Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa
File: c056757c-bb27-4ef4-91ff-67b9307d3085.roa (raw, json)
Hash identifier: QqEuSGc3rC2B/EZaA/CVl84d3QhlBslG/IRsLf43vxQ=
Subject key identifier: 9D:10:CE:D5:4C:1D:64:9B:92:0A:08:D9:64:09:8F:C0:8A:72:67:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6995D278499470242FD6734C24D222A19EB57E66
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa
Signing time: Mon 26 Oct 2026 05:21:04 +0000
ROA not before: Mon 26 Oct 2026 05:21:04 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:95:d2:78:49:94:70:24:2f:d6:73:4c:24:d2:22:a1:9e:b5:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:21:04 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e239c8e4ea28a15065407dfb46930a51b6860fe6158c7e497023f7716b810bec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3e:aa:61:ca:a1:a2:a9:71:40:6c:c0:36:4e:
2b:7c:ff:c1:2d:03:1d:98:5f:34:36:cf:f7:17:8f:
a0:97:e2:a6:cc:93:79:14:54:bd:85:48:2e:0c:3b:
f2:68:ac:ee:54:e6:7e:24:ee:20:c1:18:79:fc:0f:
c2:94:b9:b6:20:6b:16:6f:0a:72:d1:fc:ea:8d:dc:
b3:82:dc:83:8f:ce:4b:81:0b:75:05:d8:fe:70:da:
6c:3e:5e:64:a6:82:ac:73:f7:90:63:f8:fc:02:61:
00:e9:cc:30:f6:ab:0a:77:63:3a:21:e9:08:86:57:
d3:e4:a3:02:4b:78:42:7a:bd:23:42:69:a2:88:23:
72:df:2e:dd:48:34:2f:a3:1e:6f:8c:c3:0e:fc:d7:
c9:4f:83:24:32:8b:0f:2a:12:5f:56:99:92:1b:d8:
25:f8:ee:60:4c:40:99:62:6d:b9:54:1b:df:d9:5f:
19:6c:7f:33:24:ce:52:6c:06:b2:45:d6:12:f8:d6:
60:f6:cd:f6:fc:12:cb:69:da:86:40:77:2f:53:ec:
51:3a:6b:dc:92:59:03:21:f4:45:c5:a1:44:6f:75:
b3:3b:6b:1c:e9:4e:37:6b:7f:57:62:67:c1:29:47:
f3:55:1a:a4:e1:0e:cc:d8:6b:b3:d4:c7:b2:d3:75:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:CE:D5:4C:1D:64:9B:92:0A:08:D9:64:09:8F:C0:8A:72:67:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:99:14:72:3b:59:8b:00:d6:62:e3:e5:60:da:cc:89:c2:cb:
cb:f1:ed:17:95:92:db:18:78:3e:fe:30:0b:0e:40:0d:5b:ee:
24:e2:dd:c9:29:4f:a9:aa:0b:22:3d:5a:9b:a6:d9:29:4e:5f:
d2:4f:96:e9:6c:09:b6:63:11:10:4d:6d:90:a1:42:e4:6e:8c:
12:03:83:cc:54:66:64:c9:39:a8:53:fe:30:f9:5b:ed:65:e6:
11:5b:ab:fe:24:9b:0f:d2:41:f9:25:27:9b:86:05:03:48:90:
08:ec:97:c2:83:f0:08:e2:38:fb:7b:c7:3d:97:2f:d0:83:35:
9a:fd:98:e0:c1:47:45:48:08:59:82:36:ae:20:87:63:bf:10:
40:80:fc:33:29:63:7f:ca:41:a7:30:59:f8:de:fe:0f:fd:c7:
6e:24:50:93:e1:ea:fe:ef:ab:c5:46:4f:3f:d4:61:59:f9:af:
94:c9:6f:c5:18:97:43:65:2c:09:3c:97:0a:55:12:6f:70:8c:
cb:6b:1d:f0:34:e4:84:9a:2e:60:1a:02:71:65:9c:d5:3b:74:
97:7e:50:3d:d2:86:3b:3e:ae:6c:b2:ee:ef:81:08:4a:cc:53:
09:02:6c:21:8c:04:be:67:ff:75:e2:51:d4:6f:86:28:94:83:
20:6e:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:07 2026 by rpki-client