Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
File: ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa (raw, json)
Hash identifier: TC6Gk0gwxwkjwtGJrKtqJqIzHP4SGYfDsmPWqRfVEmg=
Subject key identifier: D0:4F:8E:00:2D:1A:3B:64:29:10:7F:79:05:12:8E:ED:95:42:E3:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4BD22F7786AC902F74693E135DCF282C2E8C3545
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
Signing time: Mon 26 Oct 2026 04:40:08 +0000
ROA not before: Mon 26 Oct 2026 04:40:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d2:2f:77:86:ac:90:2f:74:69:3e:13:5d:cf:28:2c:2e:8c:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2843c6259a25caf4fe616692dbfb898f0f07749a4b73277d763c3a2a8d47cb91, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:8e:26:07:6f:80:f5:97:9d:63:56:40:13:
7d:bc:b6:d0:6d:70:45:45:c9:86:b3:61:9a:d7:ee:
fb:43:76:be:16:56:1e:d6:bf:8b:0b:ec:e1:3c:75:
44:dd:57:9b:a7:d9:eb:71:ae:0b:3b:e4:ac:be:f3:
ee:7c:01:b0:83:1e:cc:c9:b7:00:32:d8:a1:55:88:
6b:cd:da:73:9e:f2:99:72:d1:9d:08:8d:10:c2:dc:
52:f1:76:44:54:10:57:49:e3:9c:e3:e6:d4:95:d6:
42:33:99:5c:ca:fb:ae:2f:8e:ac:a1:3f:2b:0c:92:
f4:42:69:a8:6a:ff:e1:65:12:8b:ed:74:a6:29:d8:
27:71:69:8f:11:f0:99:6c:18:b1:f6:d1:27:0e:02:
ee:9b:ae:e9:8c:23:25:97:f7:c7:e6:14:64:98:10:
2e:24:71:72:44:8d:d7:ea:2e:59:95:3d:9a:fb:10:
bf:ab:72:90:e1:87:0b:d6:ba:d9:b0:f9:08:d2:4c:
42:3b:7d:ca:d8:11:b2:4d:5d:54:84:31:f0:2e:82:
26:08:71:3e:83:65:eb:e5:27:1b:e2:e6:c3:fe:d8:
27:bc:79:ee:8d:d0:3c:0e:59:e3:83:08:a7:fa:67:
e5:b1:34:6e:a7:bf:11:9c:f4:36:1b:5b:29:b7:c6:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:8E:00:2D:1A:3B:64:29:10:7F:79:05:12:8E:ED:95:42:E3:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:b7:70:08:b7:3e:07:19:ca:ed:69:0b:a8:5c:73:a8:4b:e0:
10:af:98:fc:47:02:e7:d9:3f:8e:88:52:ca:b5:df:57:72:57:
4d:36:02:6e:07:4a:53:92:97:db:1b:be:d8:c0:2e:51:d3:67:
8f:9b:a6:4b:2b:db:a4:26:25:97:57:d7:a3:00:41:92:b0:1c:
30:ce:96:65:db:30:61:53:55:5c:28:dd:07:f5:eb:ca:5c:af:
53:12:77:d7:04:c6:b5:66:b7:55:3d:0c:8a:34:dd:08:a9:d9:
71:9f:da:ab:a7:7c:89:aa:68:d5:97:51:46:81:7a:d2:d9:64:
1f:67:08:b8:2f:a1:b4:9e:c2:c7:d0:cf:26:07:f7:84:a5:53:
05:33:dc:be:65:4a:68:d9:60:a0:03:7e:ac:74:49:14:3e:05:
cb:c2:ae:7c:ec:e9:b4:ea:fa:87:8a:28:90:f8:7e:6c:58:0c:
9c:d4:de:b5:0f:3e:42:e3:eb:98:d2:46:77:5d:74:39:79:5b:
e1:06:18:41:69:f5:03:ab:9a:c9:ca:53:d5:b2:4d:3a:7b:16:
fd:e4:ff:40:8f:b3:7a:0e:da:5c:3b:ae:d1:3b:59:27:25:14:
c1:a6:2d:1e:bb:cf:11:26:db:3a:7b:68:6d:ad:00:64:b2:46:
b1:00:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:32 2026 by rpki-client