Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa
File: c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa (raw, json)
Hash identifier: i/jKpKqEl5Xb7pKR9ctIEEXptat20VyC+Eit1gYC5gM=
Subject key identifier: 4C:9D:5B:EE:79:5D:C1:70:9B:34:82:6B:21:70:F2:A1:28:1A:FD:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78A62689DEF9BE20BFCFDB84DEF651EEECE5D720
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa
Signing time: Mon 26 Oct 2026 05:03:15 +0000
ROA not before: Mon 26 Oct 2026 05:03:15 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a6:26:89:de:f9:be:20:bf:cf:db:84:de:f6:51:ee:ec:e5:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:03:15 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8cfccd082e0a72e9b80cc6b2e98c7bf7f8b4d870fd10a509372ade243cf4f9a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:7d:77:6c:46:cb:f5:de:28:72:34:b1:91:
c6:a5:47:74:42:6b:db:25:6f:d3:fc:b8:3d:8b:9b:
27:58:7b:1f:cb:8e:81:90:e7:bf:d6:7d:a8:af:0d:
60:d1:0b:07:42:20:38:81:d3:97:70:c1:40:99:e7:
a4:5b:11:55:1a:eb:f9:ac:dd:7b:ca:4c:50:c2:74:
12:9e:ce:24:7f:d0:a6:3e:39:4c:3c:b5:1c:e3:b0:
92:9b:99:f1:4d:78:da:4d:62:f1:7c:cb:64:ec:73:
a9:57:1c:b1:fb:21:9f:df:38:85:50:5a:b8:dc:27:
9f:75:f1:d6:3a:08:43:68:6f:64:53:e2:84:91:30:
9b:3f:3c:84:1a:f7:08:b0:dc:13:90:82:fe:c0:27:
8c:73:7c:82:83:84:cf:be:5f:06:86:9c:dd:c7:5b:
6b:eb:24:9e:da:b5:01:2e:52:04:2c:a1:40:e2:d3:
c3:a7:b3:98:82:f0:87:94:62:ad:02:06:4f:8f:99:
3e:e5:39:a5:44:4b:b1:cc:e3:1d:61:1e:83:7d:00:
cf:25:bf:e5:72:5f:6c:a9:4f:f9:e1:10:51:82:94:
a9:94:08:e0:7e:6c:e0:58:bd:cf:bc:d0:e6:e9:42:
bb:ff:1e:b4:23:32:02:25:72:10:59:44:16:89:ec:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:5B:EE:79:5D:C1:70:9B:34:82:6B:21:70:F2:A1:28:1A:FD:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:c000::/40
Signature Algorithm: sha256WithRSAEncryption
a9:96:12:37:8a:51:ee:61:96:26:f3:02:e7:68:8a:62:1f:3c:
e6:01:13:5b:cb:9d:3a:99:2f:8f:1d:10:2b:40:6b:2e:8f:ef:
ab:5f:93:95:31:5b:5f:a8:c2:94:59:05:a8:39:b8:99:db:65:
ce:b0:c0:19:0a:4e:f4:9c:e8:08:58:17:01:22:d4:30:ac:ff:
56:7b:6b:cb:f1:cf:fc:17:2f:e6:4a:cc:73:44:4e:b4:81:6e:
01:00:fc:ae:e0:e9:5f:bf:3a:3d:cf:f3:5f:07:8d:1f:56:98:
d3:8b:18:b3:bf:0f:7d:ee:d4:6a:0f:36:23:80:8d:de:7b:d0:
6b:11:96:56:97:77:8a:1c:37:d2:37:37:a4:8e:b3:3f:85:08:
a6:cd:11:72:47:65:fc:71:cd:82:a0:b3:57:be:86:93:0e:de:
86:c8:3a:d4:16:ec:95:f2:23:87:51:18:6e:c6:11:28:af:22:
9f:68:4d:43:e9:0d:e7:4c:18:52:85:21:d3:d6:da:e0:ee:90:
45:a0:28:40:18:76:e8:63:c3:34:79:f0:f8:72:ef:ff:bf:a3:
55:e4:5c:b7:da:5e:4b:21:84:8d:d0:3b:95:bd:67:46:18:0a:
18:05:cc:9b:23:a5:1f:a0:f3:34:62:51:10:de:70:3e:2d:f4:
6a:a4:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:46 2026 by rpki-client