c:37:90:a3:9a:81:f1:0c:e3:ca:35:bb:e7:
70:9f:1f:e2:d9:b4:f3:07:07:a2:49:fc:66:45:38:94:d3:c6:
f5:31:57:47:ff:22:1b:5b:fe:d0:25:90:eb:c7:7b:24:69:62:
b6:10:3a:2a:bb:f7:b8:b3:17:2a:1a:2a:cd:ef:de:49:a9:64:
4a:f5:9a:fc:34:79:dd:8b:42:4c:fd:42:73:5f:f3:84:39:e2:
83:e4:39:77:ba:05:1a:1e:a5:85:cc:41:ea:02:65:a1:d3:a0:
f1:88:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:27 2026 by rpki-client