Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
File: aecc6242-1099-4fb7-92f7-993a2622e087.roa (raw, json)
Hash identifier: ar2cXyr2xIivF6zC4Kr2rJ6w6i/VavnWXyVn8ZZg3X4=
Subject key identifier: D1:12:E6:BC:DE:B6:B8:23:6E:27:49:68:17:FA:DE:BA:F0:54:48:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 594A9C811AEADBA766953E29EC4EAD67705BC5A2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
Signing time: Thu 29 Oct 2026 01:02:30 +0000
ROA not before: Thu 29 Oct 2026 01:02:30 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4a:9c:81:1a:ea:db:a7:66:95:3e:29:ec:4e:ad:67:70:5b:c5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:30 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=50073c9197f1a7e3bb2b9927ace4304181256f78ad4fd54d4558be8953b26c2c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:f1:e3:9a:a9:c3:7f:aa:5b:df:64:08:20:
67:61:1d:bb:08:56:32:95:96:e4:f7:f3:60:a2:78:
2b:f9:5b:31:9e:61:14:4f:b5:94:77:bf:86:55:b5:
08:51:40:6c:00:53:b1:ef:ab:5e:7a:8b:2d:5c:04:
ef:1b:59:cd:24:6c:80:77:83:4f:16:75:ae:27:d6:
9b:0b:98:e9:2b:0d:0f:6e:8f:cf:2a:d9:e8:64:16:
0a:51:93:e1:04:a4:07:34:bf:a9:0f:85:7e:ff:b0:
e4:f1:d7:57:0b:c5:1d:cb:15:99:ba:7a:6b:58:cf:
91:e8:da:22:dd:29:72:9a:27:dc:07:e4:17:a4:44:
3d:74:c1:97:f2:3b:fe:a6:1a:fd:c0:eb:4d:0c:44:
8a:4c:84:9c:4e:54:63:fd:a5:5c:66:40:57:ab:06:
9f:db:c7:ec:f3:5e:dd:2d:9f:45:11:44:be:64:52:
51:f8:ee:85:11:f1:ea:2c:5b:50:5a:48:df:f5:6e:
24:ac:83:77:7a:76:ff:80:a6:6e:6f:31:b2:e8:43:
89:9a:d9:b0:48:a8:b7:4d:e1:27:c3:32:34:ac:68:
87:13:c7:62:16:56:8c:0b:4b:03:b4:b6:fc:0e:d4:
30:ae:bf:07:d4:0f:28:24:3b:15:56:3f:1f:6c:4c:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:E6:BC:DE:B6:B8:23:6E:27:49:68:17:FA:DE:BA:F0:54:48:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aecc6242-1099-4fb7-92f7-993a2622e087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:3a:44:c1:ae:dd:b2:0c:5a:99:ea:74:4d:51:d4:7d:dc:3a:
3a:bc:16:34:9f:e1:42:10:2d:4c:f9:3a:60:30:f4:a0:31:85:
85:97:61:ab:68:72:5c:b7:5b:e2:da:49:0e:c1:f0:85:66:8a:
d8:97:e6:6d:89:ca:22:b5:45:f8:91:cd:b4:e8:de:50:40:47:
5e:3c:83:c6:fe:b8:9b:cd:44:e8:0b:ad:23:6b:7a:b8:dc:ad:
2b:18:80:99:51:90:a0:3e:f0:9c:05:ae:8b:74:cb:df:66:a6:
03:13:6b:48:50:d2:c5:24:6e:24:9e:7d:5a:fb:64:60:6a:1b:
ea:3c:49:81:5e:d5:45:07:93:c6:c4:80:68:72:ca:e5:ab:77:
b8:5f:aa:c2:fd:e0:21:8c:29:a0:e3:8a:a8:58:c5:65:64:c6:
12:24:ef:7f:f6:1a:bf:50:0d:3f:fa:44:f6:0f:f5:b6:e8:70:
26:6f:85:ad:f3:8d:58:43:6b:85:88:36:7a:bd:ab:ea:94:ee:
08:92:6c:ab:39:a1:76:a4:f8:23:81:17:26:55:90:2e:f1:7b:
d7:d2:79:88:bb:8e:d0:a7:7d:c3:37:8d:39:19:10:20:3d:5e:
93:50:f3:55:63:c5:50:88:9f:eb:e9:23:5d:e5:13:98:af:87:
05:41:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:51 2026 by rpki-client