Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b83c6ff3-492f-409c-86bf-cb90ca64f452.roa
File: b83c6ff3-492f-409c-86bf-cb90ca64f452.roa (raw, json)
Hash identifier: x8NtZ2Onr6TVi3O14q3Q/OrSAxoA8I20fRmNwEC5nIE=
Subject key identifier: 79:9F:DB:1E:2D:E8:F7:1F:04:57:AB:1E:2F:26:73:45:47:C5:56:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 322FF1EB0915065F30CC4588310C000E6703DCF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b83c6ff3-492f-409c-86bf-cb90ca64f452.roa
Signing time: Thu 15 Oct 2026 03:30:30 +0000
ROA not before: Thu 15 Oct 2026 03:30:30 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2f:f1:eb:09:15:06:5f:30:cc:45:88:31:0c:00:0e:67:03:dc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:30 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=5f8e4ccc618b05f27f0ff7cf47f0563813defe633b92761a0b20cd3795fd82a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:30:d5:1b:3d:33:ff:f4:2f:6d:46:1d:dc:
e9:fc:42:4f:0e:d6:c4:a0:63:4a:79:bf:7e:06:03:
6b:40:a1:8b:9e:79:04:ed:0c:cf:28:02:48:82:1f:
c4:5e:88:64:86:77:4b:7a:23:d6:d5:e7:21:68:52:
6c:aa:15:da:e9:ff:3e:5f:8f:84:ee:37:de:11:0a:
b4:35:b0:cf:74:90:2c:ee:d1:84:53:c3:67:6d:06:
45:20:4b:a4:a4:02:c2:e0:d3:95:ac:18:1b:bd:26:
77:26:f6:4d:29:b5:46:16:9e:c5:11:bd:6e:f4:67:
18:e7:9c:a0:6d:58:dc:6e:05:b6:b7:1c:0b:7e:39:
f5:1e:d5:8b:d2:cb:49:c1:09:9e:3c:20:78:94:8d:
7d:f4:e2:dc:1a:81:a9:52:39:27:38:f3:b4:75:1b:
57:1b:ca:d7:9d:e0:f9:76:ae:ad:ee:6c:90:8d:8c:
21:0f:c5:db:f0:bb:60:63:4d:5b:55:0a:22:2f:6e:
ef:39:a8:58:58:d2:a6:2b:d6:3b:46:51:13:80:67:
5e:91:95:de:28:e4:f3:7a:1d:1e:68:79:8c:41:05:
64:f1:29:eb:56:3a:73:be:d6:2e:a7:99:b9:f7:58:
f4:04:27:2c:50:25:75:51:e7:35:ad:91:4f:01:03:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9F:DB:1E:2D:E8:F7:1F:04:57:AB:1E:2F:26:73:45:47:C5:56:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b83c6ff3-492f-409c-86bf-cb90ca64f452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:7e:bc:e2:27:c8:06:0e:3e:a4:83:48:fd:da:2a:14:9c:18:
79:78:fa:06:8b:01:a5:30:d1:42:12:7a:67:29:98:0c:08:60:
49:44:9b:80:b2:a0:7b:d7:25:96:0c:d8:27:79:c7:19:93:48:
55:45:01:47:81:59:a8:51:fb:ff:09:e4:8d:63:f9:bb:84:56:
1d:1c:67:ee:57:0c:e7:21:80:9c:0d:0d:89:3f:93:35:6a:7c:
0c:ec:c9:00:67:7d:b9:f3:d4:ca:27:2a:cd:c5:23:d2:40:b7:
d2:9b:34:ec:a8:5a:fb:fe:9d:c8:a7:4b:d5:9b:65:76:50:37:
13:b0:83:7a:b2:cb:19:2c:77:5e:9f:5c:3e:34:20:04:67:28:
14:c1:bd:91:44:92:93:dd:96:d2:a6:08:f1:eb:e9:05:f0:2d:
20:06:f8:42:48:55:49:bb:2e:68:b0:5a:8e:ba:4e:8b:df:86:
19:b0:39:1f:3c:0d:fb:f4:94:f8:ed:d8:b7:8f:24:e1:2d:77:
cc:9a:8e:51:a7:cf:f2:b5:ef:a9:5d:72:ae:7b:77:5e:e5:0f:
d0:ea:52:d9:79:4c:b1:66:7f:e3:d7:c2:86:ca:b5:5f:d8:54:
76:ad:40:94:91:f8:ff:68:a2:57:ca:0e:01:78:a1:2b:67:58:
42:95:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:21 2026 by rpki-client