Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
File: c3736673-707b-4dfc-aca4-88dcbb52a94d.roa (raw, json)
Hash identifier: XDxAY3NZc26icaCkC5RYbgmVHpIlO6N5kxIR0ZjUkWg=
Subject key identifier: 11:45:C2:11:53:2B:61:CD:22:8D:1D:B1:4E:B9:59:EF:D1:A3:AA:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64E46682D42CEFA48D0D6B13E36DB75763305F4B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
Signing time: Sat 24 Oct 2026 02:02:57 +0000
ROA not before: Sat 24 Oct 2026 02:02:57 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e4:66:82:d4:2c:ef:a4:8d:0d:6b:13:e3:6d:b7:57:63:30:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:02:57 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=a17f9536f3990dd4608f298bae63974d1ed0f1ceaf9f7113027b353c27982e75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:0f:18:d4:9a:cf:8b:4c:6d:e2:d8:a9:15:
33:a9:4f:e5:87:b0:b5:33:20:9f:0f:e1:6d:b7:2e:
01:02:c9:3c:fd:3a:c4:22:05:dc:ba:8d:4f:f1:35:
7a:9c:66:54:cb:e5:1d:1b:f6:00:83:78:cd:1c:c1:
0f:56:c4:0b:09:c3:65:b7:2c:5c:7d:de:7e:ea:13:
d9:e9:b3:5d:0f:e4:f1:13:ec:f9:e1:39:fb:71:a8:
3e:db:ff:bc:a8:13:30:7c:62:d1:f1:d6:05:81:96:
57:68:70:57:8c:de:f1:8e:16:ed:00:3d:68:91:45:
8c:a0:ab:6a:f1:10:d2:fd:42:b3:04:c1:4f:e8:d5:
fe:93:1c:88:99:08:3f:5c:f6:70:ba:74:26:ba:d4:
fe:42:5c:00:85:5d:22:d3:e6:4c:7f:7d:98:f0:95:
b9:69:d0:d6:c1:56:03:bb:eb:ba:b9:7e:a8:11:3a:
c3:f0:e2:66:dc:54:0e:1b:2a:91:09:be:5e:ce:fc:
be:dd:28:70:e9:a1:40:74:e6:be:10:be:f2:9f:fd:
85:ee:22:2a:99:1a:48:d6:53:9f:77:c5:40:37:4b:
d3:eb:95:5f:41:2e:cf:78:f9:df:bf:c6:22:87:51:
7d:b8:4d:a5:85:51:35:e9:39:41:09:33:23:65:4c:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:C2:11:53:2B:61:CD:22:8D:1D:B1:4E:B9:59:EF:D1:A3:AA:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:800::/40
Signature Algorithm: sha256WithRSAEncryption
77:eb:0e:58:f3:f6:64:3e:be:86:05:98:25:8a:a9:30:06:df:
34:1b:9d:e6:38:6d:10:0f:3b:27:f6:f8:22:6f:0c:4d:52:06:
89:7a:70:13:e6:9e:df:3b:e4:94:2f:ed:88:72:d0:d1:92:09:
09:7d:1c:8d:5c:59:5b:00:e4:fd:8d:13:9d:e0:ca:b9:31:b1:
b2:5b:94:48:fe:57:ed:a9:97:a2:04:57:ff:45:3b:31:96:7f:
df:8c:56:5e:27:ae:81:d9:e1:68:bb:bd:e2:24:2b:7f:db:bf:
43:4a:39:d8:3e:35:2a:b3:32:1d:12:9a:61:e6:5d:5e:8f:1d:
36:fa:78:37:f9:4e:78:fd:12:25:e8:46:73:29:3e:de:00:48:
94:41:ba:56:6c:fe:95:60:24:bf:2c:5f:45:7e:d7:02:8f:e5:
b2:b7:c4:4c:68:dd:df:b2:51:7e:40:3c:50:1f:3f:24:f7:2e:
6f:7b:4c:17:99:e4:bf:91:10:82:02:a0:3b:e2:14:ff:9d:e3:
fb:39:e3:55:b5:14:77:5e:c5:64:eb:2c:4d:09:d0:2d:ca:c0:
32:06:20:f3:10:1b:96:b4:2d:86:af:26:07:d6:42:27:13:b0:
65:88:dd:33:51:89:ca:8b:46:2c:6e:c5:91:f4:2e:2f:c5:39:
b3:43:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:42:45 2026 by rpki-client