Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c10198a9-e934-4497-9fd6-1ed37399bccb.roa
File: c10198a9-e934-4497-9fd6-1ed37399bccb.roa (raw, json)
Hash identifier: 9aSCcNLlc85jJ00yxeTlYrVLSWiMWZV97qi0RXh+4qg=
Subject key identifier: 61:C7:83:A8:D0:D2:AB:77:A5:50:A4:C3:5A:2B:18:4B:F5:D4:DF:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7930B6B41A7FC5AF63F0FE545BE0D56D16AFE682
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c10198a9-e934-4497-9fd6-1ed37399bccb.roa
Signing time: Thu 29 Oct 2026 01:02:20 +0000
ROA not before: Thu 29 Oct 2026 01:02:20 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:30:b6:b4:1a:7f:c5:af:63:f0:fe:54:5b:e0:d5:6d:16:af:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:20 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=57c8513dd5073a0dd00a58c96be4e969d0969bdbb80c248d9a9957a470960023, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:c0:3e:ff:21:c2:10:a0:e5:3b:8f:0d:2b:
b3:93:cf:2b:55:be:fe:33:cf:28:05:e6:b7:ef:58:
00:c3:6c:5d:6c:6d:5f:4a:2e:a4:6c:50:a8:d1:95:
ec:ad:cd:a0:ea:01:79:a3:35:c6:0f:d6:8d:7e:8a:
d0:ce:26:7c:f0:55:13:e0:42:52:c6:5b:d2:c8:11:
a9:7c:89:97:e3:8b:a3:a5:ee:b2:ba:20:93:e2:7a:
d4:ea:02:42:2c:f4:d1:3b:e8:17:5e:19:ff:e8:b1:
43:2e:41:91:2a:9a:ae:ab:dd:57:56:47:93:33:46:
18:34:2b:55:3c:16:d0:db:df:c9:9c:72:36:6c:3b:
c3:07:85:01:a5:a9:57:85:69:14:ce:c3:b7:8b:a1:
12:bc:98:87:fc:98:c0:02:70:c3:b8:31:a9:eb:77:
5a:c4:43:7a:aa:4b:9d:e3:34:3d:fe:b1:96:5d:c7:
60:0b:cc:2a:7d:a8:e9:80:d2:d2:87:f7:42:00:46:
9c:1d:22:a5:0e:7a:79:fa:4f:6b:41:bd:31:6a:fb:
16:c5:f6:51:68:df:75:4d:06:ed:ff:d8:28:91:40:
8f:84:2b:33:45:42:00:dc:b6:48:06:22:76:e5:36:
6f:17:d8:8b:ef:1e:97:0b:8a:93:5d:3f:97:6a:a1:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:83:A8:D0:D2:AB:77:A5:50:A4:C3:5A:2B:18:4B:F5:D4:DF:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c10198a9-e934-4497-9fd6-1ed37399bccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:800::/40
Signature Algorithm: sha256WithRSAEncryption
85:a6:ed:c6:e1:8e:0a:6a:23:47:ff:3e:50:5b:46:24:06:dd:
5c:4d:74:b4:2d:24:13:b7:b7:da:e5:3f:ab:28:e6:da:e9:bb:
7f:9b:02:84:82:ce:ef:10:20:af:7f:62:97:de:ad:a4:dd:98:
c6:3b:9f:3d:88:29:fb:ac:15:c6:0c:5a:8e:2b:d1:87:79:4f:
2d:8e:e8:88:8a:d1:44:ee:ec:bd:90:bc:a5:f1:8c:34:dd:d6:
87:af:2a:09:07:ef:8a:a9:4e:3e:e7:08:64:60:68:ec:4e:d9:
3f:fb:0d:a4:44:96:82:b3:3a:cd:1a:72:8c:da:9b:a1:f7:52:
6b:f8:73:a6:a8:00:6d:f6:f5:52:36:70:19:c9:f6:ab:55:b5:
37:79:11:cb:d3:b0:cd:57:75:e2:a8:d2:6b:13:a1:98:09:cd:
ea:ca:af:be:35:58:35:6a:d8:96:a2:37:f6:b0:33:57:c6:de:
5a:42:8e:e0:88:54:35:71:1e:fc:72:24:a3:e2:97:bb:08:5d:
03:04:68:09:b0:0a:01:e8:1e:fe:80:18:ce:c1:7b:f0:53:dc:
57:4a:bb:ba:bf:1a:80:0c:05:e7:8d:84:8f:97:38:6f:6a:51:
82:e4:1c:c2:26:46:07:19:8e:c9:d8:dc:21:f0:af:97:98:eb:
cb:20:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:26 2026 by rpki-client