Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1bcdcd9-85b3-40ef-a75e-aaf3664fe9fa.roa
File: c1bcdcd9-85b3-40ef-a75e-aaf3664fe9fa.roa (raw, json)
Hash identifier: PNUWueXT1PMXMIKFoABsRAFX8u0yMseZV2mvJSZMXBs=
Subject key identifier: 60:B0:A9:EC:5B:33:71:EE:9F:54:8D:07:1D:98:57:42:8D:A2:8F:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18F2563CB9D0490719233B7AF49C7AAC39FD0594
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1bcdcd9-85b3-40ef-a75e-aaf3664fe9fa.roa
Signing time: Sat 31 Oct 2026 00:02:44 +0000
ROA not before: Sat 31 Oct 2026 00:02:44 +0000
ROA not after: Fri 29 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f2:56:3c:b9:d0:49:07:19:23:3b:7a:f4:9c:7a:ac:39:fd:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 00:02:44 2026 GMT
Not After : Jan 29 23:59:59 2027 GMT
Subject: serialNumber=40a4542a17304050cc31931a70b31fe9bf71e9d3edc29e24940ffffadddf62c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:63:75:18:f1:61:a0:bf:f3:05:58:84:32:
91:f0:3f:30:74:f4:aa:c1:ed:bb:bd:01:4d:0b:64:
f1:18:84:d2:eb:73:2a:0d:38:ea:cf:2a:da:b7:1b:
df:26:52:88:77:d7:01:75:fd:f2:a6:c9:39:17:a1:
15:09:68:07:b0:1e:b0:55:88:2e:49:00:09:65:a9:
37:c3:6a:f8:4c:32:3f:79:ee:f2:e6:6d:63:01:76:
8a:32:7e:30:74:91:9a:dc:18:4d:67:58:ac:40:4f:
d2:03:12:86:e2:af:c9:fb:a5:a1:be:6e:cf:ea:c1:
04:35:a2:c2:91:fc:ea:8f:25:a5:8e:95:a4:52:c5:
da:74:c2:55:79:54:63:17:cc:17:30:15:11:c4:8d:
e9:f2:05:71:cc:0a:ba:aa:58:8f:72:ba:e2:4d:ce:
64:98:0e:0b:f2:16:07:5c:17:26:a8:e8:32:d8:4e:
ff:b2:2d:9b:20:a2:5e:7a:39:02:47:c6:9b:e2:25:
d4:f4:d8:99:0e:7c:39:6a:fb:71:b2:20:70:c2:93:
20:1a:08:5b:8c:95:1d:4d:54:f6:7d:e5:96:da:94:
60:b1:aa:19:37:09:f6:31:0a:74:6d:e0:e4:58:9d:
e3:5f:e3:69:49:d9:fb:6d:81:9c:06:a0:4c:fc:53:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:A9:EC:5B:33:71:EE:9F:54:8D:07:1D:98:57:42:8D:A2:8F:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1bcdcd9-85b3-40ef-a75e-aaf3664fe9fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:8800::/40
Signature Algorithm: sha256WithRSAEncryption
17:e0:98:9b:90:99:ff:46:09:8d:fd:08:fa:88:ef:20:82:17:
b1:1d:29:28:e1:ed:01:42:96:ff:34:ea:74:41:24:69:51:46:
7d:16:6d:db:18:4d:0a:c8:f2:72:00:c6:ff:0f:44:40:60:3c:
48:1c:cd:77:11:57:b4:8f:8d:29:17:1c:e7:f5:e1:02:fb:c4:
8e:1f:4b:4d:c7:ee:42:fa:08:0c:e2:1a:89:a2:6c:b6:43:c6:
4b:3b:aa:7e:80:f2:3f:5b:9b:c2:a5:af:cc:55:cd:7a:62:4b:
a3:39:ad:26:df:05:ef:fa:01:64:d2:b3:9f:b1:06:84:17:73:
52:2a:a7:6b:49:e5:a3:9d:15:28:9c:cd:1b:74:c3:29:00:e2:
e1:55:80:81:fb:d3:51:34:ff:d9:b7:fd:05:5c:71:1c:5b:3a:
b5:34:a2:41:95:35:c2:b1:be:24:a2:17:08:66:5d:c9:1c:c3:
77:d5:88:12:89:23:d2:85:cd:7e:c6:2b:b8:b7:c4:81:3f:e0:
76:bf:79:4e:b5:ff:00:57:d1:50:10:83:4a:77:08:05:e7:bf:
95:7d:63:44:20:18:85:27:95:f4:53:87:85:f2:a2:26:6e:cf:
31:19:d2:92:db:04:e7:cc:e7:3f:73:94:df:69:20:3c:18:0d:
5e:5c:1f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:18:41 2026 by rpki-client