Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb352ba2-1c61-4993-802d-895dc73880c2.roa
File: cb352ba2-1c61-4993-802d-895dc73880c2.roa (raw, json)
Hash identifier: yJZx34NVEqv8HgWZRTXzS7+CI35/alMkC/Q8XaEsHQ0=
Subject key identifier: FF:68:62:7D:5D:83:89:6D:6A:4A:F9:B1:4D:64:5D:99:BB:5B:18:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C9A9E24C690A027FB9352C75EAF31E98F610ED9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb352ba2-1c61-4993-802d-895dc73880c2.roa
Signing time: Sat 24 Oct 2026 02:03:01 +0000
ROA not before: Sat 24 Oct 2026 02:03:01 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9a:9e:24:c6:90:a0:27:fb:93:52:c7:5e:af:31:e9:8f:61:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:03:01 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=71059bd2268f37000856fdd6cee137e41f880799997c5a655560f030edb8c79c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:09:56:ab:1a:aa:a0:09:42:90:24:b6:9f:
0e:49:27:df:ed:48:6b:15:63:df:71:ff:9f:d9:4f:
66:45:7d:7e:10:4f:ec:e0:54:aa:28:e0:b6:df:cc:
fa:62:f5:26:b2:c2:87:57:6d:e2:1c:d1:09:f2:48:
f9:0c:85:b1:1e:eb:52:de:77:fd:0d:ee:5a:59:b4:
bc:35:d3:d0:64:4e:b9:c0:6f:aa:b3:25:23:58:86:
71:c4:b2:91:4c:9a:d2:88:9c:f1:4f:9b:37:98:60:
92:63:3c:91:a6:a0:3d:c6:d3:78:7b:14:ba:2c:53:
44:71:68:07:4d:d7:86:7c:1e:5a:ce:49:d5:f6:84:
90:bc:ef:b8:f8:5f:73:87:17:e0:ac:be:e9:50:4f:
17:2f:6d:78:88:f0:69:c6:15:cc:49:aa:8c:89:03:
5a:cb:ef:41:5d:e7:86:fe:d0:2e:0d:28:a7:32:53:
aa:c9:5e:60:85:f9:b1:03:1d:9b:47:20:cf:c5:6e:
8e:56:f4:49:d9:d9:25:3b:65:9c:c3:19:1d:e9:e3:
cb:91:39:83:47:67:fc:c6:4b:8b:c6:e3:f3:3c:68:
43:ee:28:b4:ca:c7:11:fe:87:cb:c1:04:72:ad:ef:
e1:d9:9a:ea:b9:ba:ff:35:b1:ae:10:00:f0:6d:90:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:62:7D:5D:83:89:6D:6A:4A:F9:B1:4D:64:5D:99:BB:5B:18:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb352ba2-1c61-4993-802d-895dc73880c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:800::/40
Signature Algorithm: sha256WithRSAEncryption
87:48:3f:98:16:b7:df:41:e0:b7:01:14:ec:cf:03:a6:e5:41:
2c:d8:dc:e9:9b:b8:ee:04:fb:d7:bb:e4:b1:72:b3:60:d6:b3:
bb:94:0d:6f:ba:bb:2a:4f:91:ca:cd:a1:2d:9c:91:ef:89:56:
48:95:8b:6e:80:f2:0c:e3:80:dc:8f:45:26:0d:d8:ae:b9:3a:
44:49:58:b3:e9:33:ec:2b:9c:16:39:5f:d6:a5:a9:a6:d3:27:
0d:4a:d8:05:d1:80:2c:ce:1b:bd:1c:8b:f0:52:64:a1:80:7a:
0b:e3:b7:25:24:8d:1e:26:3a:7c:5e:44:59:d1:34:96:e8:c9:
0f:9d:23:b6:c3:3d:41:a8:bf:fc:25:7a:a3:64:75:84:90:1a:
53:9f:e3:7f:89:80:4a:ed:81:02:ad:5b:c0:fa:25:44:cb:8f:
0f:07:22:a4:ab:49:9b:85:f2:12:12:6a:51:7a:5a:3b:91:9c:
1a:47:a5:58:84:09:2c:36:79:36:24:d8:75:7c:71:e5:13:4e:
1f:6f:3c:0d:4a:b1:41:3e:80:fb:bc:25:a8:30:14:9d:1e:e9:
55:ac:33:4b:68:6e:c2:5a:c6:cb:7f:5b:ea:7f:2d:f6:75:77:
a1:de:24:74:8f:f9:10:c7:72:0b:8f:61:ea:0c:f1:d0:0e:db:
6f:dd:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:09 2026 by rpki-client