Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8f63940-d674-4d8d-868b-853d00b0d422.roa
File: b8f63940-d674-4d8d-868b-853d00b0d422.roa (raw, json)
Hash identifier: Kb0e/e5T7zyhVkbKn7vrkbo3lS4KGtvYL9IulY+ZoHU=
Subject key identifier: E2:80:53:28:1E:E2:1F:50:81:5C:10:03:25:9E:FB:E5:02:B6:6B:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C47A1969E4364DEE33C6C8D77A44771A1D6D228
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8f63940-d674-4d8d-868b-853d00b0d422.roa
Signing time: Fri 09 Oct 2026 01:30:19 +0000
ROA not before: Fri 09 Oct 2026 01:30:19 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:47:a1:96:9e:43:64:de:e3:3c:6c:8d:77:a4:47:71:a1:d6:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:19 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=a46bfe03cbb0b9dc3819ac1efc4c0288bd21eff811e68b4c8e5f7cffeee9470f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:89:ef:36:01:50:59:89:f7:60:07:2a:0b:
5e:0e:d0:14:a3:0a:cc:3c:51:fb:fb:ee:fe:03:bb:
8c:1e:2d:fe:57:25:9b:11:2e:b3:e1:29:a3:a7:24:
29:23:e5:9f:54:9a:2c:a7:de:23:cc:f5:59:33:05:
65:59:03:c4:ba:d1:57:17:f8:bc:c7:97:9a:7b:3b:
53:5b:47:fc:0a:7a:b6:47:58:13:50:2d:77:cb:2a:
e1:dd:79:ba:92:53:46:e7:0a:6c:ba:f3:ee:fb:f2:
e4:c6:18:88:7e:1c:20:d0:f5:e1:59:05:ed:56:b8:
43:db:bd:00:ed:d8:62:c5:00:a3:29:33:d5:fc:eb:
45:7b:11:a6:05:df:81:71:4e:96:aa:72:cd:23:7a:
97:53:2f:e3:ec:1a:99:22:4b:e7:c9:00:f2:7e:09:
b4:cb:42:43:a3:42:7e:f5:b7:89:78:e9:ba:3e:e2:
3b:e5:86:aa:87:e7:03:0c:9b:9a:70:17:1f:6d:10:
71:53:b2:68:d4:f5:c5:d0:c2:52:a0:21:99:fc:fc:
b7:7b:ee:62:40:b3:72:3e:09:27:18:53:f1:1f:22:
0e:52:5d:3f:c7:83:33:07:3f:d1:85:2f:55:4e:e7:
a4:7a:c0:ff:88:b3:3e:a8:f6:0d:03:0c:33:d2:c1:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:53:28:1E:E2:1F:50:81:5C:10:03:25:9E:FB:E5:02:B6:6B:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8f63940-d674-4d8d-868b-853d00b0d422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
5b:60:84:7d:f7:24:dd:2c:16:94:8f:da:50:47:ba:6a:fc:0e:
1e:bc:e5:46:4d:17:c2:a2:de:d8:aa:8a:51:e0:d7:ae:3f:25:
88:1b:c4:f6:6c:c3:46:cf:86:b8:ff:3a:2d:9a:07:8d:09:70:
fa:86:9a:39:e1:6f:9c:2a:24:96:84:8a:0f:78:41:b2:8b:28:
3e:9d:d0:c7:1d:47:44:b5:0c:e5:73:c4:34:a2:b4:03:e0:2c:
4f:33:d1:2b:f2:83:d5:0d:45:ff:39:53:32:c0:51:66:99:a6:
2c:a7:81:8c:44:dc:b7:fb:b5:b0:a7:b4:a9:b3:2b:d4:78:e9:
e9:7e:80:14:b3:9a:09:f8:7f:d5:ad:1e:19:09:ce:b8:67:d4:
c2:12:05:79:9e:c4:cf:7e:dc:01:5e:ed:71:f4:22:0f:7c:84:
74:19:c7:80:2c:32:4b:fd:5b:f7:4b:c1:05:00:d5:7e:f0:d1:
42:f6:b1:13:b6:73:fb:96:59:a6:7a:83:51:bf:1e:35:dc:74:
f1:a7:39:87:29:cc:d3:77:25:32:09:ba:22:45:35:b9:01:c2:
43:77:2a:1b:59:13:43:53:9a:f0:74:bf:3b:8a:3d:4a:e9:cf:
fe:b5:c7:19:3d:17:5b:6e:f4:1e:73:e8:e6:b9:05:a1:47:89:
fc:9d:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:49 2026 by rpki-client