Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b453d7ce-5ce3-4d78-989f-ab5dc55802e2.roa
File: b453d7ce-5ce3-4d78-989f-ab5dc55802e2.roa (raw, json)
Hash identifier: o/na3yuLe8y81TozgkgfmMHxmkNEaWRYYQUpm0bC2dw=
Subject key identifier: AD:36:64:7C:D2:69:8A:81:3B:06:6E:D2:70:B2:2B:E1:5E:E7:11:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59BB6307DC4C0983B45BA498000A5C71982B9B32
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b453d7ce-5ce3-4d78-989f-ab5dc55802e2.roa
Signing time: Thu 29 Oct 2026 00:50:08 +0000
ROA not before: Thu 29 Oct 2026 00:50:08 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bb:63:07:dc:4c:09:83:b4:5b:a4:98:00:0a:5c:71:98:2b:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 00:50:08 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=036753cf627494bf0302888631076ee94dc465ec71461ea3923d14c71483c26f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:f7:8a:fb:46:85:2a:cd:18:05:c5:d2:2b:
a7:74:e4:db:45:ba:4f:31:bc:d4:0d:e3:a3:ea:5c:
21:59:aa:1e:d1:f7:5c:3a:3a:5f:e0:a8:80:79:b0:
a5:ab:c0:5b:a1:7c:b7:54:69:95:fd:28:3c:de:67:
f9:b9:b5:9d:4d:d0:d6:d1:40:0b:7c:65:7e:0c:b6:
96:8d:2a:fe:6c:0a:f3:41:18:a9:e6:24:53:07:5e:
76:d7:c1:5a:8f:24:73:2e:00:c4:56:95:9a:af:b4:
3f:a7:a6:ed:da:a5:08:ca:b0:c9:67:95:d9:0a:79:
70:ad:8f:56:88:1c:3d:20:1f:fe:02:e3:79:22:38:
87:d7:01:55:9f:5d:eb:9e:40:ee:25:0a:e4:da:3a:
a5:4b:ad:a5:21:26:70:e2:ab:de:19:6a:57:10:d7:
83:9b:0b:d0:f7:b2:59:7d:ec:3d:f7:2b:82:0a:65:
bb:9d:fa:eb:ec:c1:9d:b5:d1:92:ad:03:09:f0:ba:
59:20:7b:e4:0c:8e:b5:b2:12:3a:59:52:c4:d5:b7:
32:3c:4c:aa:0f:84:41:59:e7:6d:a5:be:28:9e:eb:
60:bd:7b:68:ca:fb:84:0a:a7:60:9b:f4:0a:db:fc:
ea:25:05:75:58:8f:07:f9:9f:62:f3:8f:0f:db:ac:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:64:7C:D2:69:8A:81:3B:06:6E:D2:70:B2:2B:E1:5E:E7:11:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b453d7ce-5ce3-4d78-989f-ab5dc55802e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:1080::/48
Signature Algorithm: sha256WithRSAEncryption
7c:e9:47:e8:02:28:8f:67:7b:1a:10:30:bd:cf:23:89:13:35:
6c:dd:08:31:98:80:89:74:ca:e4:7a:06:2d:7f:4a:e2:5d:65:
20:3a:1d:df:82:4a:f4:d2:f0:62:43:90:39:4c:92:85:d3:f0:
58:b6:c0:2e:8d:1c:f6:f2:26:88:f7:50:9c:ec:3d:49:3a:22:
f0:ed:4a:51:85:67:19:38:1c:fc:b2:03:97:fc:fc:5c:4a:a5:
06:33:18:02:c8:71:1d:01:d7:08:03:53:97:36:a5:79:17:5e:
de:71:b6:a4:6f:83:68:79:c7:d1:1a:a1:5e:9d:a9:47:8c:27:
a8:1a:87:4f:19:1f:58:0f:6b:e5:f4:b6:81:11:1b:da:bf:c2:
dd:e9:03:50:b5:66:68:ce:23:94:35:b9:12:3e:fc:c0:bf:86:
85:a8:d7:04:6f:7a:22:99:a3:93:fe:46:c0:22:d6:e7:58:e3:
32:d0:cd:ff:4e:e0:bf:5c:af:ff:ab:2c:36:d4:b8:5d:4f:54:
54:b4:e5:b2:dc:36:f6:f2:c0:dc:8f:e6:73:a7:8e:f3:a8:f8:
4b:c1:11:49:be:a8:c4:d6:aa:f2:0b:00:42:10:a3:0b:42:db:
b6:02:a6:e0:71:a4:ae:91:f4:55:57:fc:f1:52:9f:f8:57:87:
8f:66:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:41 2026 by rpki-client