Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6b5f2f6-236d-447e-aeb1-24c947937396.roa
File: b6b5f2f6-236d-447e-aeb1-24c947937396.roa (raw, json)
Hash identifier: 3YFoYJF/eYnaesuUPBbvHO54sZjB+CoPwMHYyHx4K8k=
Subject key identifier: DD:52:1B:9A:4B:FF:06:89:4E:76:E6:D2:29:0C:26:F0:A9:A6:14:D4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50E5A7CEABB22D3C61369C8E97A6DF662489F2E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6b5f2f6-236d-447e-aeb1-24c947937396.roa
Signing time: Sun 04 Oct 2026 00:30:19 +0000
ROA not before: Sun 04 Oct 2026 00:30:19 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e5:a7:ce:ab:b2:2d:3c:61:36:9c:8e:97:a6:df:66:24:89:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:19 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=005668163be34c9535b3b86d3657eb61dc9290c8dfad20fa7531f871da23babe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:74:4e:59:fd:a8:8e:aa:06:7e:c7:b9:bd:
9a:6a:b3:6c:ef:e0:83:1a:40:5c:dd:60:f3:0c:11:
8d:1b:d6:03:73:ba:32:93:dc:da:04:32:9c:99:82:
b4:22:95:bc:19:be:3a:f8:3d:cf:fa:3c:f7:e8:21:
00:3c:4b:3a:58:ef:57:16:ab:c0:ba:c4:18:6a:7b:
db:b2:e9:6f:4f:5d:d9:d1:97:d0:31:fa:59:23:2b:
0e:bc:c0:13:56:2a:9d:98:fb:dc:8e:2d:57:56:7f:
c9:bb:73:b2:bf:17:53:94:eb:25:bf:74:cb:1e:94:
93:80:c9:b3:68:bb:c3:ab:f9:49:74:88:d4:37:ed:
96:be:a4:d0:dd:b1:94:b5:06:6a:be:a2:76:e9:18:
ec:a3:9a:5d:38:5f:14:cd:df:81:90:ec:7c:f0:61:
2e:7a:22:68:67:35:c4:1e:80:e9:df:70:e4:30:72:
78:ce:80:8c:eb:23:68:5a:55:4e:bc:9c:73:8a:01:
fc:62:4d:c4:c4:94:38:06:72:9e:98:fd:d8:42:bb:
1a:0d:01:58:7f:94:59:64:fc:c0:84:74:7b:fa:c2:
2a:e9:87:51:ce:03:8c:df:d9:32:59:6a:b9:48:de:
70:13:25:ad:32:32:6f:c0:18:08:75:37:7f:c7:9c:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:1B:9A:4B:FF:06:89:4E:76:E6:D2:29:0C:26:F0:A9:A6:14:D4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b6b5f2f6-236d-447e-aeb1-24c947937396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:8a:88:15:83:88:ab:21:cf:b6:98:08:9d:8f:c6:ef:a3:34:
e4:70:5b:08:3a:ce:ef:59:42:48:54:e6:2a:66:8a:b7:9a:fb:
08:05:e4:ab:71:d2:26:02:32:73:2f:e8:2d:c0:02:ab:ab:01:
b1:50:32:56:a2:0a:cb:c8:84:ad:11:69:75:24:96:12:07:d0:
94:4d:d3:5c:4e:f0:6b:8c:8c:df:66:35:4f:8e:14:9a:ba:16:
ab:78:bb:9a:95:f6:f8:a6:58:4e:2d:01:72:11:57:5b:81:d9:
7f:95:ed:f2:ce:ca:35:9e:29:88:0c:5f:1f:7a:7c:e9:02:e8:
7d:6c:fa:4b:6d:0d:90:3d:f3:3c:46:bc:b5:a0:6a:70:78:94:
7a:8a:4e:53:94:22:9d:a8:5d:8e:44:c6:c1:a1:a6:c0:1f:ab:
62:57:18:6d:9f:8f:a1:5d:8d:44:69:ef:cf:2b:13:e2:73:e0:
ec:3e:cc:09:c6:0d:5b:e6:43:e2:31:1f:ee:d7:14:ed:c6:74:
a5:65:f4:49:6e:f5:5f:d2:ec:46:57:71:7c:f6:8b:af:6a:c3:
e1:78:30:83:9d:a2:5e:86:da:bf:ae:99:de:2e:79:10:53:30:
19:b1:93:1b:9b:93:9d:eb:6d:72:34:f6:fc:6c:43:ab:fa:c1:
90:5c:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:35 2026 by rpki-client