Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
File: b3515426-a058-439f-a8fc-e68eaafc8806.roa (raw, json)
Hash identifier: rMpMwhTF7NsHTmlTCzekfhI5Ih40BM0eeXanqyUUfkg=
Subject key identifier: F3:58:52:B7:F8:26:69:C2:B4:A6:EC:66:0A:3F:D8:4E:46:B7:BC:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70A602487821049E2BAFCE7095345D331001A398
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
Signing time: Mon 26 Oct 2026 05:20:21 +0000
ROA not before: Mon 26 Oct 2026 05:20:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a6:02:48:78:21:04:9e:2b:af:ce:70:95:34:5d:33:10:01:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8e46049e0e27f43f9658a7c743c50fd7ad205af627c333d9cf4b7c16c5d3ca0d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:cc:ce:b9:71:e2:b5:52:cd:76:ae:97:84:
05:ed:50:ba:c9:96:2b:86:91:af:26:9a:b9:cc:68:
43:7f:1a:a3:5c:0b:7d:6a:a6:e2:d8:6f:ac:ed:7e:
3d:13:ee:4f:07:07:04:7a:f5:05:c1:3c:95:24:7b:
aa:3b:94:5d:8b:d6:6f:c4:7f:ea:62:f9:be:11:e7:
6f:fc:cd:63:cd:11:10:26:13:70:71:d4:c3:fc:f2:
ec:55:e2:95:54:33:1e:61:e3:b5:ec:dc:cf:99:a0:
0b:95:3b:b7:25:e3:6f:60:3d:6d:6b:6e:20:6e:6e:
10:7b:97:4b:d2:5a:ab:d1:c2:c2:96:db:14:ae:b8:
52:8d:0e:22:6f:81:88:53:a1:e9:87:70:76:63:24:
a1:73:d6:d3:67:79:a0:d3:77:86:17:9d:f3:1d:28:
c2:6f:96:84:30:de:fb:39:97:f9:1c:df:4d:f0:16:
11:40:2c:00:b7:88:e4:a4:9c:91:93:d6:53:dc:76:
14:47:74:9c:2e:01:0a:f2:c6:33:64:c2:35:e4:1e:
2c:41:39:52:63:9c:56:8f:b2:b6:56:c3:48:5c:89:
13:0a:eb:70:cf:17:38:42:f5:8b:57:fc:6f:cc:0d:
9a:a5:e7:7b:25:1d:61:72:d5:58:78:e6:82:aa:36:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:52:B7:F8:26:69:C2:B4:A6:EC:66:0A:3F:D8:4E:46:B7:BC:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:90:33:95:1d:e9:e5:42:c0:4c:6b:87:5a:08:7f:cc:99:30:
80:67:34:69:f9:c2:70:0b:8b:35:5b:39:16:42:aa:f9:05:4e:
ce:77:65:d4:36:9c:4e:4f:58:5f:dd:99:d8:85:f2:88:57:59:
49:86:42:4d:c4:f2:fb:45:4e:a3:c5:ba:d3:10:1f:18:38:3d:
6d:94:ab:ef:78:21:ff:6d:ec:8f:c6:3f:1b:3b:b8:5b:eb:3d:
4b:9e:86:23:d2:06:3c:a3:f3:9f:52:4a:e2:cd:4f:4b:4c:e3:
91:3b:a7:9c:81:8e:f0:dd:1c:e8:85:18:c3:b4:02:a7:4a:ac:
78:fd:63:4f:85:63:6d:76:b2:98:90:b3:d4:44:c1:72:0b:02:
4d:f6:f6:6e:81:27:8a:04:65:37:06:71:75:60:ee:76:97:da:
73:e7:e0:d0:30:e1:46:e1:7f:48:44:d8:aa:56:c7:87:42:b9:
0a:28:27:98:1b:be:f7:ec:ae:ff:d5:2e:9e:57:55:30:7c:1b:
fd:cf:75:f5:8a:63:6e:a7:30:05:f2:fd:60:a1:59:75:76:be:
87:60:79:31:0a:c5:fc:5e:e7:68:41:87:7a:a5:7a:64:62:59:
f4:da:1a:5e:3b:12:2b:b1:a2:69:fd:ad:17:c5:e2:07:b0:44:
14:c3:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:44:57 2026 by rpki-client