Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa
File: cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa (raw, json)
Hash identifier: ncetJob5HMf4Vl3qJZ2P9dawdV/quEzzxrpsHmI7ueU=
Subject key identifier: D5:9F:C3:87:9D:0F:72:CF:34:BC:8A:23:09:29:A4:9B:38:F2:F1:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E44DBB4870D861AE10159CF6CBE7BB262AD209A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa
Signing time: Mon 26 Oct 2026 05:30:13 +0000
ROA not before: Mon 26 Oct 2026 05:30:13 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:44:db:b4:87:0d:86:1a:e1:01:59:cf:6c:be:7b:b2:62:ad:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:13 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1eb1313d1a14481d670496a32f8b46918dc042d9199e1a6acde75ac91f59af27, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:41:af:03:36:89:ac:54:39:2d:8c:5c:93:
8a:ca:7a:ab:d6:dd:1c:ce:5c:42:31:f3:34:ab:90:
bd:a5:5a:aa:90:5d:e1:11:4b:24:51:6d:93:e0:0c:
eb:8d:91:94:98:f2:e7:b3:11:f1:7e:09:5b:61:be:
2d:97:15:00:c8:2a:e7:39:11:0b:a6:29:7f:2c:17:
20:91:1b:13:1d:ff:09:9f:aa:8e:1c:c7:f6:e2:a5:
b8:db:00:a4:f0:98:67:72:9b:37:9e:ec:8f:28:e0:
89:04:6a:13:7c:65:26:a1:79:c5:dd:ff:05:f7:4b:
73:a4:58:e3:1a:20:51:aa:a3:57:a9:c2:bb:c3:ac:
a2:e9:27:dc:3f:ce:c1:7c:4b:4d:08:b0:0d:09:1f:
c7:93:cc:06:a4:c1:3d:d7:0d:c1:21:1c:d9:3e:12:
5c:91:25:8e:8e:41:ae:b1:65:d8:7b:bf:86:8d:3e:
cf:2f:27:7b:eb:0a:31:81:eb:2b:ac:50:18:1d:03:
a4:cd:bc:02:2c:5c:7e:5b:bc:13:b6:64:2d:45:b4:
3c:a6:b7:43:05:a3:d8:52:ae:63:48:e1:a0:ff:3c:
ed:d6:81:9f:8e:48:16:20:69:e2:83:bc:a3:7e:b7:
b1:eb:24:da:fd:2b:78:db:7a:ec:f4:be:b0:4f:7d:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:C3:87:9D:0F:72:CF:34:BC:8A:23:09:29:A4:9B:38:F2:F1:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb4a73e1-be6b-4cba-b130-a22bb39cf671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:a000::/40
Signature Algorithm: sha256WithRSAEncryption
21:a2:65:53:27:84:7d:6b:d0:78:37:c8:7b:6d:2f:9c:83:ef:
af:a8:49:d2:a4:f9:70:81:82:15:e8:5b:3a:5d:57:62:73:80:
57:27:29:87:12:1f:cd:b2:78:f5:52:0f:18:4b:33:f3:4a:77:
52:54:cb:33:76:c4:6a:02:a0:5f:04:a0:17:80:37:9a:cc:bb:
33:92:a2:2a:27:bd:f6:c8:b9:10:3c:2f:bb:65:66:cd:6e:14:
9e:5b:b6:bc:0f:4b:72:de:79:bc:4b:7f:43:38:e4:a1:64:6f:
79:a9:05:0c:75:de:b6:d9:74:01:7c:e2:af:96:f3:36:a9:d6:
1b:f2:86:c2:d4:9d:ef:e1:3a:d7:ff:07:23:db:c0:57:62:89:
6e:d9:00:19:3d:45:0b:b8:34:88:1e:80:be:0f:98:3d:cc:dd:
3a:08:8b:bd:f1:ec:11:a0:82:ec:73:8d:f5:f3:3b:5a:ed:36:
c4:d3:64:1c:d0:84:34:5c:4f:54:fa:8a:e4:9e:8b:56:37:82:
16:6a:1c:44:7b:ea:42:a8:54:35:c1:06:a8:e0:0c:d5:78:12:
a1:da:ea:49:bf:3f:98:c5:74:46:18:97:dc:ec:30:cd:5e:a2:
36:bb:c9:2e:d8:62:25:f1:76:f7:96:b1:d6:bb:88:5b:92:19:
60:23:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:57 2026 by rpki-client