Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb5ee4c1-dd36-49a9-8b09-89d58aa8035e.roa
File: cb5ee4c1-dd36-49a9-8b09-89d58aa8035e.roa (raw, json)
Hash identifier: IBhTN6AxziKKx5ViYDZhrvx+d6uJHg5mA6sym1Hc4dI=
Subject key identifier: 67:77:C8:43:46:48:AF:5E:52:38:28:66:E1:0C:C1:F5:75:98:5C:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0595E664731D94BD4CCA4114A0FF69CBA6F75DAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb5ee4c1-dd36-49a9-8b09-89d58aa8035e.roa
Signing time: Mon 26 Oct 2026 05:30:45 +0000
ROA not before: Mon 26 Oct 2026 05:30:45 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:95:e6:64:73:1d:94:bd:4c:ca:41:14:a0:ff:69:cb:a6:f7:5d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:45 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=34967bbb7a997b66ac463d60f241ff9e54eec86cd785b0f6d4198407e83948fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:5b:ef:44:cb:37:b0:8f:96:b0:57:50:9a:
35:98:76:26:71:01:9f:82:d3:f2:12:da:66:57:f7:
50:b5:11:99:fe:89:e5:3a:ad:00:65:bc:17:73:20:
1b:d5:0b:1f:9f:cc:dd:6a:e0:d7:3b:87:86:6b:35:
bb:9d:85:8e:1e:ba:9e:d3:3c:cd:0e:d0:3e:99:b2:
50:c6:24:c6:6e:45:62:47:f8:0e:e1:2b:9a:8f:34:
b4:bf:0e:0b:8a:90:c7:99:49:df:c1:2d:a1:eb:d1:
25:f8:91:af:1d:c6:2e:c0:8b:d0:c5:28:6b:a0:b3:
34:0a:1b:97:65:90:e1:5b:bb:76:02:ff:26:50:19:
fc:42:e4:ae:43:21:ca:56:83:af:3f:71:fb:78:c2:
92:7f:37:cf:21:83:66:d1:e6:b8:47:da:c6:68:9b:
0b:9a:ba:f3:2b:7b:b6:35:8f:04:44:a7:60:ad:f1:
42:62:06:a8:aa:bc:bf:da:4d:77:35:bc:43:3c:23:
f7:cd:15:a9:34:02:a6:0d:ae:b4:31:a7:4c:48:13:
78:8b:b1:82:3c:da:fa:16:d9:64:c0:97:c2:56:5f:
b5:eb:4a:44:5f:c4:74:26:c0:c1:5e:d7:3f:da:1f:
e5:e1:b8:89:db:3c:8a:de:e6:bd:f6:1d:59:a2:12:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:C8:43:46:48:AF:5E:52:38:28:66:E1:0C:C1:F5:75:98:5C:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb5ee4c1-dd36-49a9-8b09-89d58aa8035e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:c00::/38
Signature Algorithm: sha256WithRSAEncryption
7c:3e:16:d6:94:aa:24:1c:45:90:fb:6d:ce:2f:2c:31:ad:4f:
f7:02:a1:67:91:ba:2b:fa:f0:a4:bf:53:a8:2e:16:1a:ad:89:
80:fe:7b:ab:3a:fa:cc:34:00:c2:a6:6c:51:8f:5b:c7:cf:cb:
8d:02:be:96:e1:37:8d:a5:d8:33:45:b5:45:96:b2:ef:07:cb:
b4:30:9a:02:38:76:0f:f2:65:08:27:58:f5:db:a0:0f:1e:c0:
e5:62:6a:75:9d:db:19:99:31:8e:28:e1:69:bc:e8:6a:61:b5:
32:68:b2:ad:98:ba:98:aa:4e:1c:f5:94:b6:53:84:0f:fa:2d:
b2:e9:62:5f:72:4f:05:06:c1:79:b4:8d:99:46:2e:0b:3a:e8:
4f:e6:e1:bf:4f:0f:b8:e3:9e:ee:20:94:e7:5b:d5:25:c4:4e:
35:9c:ef:8f:07:bf:0b:fb:ec:4d:d7:82:6f:29:e4:8b:f5:09:
c4:95:6a:3a:5a:84:5c:c5:46:b4:5b:ab:2d:9b:fc:ea:1b:17:
9a:6d:d7:22:0d:53:83:1a:35:94:9e:4a:38:0c:b1:b2:fd:9c:
09:43:8b:12:ab:cb:87:b7:c8:16:46:d3:d9:b1:31:60:1c:d0:
ca:bf:bc:d1:dd:e6:09:cb:11:a9:ff:60:45:ed:75:2a:d8:ff:
e6:aa:ca:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:31 2026 by rpki-client