Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
File: c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa (raw, json)
Hash identifier: zUUpoN1bEwVebmpX0x15hT6534GBFaNOtCH+vK90i6I=
Subject key identifier: 7E:83:75:66:F7:41:30:C6:1D:A4:5C:1B:9B:A8:C5:A5:5B:16:B7:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F3B825ECF04EE7080CFD91F48B8C8398BC81EEE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
Signing time: Mon 26 Oct 2026 05:10:18 +0000
ROA not before: Mon 26 Oct 2026 05:10:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3b:82:5e:cf:04:ee:70:80:cf:d9:1f:48:b8:c8:39:8b:c8:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=27d1b48f7075490bbe8b04170d70258cb5ecfe9d7de5ba3a3c08e1177b72f701, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:08:6e:e8:0e:42:0c:b4:21:ff:ac:6d:12:
bf:97:4e:30:6b:54:8a:49:e0:0f:44:32:a5:a5:95:
dc:e9:56:2b:dd:2c:0d:a8:5f:10:f4:ab:dc:10:f0:
61:39:be:a9:b8:ff:4d:33:16:20:33:c0:0c:d1:5b:
72:fb:a5:b9:69:2a:fc:26:47:18:ef:7c:a8:4e:62:
cb:d2:3f:d0:a5:1f:9f:2f:ce:41:0a:53:8b:51:f4:
c2:20:95:ab:47:e5:0e:ea:29:c8:68:9d:3a:4f:fd:
95:94:1a:37:21:c6:a3:f0:63:28:44:bf:e3:89:0e:
37:63:2b:bc:5b:c7:01:0f:b1:10:d6:53:61:b4:5d:
16:f9:25:49:fe:a9:d5:5e:6c:64:c2:34:8f:fc:cd:
36:e3:e6:d1:6b:da:a3:1b:43:db:eb:15:0b:2d:30:
9d:eb:7a:d6:d1:09:45:87:78:fc:10:28:16:09:59:
9b:8d:23:44:d0:1e:f0:dd:bb:b6:41:a9:5e:6f:d5:
1b:78:93:cc:3f:d3:a0:c2:de:10:2e:22:d1:bb:49:
0d:15:f7:7e:e7:55:3b:fc:7e:63:2b:c9:bc:7b:44:
ed:f0:0e:19:19:d6:b8:cd:44:6d:51:2a:bd:d9:6f:
a7:44:7f:f3:0e:8d:7a:86:9f:37:74:67:4d:7d:35:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:75:66:F7:41:30:C6:1D:A4:5C:1B:9B:A8:C5:A5:5B:16:B7:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3f4b0e0-df6d-481a-8d75-7709e545d1e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:7c:f9:94:71:6a:31:f7:2d:5f:d5:a1:37:cc:31:93:fa:51:
9c:6e:ed:1a:e2:b6:c7:62:ed:64:70:4a:49:bd:4d:01:08:63:
7a:61:5b:b3:6b:be:93:14:a9:99:ce:e7:95:4a:d0:be:4f:39:
64:a1:3f:aa:02:1e:88:fa:10:0e:b8:fd:b2:b7:44:be:8f:c3:
65:28:3e:30:db:3c:63:55:47:2f:01:18:2f:72:1f:c0:34:09:
99:ab:ff:42:ef:14:a3:fb:58:03:73:51:d6:e0:82:55:4f:db:
cc:a5:51:54:51:b5:7e:49:8f:37:bb:f6:21:e0:7e:43:52:2a:
bb:3b:bf:8a:b0:5f:73:1c:40:64:5b:e3:2b:2d:8a:4f:1c:de:
f6:b9:fe:7b:67:7e:e5:41:d8:ae:2d:35:e9:03:95:cc:2e:7d:
c1:35:7d:49:a6:dd:57:23:61:f2:ab:af:37:b4:fb:00:fe:af:
ba:71:7c:b6:a0:70:2e:1e:e8:9c:a5:6a:1d:7d:c3:4a:d7:05:
82:99:8a:3b:38:79:94:ed:ff:86:30:de:bf:56:f2:e5:bc:70:
e1:11:55:11:7d:47:3e:47:08:32:95:73:a9:5a:38:68:8d:34:
e9:41:84:b3:95:54:0d:40:8d:08:96:39:8a:9d:67:54:94:9d:
d1:61:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:48 2026 by rpki-client