Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
File: ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa (raw, json)
Hash identifier: oCtG2/qv02LudMDOkgqFMC1esRp/k3SQKpM6KsUytws=
Subject key identifier: A2:72:4B:85:A3:13:23:DD:CF:7A:8C:38:C8:93:4D:57:BC:A1:92:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 581753E423AC6CBA721B6E20300BF5F1E7A775BE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
Signing time: Sun 11 Oct 2026 15:08:16 +0000
ROA not before: Sun 11 Oct 2026 15:08:16 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:17:53:e4:23:ac:6c:ba:72:1b:6e:20:30:0b:f5:f1:e7:a7:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:16 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=0af72d44741a34cbc47f25f3ed5c0e547f44bcaa3ce98b814b71e78ef27b7ef8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:6b:df:d7:23:c0:6a:d7:fa:84:83:f6:1c:
8c:33:37:0a:67:2e:87:2a:53:a7:77:a1:47:31:92:
ee:49:80:6b:f5:78:3c:30:bc:97:8a:08:95:4c:c1:
35:40:5e:9e:1b:bf:59:69:58:5c:cf:95:c3:2f:3c:
a6:29:8a:a1:bb:f4:7a:91:b8:2f:73:9d:35:6e:8c:
d8:ff:7f:3c:9f:59:1a:95:56:d8:d9:59:21:db:2d:
f2:f3:cc:ef:b1:bf:ff:8c:3b:5b:44:31:81:14:f1:
74:27:4e:e4:55:be:52:5d:f5:11:1f:9f:c2:81:43:
f5:7d:5a:d5:9c:1c:42:ec:28:09:b2:d9:e7:69:95:
45:97:f0:63:11:b3:17:44:c6:75:bb:7d:5c:6b:91:
3e:5e:e8:fb:df:0f:64:00:f3:27:eb:23:51:ba:0d:
e4:f9:77:6b:a6:c2:48:c3:aa:27:6f:ac:da:0d:34:
aa:8e:bb:d9:95:6d:b4:44:db:36:36:08:dd:7a:a1:
08:ea:c6:e7:7e:94:74:a5:f2:1e:a2:67:54:81:64:
37:3f:1d:7e:7d:e4:db:6d:4b:17:4a:09:83:bd:60:
1e:c8:83:7b:a3:bd:35:b9:fe:c1:25:6d:78:a8:f3:
a9:52:d8:83:21:76:37:c1:56:ad:df:21:8f:62:7f:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:4B:85:A3:13:23:DD:CF:7A:8C:38:C8:93:4D:57:BC:A1:92:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba70a89c-5e6c-40ac-9a73-f92bee005d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
96:58:ff:00:18:26:4a:57:77:22:5c:52:ae:3c:c1:96:be:58:
4b:ff:98:dd:d4:a2:56:40:8d:6b:46:54:cc:17:20:29:8d:4b:
16:09:50:47:02:43:1a:c5:5b:d6:44:9d:d7:33:cd:83:b8:bc:
4f:f6:2f:6d:37:cc:03:99:5e:41:f0:d3:3c:58:a9:59:a0:b0:
f9:56:fa:cd:44:06:0b:c8:78:d6:51:27:31:00:a9:f6:57:23:
10:9d:e3:9d:a2:b6:90:2a:13:a4:e6:45:de:08:49:9b:cb:0a:
ad:23:75:05:fd:8a:8e:db:1c:ad:d0:31:da:fd:81:bf:4b:4f:
77:92:e3:cf:70:40:e1:3d:1a:82:a3:03:8f:56:1d:9b:3d:92:
24:d8:1f:4b:51:ab:2e:0b:c9:22:ea:5c:8b:8c:89:b7:cc:30:
3f:2b:0a:5d:a4:27:80:41:f8:42:a6:0d:73:cb:33:0b:82:5c:
5e:f0:92:ff:d3:cc:c1:b1:6a:29:40:cc:4f:c9:74:33:6d:2a:
94:02:30:63:5e:16:e7:bb:56:3a:40:ac:61:07:08:74:02:9d:
b8:2b:bd:65:2f:76:c9:c5:bb:d1:6d:2b:94:77:dc:32:97:ec:
9c:a2:f7:84:c7:88:33:6f:8d:d8:3a:72:8f:f7:d2:15:b1:b8:
bb:c0:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:35 2026 by rpki-client