Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa
File: c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa (raw, json)
Hash identifier: 0hZ9Ir05FnNNANFcO9Hlad/vDZkk1U6a1+f12t0LUEc=
Subject key identifier: 1A:80:B3:66:FD:D8:29:45:73:4C:9C:06:17:68:A4:C4:BC:CC:E1:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CCA72B618C64361DC189E8E3B22525FAC1FDDB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa
Signing time: Mon 26 Oct 2026 05:20:48 +0000
ROA not before: Mon 26 Oct 2026 05:20:48 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ca:72:b6:18:c6:43:61:dc:18:9e:8e:3b:22:52:5f:ac:1f:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:48 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f89604a1bb5a1d31a35d69070ba0039f8cc302ebdea54455ccb2df7d1763c234, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:43:d9:ee:5c:d2:3e:ad:f5:d5:cd:a7:5b:
dc:45:d3:51:b4:78:16:c6:5f:83:36:0f:b7:f4:91:
9e:9e:c2:f0:50:75:c7:0a:e9:75:9c:0a:1f:d1:36:
95:8b:86:53:92:6e:91:b9:72:7a:37:f8:7b:f0:c2:
be:19:60:e2:78:56:78:00:c6:56:70:e4:81:73:52:
43:8f:61:ef:d5:3e:00:53:ce:85:62:a8:f0:a2:a1:
f7:9a:f8:2e:27:7f:fa:bf:69:95:d0:50:32:3a:6e:
76:aa:2f:1f:6d:8c:3c:86:ba:36:08:17:7c:d8:1c:
84:0c:bd:91:2d:4f:21:19:f3:82:af:62:d9:e8:dc:
d2:5f:98:88:86:ad:a6:e4:d4:61:23:fa:99:7f:fe:
33:38:d5:ae:9a:3e:41:1b:38:62:90:93:ea:73:be:
10:85:93:4b:af:5b:37:64:66:78:1a:45:e6:06:42:
77:a8:68:ff:4c:01:e9:f4:6e:bb:3d:15:4b:37:c5:
b6:36:03:b8:fb:39:98:ab:7f:29:f3:42:b4:c9:59:
c5:3a:aa:b3:d8:65:9e:7a:2f:4e:0c:b0:11:46:1b:
3b:66:bb:f0:d3:2b:bf:9d:27:b1:1e:7b:05:92:52:
7d:dd:ee:d6:c5:55:81:61:22:c1:9e:03:9b:e9:97:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:B3:66:FD:D8:29:45:73:4C:9C:06:17:68:A4:C4:BC:CC:E1:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/38
Signature Algorithm: sha256WithRSAEncryption
ba:2d:a5:95:45:e8:99:1a:f2:ec:5a:ee:17:cc:a0:a7:37:84:
be:88:f5:f6:4b:41:be:e4:cb:90:e7:02:f9:7e:93:2d:00:52:
71:c5:e9:ac:e0:57:8c:69:81:19:15:27:b4:a5:e5:07:9d:b3:
c1:93:66:2e:7d:3b:c2:f1:cd:b2:5e:cb:d7:0a:63:c5:fd:61:
4e:a7:76:35:b8:64:6b:06:d5:e8:15:f9:ca:8f:dc:1a:4a:48:
d3:0c:32:90:9a:27:65:ea:7f:63:81:b4:c2:a0:13:cd:a2:49:
6e:ca:63:8c:5d:ac:13:53:69:da:e0:6a:6f:5a:0e:2d:ed:a9:
2b:2a:ea:6c:09:1b:e0:09:16:a9:4e:d6:d5:2a:b9:a9:78:8e:
78:43:1c:18:e2:e0:36:7a:15:82:ad:88:fc:9d:96:29:1a:49:
d2:6f:3d:bb:bf:80:a2:7b:6e:06:c2:a1:2f:96:1c:f5:cf:6f:
16:7e:c4:3c:5e:bf:2c:58:01:19:b9:30:fe:46:d2:fb:f4:39:
ac:d2:e1:1d:4c:f6:4e:87:5d:04:22:de:08:10:00:bc:7f:ee:
d4:30:4b:e8:c4:a9:82:bf:b4:98:4c:1b:6a:f9:a9:fc:c8:7b:
c0:d1:20:8c:10:51:89:c0:d1:1b:3a:c6:ac:30:fd:62:e0:64:
c7:56:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:47:04 2026 by rpki-client