Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
File: b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa (raw, json)
Hash identifier: WOd+b51LheNN7Uk8Iw3t89o8MVe4NjC5ellv0nr5RRQ=
Subject key identifier: 8F:48:F3:39:63:60:72:12:E1:26:71:AF:23:29:6C:28:BA:52:2F:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 346E5801686C40D85F725C63A1D919361D78B9BD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
Signing time: Fri 09 Oct 2026 01:20:11 +0000
ROA not before: Fri 09 Oct 2026 01:20:11 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6e:58:01:68:6c:40:d8:5f:72:5c:63:a1:d9:19:36:1d:78:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:11 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=338ec912ff58c7fce51415288130f874e0958b3f9299c6ae2cf19b08d01cfb27, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:fa:43:6f:8f:17:bf:79:7c:db:41:83:4a:
b7:43:12:a2:46:f6:8b:c6:eb:40:6f:29:29:38:7a:
e5:14:51:fa:3d:e4:ef:75:75:e2:fc:f4:75:cb:43:
ea:d0:3a:7f:61:4e:b7:21:9c:51:bb:47:1b:8a:d3:
9c:c6:e1:7c:82:c4:44:77:c5:a8:6a:95:f6:e4:50:
02:74:5c:e6:6e:c4:3a:8c:65:f2:e7:9f:8b:13:5f:
fc:03:a1:45:74:51:1c:e7:c3:7d:ec:1b:3e:f9:c5:
e0:e8:9e:00:30:fa:fe:aa:99:4c:03:51:b2:b3:93:
1c:fc:a3:d4:70:d7:03:7a:e7:4a:e7:56:2e:8d:8a:
e9:83:e3:cc:13:e8:8f:01:63:2f:20:7b:0b:30:c5:
f5:b7:41:99:af:24:72:e3:47:46:f4:58:ea:d9:16:
14:d3:cd:b1:3b:6c:f0:07:1c:95:52:49:bb:fd:e7:
b0:41:7f:35:32:ed:a0:6c:1d:65:c5:40:0d:3b:57:
97:95:a7:e1:cb:70:d1:0f:9b:5c:c5:f4:76:1e:28:
3a:ba:81:46:af:ff:78:6e:dc:7d:37:08:f1:90:12:
ca:42:6a:61:52:14:69:6a:a4:97:47:e1:81:da:18:
d0:ae:78:5c:1b:66:fb:84:56:52:15:af:42:e2:d1:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:F3:39:63:60:72:12:E1:26:71:AF:23:29:6C:28:BA:52:2F:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b163c4ff-990b-4080-b1ba-e854e6bb4cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
10:89:ac:63:a0:5d:99:9b:6e:76:d0:2c:bb:29:10:4d:ca:d5:
60:1b:67:9e:d8:79:d0:d6:cf:3b:c8:61:01:69:7d:89:fb:ac:
9b:34:b3:7c:af:97:3d:03:24:14:ac:49:a0:63:15:4c:11:cb:
33:31:59:2a:c8:ab:68:cd:87:9b:d2:56:70:e3:54:cf:46:70:
f3:0e:01:67:be:e1:4f:00:fd:52:7b:e9:69:cd:58:0c:05:cc:
71:86:ed:92:95:ce:a4:6d:91:75:97:c4:3a:d9:47:86:f3:20:
70:44:9b:90:c6:fc:3d:34:b4:1f:f4:46:42:7a:f0:eb:cf:dd:
a0:98:3e:a7:52:97:52:71:b9:dc:b4:f7:67:15:22:aa:1c:d5:
85:2e:6b:47:c2:ec:6a:e5:00:0d:25:28:c9:45:c5:2f:98:f6:
20:cc:dd:fd:1c:c1:27:6f:48:86:24:fc:ed:97:43:6a:99:66:
09:3c:75:8e:a6:8f:b4:7e:c3:23:97:c8:7b:d2:c9:ec:94:b5:
c6:c7:3b:10:92:74:12:7a:a7:5e:a7:99:0f:c7:bb:15:09:94:
8e:16:fd:62:0d:17:01:8d:24:4b:0d:3d:46:b4:6f:3f:3a:22:
e0:73:11:c4:61:d1:6d:bf:d6:b7:ef:25:ce:19:7c:93:40:ec:
4f:a4:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:24:09 2026 by rpki-client