Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
File: c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa (raw, json)
Hash identifier: CANz0j1dvS5w7F3KVvaU39pDciunZAhcrl+h44ZtCpU=
Subject key identifier: 5F:4E:23:A9:16:9E:7A:CF:BC:47:B4:B5:8D:A2:1B:F3:DA:27:CF:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 767AE9463BA4F69D5142FB46F4C56D268E4AE937
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
Signing time: Sun 11 Oct 2026 15:08:09 +0000
ROA not before: Sun 11 Oct 2026 15:08:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7a:e9:46:3b:a4:f6:9d:51:42:fb:46:f4:c5:6d:26:8e:4a:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=196f8e1fb5113386f11534c0e76d63941ea48a0adc0b6269d7899eede512897b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:17:6f:6f:44:40:06:91:d7:1c:39:85:ae:
be:25:d9:be:16:4b:11:2e:62:ca:15:e4:9f:f1:3d:
a8:9e:e5:a3:89:c6:f5:28:21:30:e1:a0:12:cd:fd:
fa:d4:22:ec:d6:41:1c:f7:aa:df:2c:39:67:cb:cd:
38:b6:d0:c6:39:36:e7:e6:b7:43:d8:28:9e:f5:2f:
78:39:9e:b2:d4:af:d4:56:e7:96:11:b8:85:e1:db:
e7:d4:ef:78:9f:49:89:a6:01:fa:04:50:06:58:24:
7c:0f:4c:78:10:cc:d8:f3:f1:39:4c:2f:d5:5c:e8:
ff:d4:e5:f7:99:ba:50:a0:fe:df:93:b7:1c:e3:5c:
ba:b7:c4:f5:9a:04:d5:d8:69:97:9e:71:23:68:13:
6b:92:60:10:cd:49:37:44:23:87:ab:64:12:60:1b:
dc:82:ee:7e:34:14:ed:fa:f2:da:15:fe:9d:5c:4d:
d8:f4:53:03:9c:f8:33:49:f4:01:10:15:fb:96:97:
5e:7c:ca:98:79:bc:da:99:bb:4d:6f:3e:c2:cc:23:
40:c3:6f:8b:56:6e:2f:3d:bd:f0:1a:5d:5e:f4:54:
5f:ea:d3:38:5a:31:03:b5:f0:47:c9:cd:08:27:1f:
c5:8f:c2:21:6f:90:6d:ef:76:99:f5:5c:ab:bd:77:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:23:A9:16:9E:7A:CF:BC:47:B4:B5:8D:A2:1B:F3:DA:27:CF:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5080::/46
Signature Algorithm: sha256WithRSAEncryption
9e:fa:e2:c1:08:0f:94:61:0c:41:4b:7c:3b:46:60:c3:ab:a5:
3a:f5:e6:51:8e:8d:da:2e:43:c8:04:4b:76:fb:2a:6b:56:13:
d6:e3:8a:20:7e:97:27:52:20:11:d2:fa:5d:59:ca:8c:a9:4c:
c0:5e:8c:b5:ed:82:34:b7:5f:4a:4b:e1:08:71:31:34:eb:2b:
8b:3a:bf:5f:ea:76:89:6a:e5:88:e7:74:7e:4c:59:57:a4:97:
9e:4f:55:b3:49:ef:bd:a3:6f:1e:0a:87:1b:dc:8f:95:26:c9:
82:3b:70:db:f2:af:43:07:74:f0:e0:68:af:67:31:34:13:0b:
06:79:55:a6:94:1b:c8:24:fc:29:ff:5a:5d:04:dd:2c:1f:51:
ec:5b:33:70:0d:9c:11:bd:84:4f:25:da:00:b8:eb:7f:a3:69:
2a:a1:9c:6d:69:a1:19:b2:7b:12:05:3b:3b:72:c8:78:ee:c1:
90:85:50:b0:bd:18:9e:6c:f9:64:3b:35:de:0d:b3:c4:75:a7:
aa:5f:c5:62:15:42:2e:6d:91:80:27:75:ff:fe:ac:85:46:90:
e9:1d:e2:ee:1e:06:5d:18:c8:d2:b3:c9:3c:b9:8f:20:f5:37:
b4:d3:c1:ca:0c:60:1d:63:ce:f6:69:e1:2e:bc:bf:0f:fc:bd:
c7:18:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:45 2026 by rpki-client