Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
File: b8a24699-2493-4e45-8227-bd2ec32f88ab.roa (raw, json)
Hash identifier: fj01DOtuZDoWVf9Jzi0HWD42AztlO9hsQw2BZ1s1qNk=
Subject key identifier: 22:64:DD:56:A5:B2:45:10:58:97:AF:93:69:33:60:58:B7:39:B6:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 532F994AE8EB85B493B0D3978E926A2834CA061E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
Signing time: Mon 26 Oct 2026 05:30:47 +0000
ROA not before: Mon 26 Oct 2026 05:30:47 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2f:99:4a:e8:eb:85:b4:93:b0:d3:97:8e:92:6a:28:34:ca:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:47 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=bbea15031cd5b2c5dc8c35ffe23920ecb9396768fee88e2ac6c7c9619d9166ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:8c:ac:04:8b:92:24:e9:cd:f6:18:63:81:
39:56:e5:db:83:2c:41:56:f3:c0:e5:39:f1:18:cc:
ad:ca:9c:4f:7e:c2:7f:6a:01:ae:5c:34:28:d3:d9:
70:a4:87:c0:25:b0:bb:de:0c:0c:b7:87:09:af:7c:
00:ef:cb:bc:2d:cb:37:9e:01:ea:4f:b3:29:c2:22:
b7:82:24:f4:02:b4:88:51:b5:c1:1c:eb:60:8c:d2:
af:f2:cb:e1:a9:a2:be:b7:e7:f7:a9:ed:b9:bc:0f:
a6:03:b8:76:c8:54:b0:51:e0:fb:e9:11:a4:2c:dc:
d2:f9:b0:82:54:9b:95:52:83:ce:ff:eb:a3:18:a2:
b5:bf:f5:46:0c:da:b8:00:98:dc:70:47:d3:4e:62:
77:3b:cf:d3:ed:a9:99:9e:36:4c:f7:b7:60:b9:f8:
ce:4b:99:82:63:7e:cf:58:c1:b2:f6:1a:44:2c:ea:
09:a7:55:7a:a2:af:d9:04:ed:c5:ef:d9:d4:8f:b9:
85:05:85:ec:4c:93:fd:62:a4:6d:22:4a:b2:60:f4:
fb:90:56:f2:1b:e1:6d:70:ca:23:40:c4:b4:36:47:
ce:e9:1b:e5:0a:ff:e2:9f:7d:63:9f:6f:a8:af:d4:
2a:53:61:95:c1:29:0f:20:5e:e2:ef:58:4e:cc:37:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:DD:56:A5:B2:45:10:58:97:AF:93:69:33:60:58:B7:39:B6:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:f9:1c:44:4d:e7:d8:69:01:a5:89:6f:db:f5:45:f8:fd:3d:
d7:cf:7b:dc:41:09:2d:a2:00:b4:40:01:10:fb:ba:54:52:42:
97:37:b8:1d:35:da:ab:3c:f5:22:df:a2:eb:36:d5:b2:d1:c9:
b5:fa:05:a6:1a:d0:ba:85:69:79:fd:01:b9:a8:c2:59:5c:17:
c5:44:de:2f:a1:1f:93:46:af:a9:6f:5c:e9:55:59:b8:5a:08:
e8:55:38:59:ea:2d:c6:40:24:b0:4e:9f:98:c3:9b:a5:32:f5:
96:96:12:56:0c:8f:e7:8b:36:fc:8b:af:d3:84:97:10:a0:48:
6c:b5:3c:1e:96:9f:83:7d:d2:54:cc:ed:69:58:3e:c2:35:24:
a3:d5:b0:79:8e:69:62:de:77:32:53:b3:f0:13:d1:02:b5:6a:
ee:cd:6e:4b:d1:3c:a0:aa:d6:e3:00:bb:a7:dc:2b:5a:6f:48:
1b:2d:ba:82:4c:73:bd:52:70:13:4d:1f:fa:77:2f:91:2d:e9:
14:35:b9:db:40:b5:66:d9:bf:0b:62:c1:da:34:40:9a:73:a5:
85:a0:64:87:8a:37:22:06:ff:f6:87:fe:ed:4b:a8:c7:ff:71:
88:9a:bf:92:70:d8:91:3b:dc:1c:55:93:23:2a:42:09:bb:40:
97:a0:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:43:09 2026 by rpki-client