Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
File: ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa (raw, json)
Hash identifier: p1peTXv+iDJ/AGVCS0bLbHVZsTM3qX4sKO/16WDwA4Q=
Subject key identifier: 12:0E:1E:74:13:98:BE:5E:DB:E5:E8:33:EE:75:B2:C0:EF:F0:58:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6896D57FCBB49901204BACE6CB6D27E4466DC91D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
Signing time: Mon 26 Oct 2026 05:10:26 +0000
ROA not before: Mon 26 Oct 2026 05:10:26 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:96:d5:7f:cb:b4:99:01:20:4b:ac:e6:cb:6d:27:e4:46:6d:c9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:26 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1e66902fb044db05b65f6852036e6c22670dad3a72c7dec5ecd46d630665a7d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:30:90:71:24:09:84:44:c2:88:ef:19:b8:
ca:d2:c1:3b:c2:84:61:bf:d3:6f:aa:e2:4c:cf:97:
50:37:60:96:d8:26:7b:ff:d0:10:98:1f:14:99:f0:
95:e3:27:83:b1:4a:9a:76:b8:64:94:e2:16:61:d8:
30:82:7d:2b:fa:cc:d2:2c:fa:76:3a:8d:6d:65:fe:
16:3b:cf:e3:99:52:a8:f8:50:08:8d:0c:02:9f:88:
37:c7:c5:71:2d:f8:23:64:bb:a1:8e:71:ee:32:5f:
a3:e9:51:65:cc:f7:8e:63:d5:46:e2:7b:42:1b:84:
cb:0b:cc:e5:0d:f9:9b:1c:66:67:45:ff:20:9e:d8:
1a:e1:f8:41:f7:95:b1:65:7a:59:ff:7a:27:0b:67:
c5:b2:e7:7b:f4:e9:c1:e8:fd:a8:e0:a0:87:bf:16:
2b:8c:6e:90:a4:f5:f3:6d:1e:94:a1:eb:a7:be:0e:
ad:40:03:29:dd:5f:00:bb:70:e1:b7:4a:0b:42:26:
c3:ec:b6:46:82:03:3c:c7:2e:19:4f:9e:06:0a:60:
43:35:c4:df:8b:23:bd:bc:b3:24:53:74:eb:ad:5f:
99:0d:16:47:8c:77:3c:2b:98:49:cd:d6:f7:ba:5f:
e0:be:6c:8c:92:59:59:ea:71:9c:aa:78:65:7b:7d:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:1E:74:13:98:BE:5E:DB:E5:E8:33:EE:75:B2:C0:EF:F0:58:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:800::/38
Signature Algorithm: sha256WithRSAEncryption
4f:54:bc:7d:d1:e1:b8:24:94:73:d5:cf:92:55:3e:b8:e3:0e:
2f:e9:84:b0:de:f1:c5:09:8f:db:cd:e9:c0:96:df:5a:a2:a3:
af:6a:7d:fa:61:57:dd:49:96:19:a6:10:41:7c:ae:e0:8d:a0:
3e:a4:b4:dd:10:62:cb:ed:31:55:a9:a7:3f:d5:24:1d:77:e6:
64:e2:3c:2a:16:d6:ca:1a:9b:91:00:aa:48:65:08:2d:56:6c:
51:48:74:19:06:a8:ce:d0:c9:ac:a6:32:ae:d9:66:b6:5f:0c:
61:80:81:9a:9a:1f:8b:d4:c8:ba:d3:b1:7a:5e:fb:26:d0:e5:
a1:37:d4:62:fd:e2:b0:58:fd:21:e2:10:ec:e8:5f:25:b1:e0:
d7:a9:55:35:25:b5:ca:76:c8:9e:bd:a5:4b:b9:73:de:42:97:
90:cf:35:01:dc:4f:1d:9e:94:1a:41:97:31:5c:0c:68:68:b1:
64:2d:13:e9:8e:97:43:e1:7e:d0:e8:09:2b:11:54:6a:e2:5e:
6a:a1:a2:67:61:80:05:ce:c5:a5:e6:9c:d4:24:4a:17:5d:ee:
ab:fb:71:2b:a5:e8:cd:77:ac:14:7d:d3:16:c1:21:9d:91:c2:
c8:27:98:1c:4f:95:75:42:64:e4:9c:1f:80:f3:1b:ff:3f:5a:
20:13:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:45 2026 by rpki-client