Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b01a5a70-e8bc-4c88-8f86-597d891eae77.roa
File: b01a5a70-e8bc-4c88-8f86-597d891eae77.roa (raw, json)
Hash identifier: SEwkl50YvE0r7BzMz0mlSmwMQO0Xl1kPTC/J+z9EOrU=
Subject key identifier: 83:84:28:B1:AB:6D:08:43:77:E8:5B:74:CC:0F:84:43:2F:C8:41:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 321815B73D6251F01D71A4607C347986F8937504
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b01a5a70-e8bc-4c88-8f86-597d891eae77.roa
Signing time: Mon 26 Oct 2026 05:20:07 +0000
ROA not before: Mon 26 Oct 2026 05:20:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:18:15:b7:3d:62:51:f0:1d:71:a4:60:7c:34:79:86:f8:93:75:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=61c7f63da2e34848a3d19772b1be49cb05ae84e0683e9e1c4c579b9c63c0aaaf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:97:6a:67:85:bd:8e:fb:33:a1:6c:36:82:
78:85:c6:86:9c:dc:9f:d4:d8:26:7c:70:7e:38:11:
7c:94:68:b6:4f:db:e4:1a:4c:51:3a:7f:74:7d:e1:
35:3c:ea:6c:56:dd:20:81:ce:b6:7a:ba:70:1a:0a:
ba:53:56:d1:84:56:6a:3f:c2:75:b8:08:39:d2:0e:
c5:3c:2e:66:4a:e6:2a:5e:40:8d:fb:d4:5a:92:d7:
81:a9:7d:62:d6:5a:25:c9:1f:d5:8f:97:d4:cd:21:
7e:b4:f1:b9:8d:cc:ab:13:9d:0a:d7:47:13:a3:df:
6c:43:83:43:a5:cf:54:e1:9a:54:cd:96:98:58:4a:
07:e5:d4:b1:28:36:9d:0d:68:ab:f3:30:e7:94:66:
1a:c7:d2:a2:f4:f5:8c:3d:4c:5b:1f:77:46:6c:ac:
c6:67:65:8f:d0:3d:c8:74:85:d3:1b:ed:03:ae:41:
be:be:96:38:e0:75:90:ab:c1:32:18:35:52:15:a7:
c8:ed:24:76:67:f7:30:bc:4c:ec:9f:c3:f3:9b:45:
04:66:7b:fe:65:97:3f:e0:07:61:36:9e:03:b1:bf:
14:6d:84:c9:ed:c6:30:03:04:49:35:2f:ba:92:87:
b9:c0:77:c2:02:07:c8:3b:7f:d6:2b:8f:8a:dc:a4:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:28:B1:AB:6D:08:43:77:E8:5B:74:CC:0F:84:43:2F:C8:41:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b01a5a70-e8bc-4c88-8f86-597d891eae77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2080::/48
Signature Algorithm: sha256WithRSAEncryption
21:e2:5c:e2:f9:15:6b:e6:9d:cf:09:26:ac:eb:9a:22:09:ac:
3c:d1:4b:58:4f:e9:27:2d:e7:d1:69:11:62:25:cd:36:dd:3d:
e3:bf:0d:99:d3:68:56:fa:07:ec:b6:fa:f0:b0:22:b3:48:ea:
40:b9:ef:39:dd:ac:55:e9:d1:d8:4a:d1:2a:cf:bc:e7:fb:5e:
d5:0f:9b:9c:85:8a:0a:39:7c:f5:f4:4c:6e:00:76:13:92:b0:
aa:4b:88:87:31:4e:1a:dd:4a:10:d1:4b:9f:f7:46:bb:7a:67:
6f:23:03:6a:0c:23:cb:15:a8:df:b4:1b:54:90:5b:89:a7:a9:
33:be:56:2e:91:ba:0f:3d:30:4e:03:2a:25:f4:25:00:54:02:
91:d2:69:7a:60:cc:7d:12:c2:8c:37:f9:3c:82:81:a0:f0:35:
61:af:0a:05:3e:57:b0:d8:d3:db:6b:21:96:a3:b4:cb:6d:33:
87:a6:8e:06:eb:71:47:52:18:51:33:d4:f9:f4:1f:be:20:4c:
f2:01:c7:38:9b:9b:ae:7e:49:e8:f8:a0:b8:32:b0:25:29:1b:
3b:64:37:2f:c1:df:10:84:c3:d9:f3:55:39:b1:aa:0a:ad:db:
48:04:1c:ee:e8:7d:5f:75:38:aa:3f:7c:ca:d9:0a:a2:c4:7a:
70:00:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:25 2026 by rpki-client