Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
File: ce04c6c2-3994-4b71-a579-ee490d4b125b.roa (raw, json)
Hash identifier: DbYTraX/NQRHMQZFsHQFgasldpotDvnV+zPJ8Iq3xNI=
Subject key identifier: FA:19:00:57:10:09:A4:B0:FA:AF:B6:C5:8B:58:C8:BC:59:56:A3:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54FCED18B443AA4575C7D41F4B6CDF7A224B730A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
Signing time: Thu 22 Oct 2026 01:40:09 +0000
ROA not before: Thu 22 Oct 2026 01:40:09 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fc:ed:18:b4:43:aa:45:75:c7:d4:1f:4b:6c:df:7a:22:4b:73:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:09 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=55d5bd0a2e2e5da3bb8a54889e410c7c6586480bd9944bce418712c994742aa8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:04:57:35:f5:37:59:5b:7b:be:97:39:34:
e5:86:a5:21:a7:1d:a9:15:c8:84:a6:a7:00:b0:7c:
15:92:f5:92:80:b8:81:b5:db:b6:b1:dd:51:33:24:
96:b9:bc:f3:6c:ab:65:c4:df:d6:23:d8:6a:7b:25:
01:53:8c:2c:6b:70:76:69:a6:c4:b1:0e:ba:44:ab:
b3:1b:03:f2:ae:90:01:13:da:8b:78:eb:d5:3f:47:
cd:a4:48:ac:9d:5d:25:69:f7:aa:87:e8:4a:c1:3b:
b4:55:e2:9c:48:d2:6e:db:23:e6:a1:0b:01:c7:ef:
f7:12:f4:26:18:b9:04:33:d2:79:85:4c:65:f9:4d:
d0:5a:bd:48:e1:3d:7f:57:bd:31:1f:0e:90:9e:40:
51:5f:77:7a:41:5c:c3:d5:60:78:6f:5a:10:e5:83:
7e:04:1b:fe:73:9d:5b:4a:c0:42:ca:e2:26:38:1c:
25:35:a2:a6:23:b5:68:9f:89:7e:4e:56:ad:ac:6e:
eb:c7:ed:70:14:35:3e:31:58:d0:cc:8b:79:43:c4:
0e:67:7a:95:08:18:6f:6a:4b:ae:f9:3b:a7:a7:ab:
a9:12:a0:32:1e:13:3d:1d:b8:37:8b:ce:6a:96:77:
36:a2:8f:04:05:d5:9e:77:05:3a:b5:b7:ea:f9:70:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:00:57:10:09:A4:B0:FA:AF:B6:C5:8B:58:C8:BC:59:56:A3:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce04c6c2-3994-4b71-a579-ee490d4b125b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:f000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:61:76:fb:de:19:7b:2a:88:0c:fc:d3:2d:f1:ac:59:64:96:
05:22:47:a3:bc:b4:b8:c2:76:e6:d1:5e:7c:18:2b:39:c9:1f:
1c:7f:39:de:f2:72:2b:48:89:61:52:6b:3c:24:49:37:82:86:
d3:75:1c:14:31:5d:2c:21:3a:08:7c:66:a9:c1:e0:31:e5:40:
fd:73:b1:1e:f8:05:e5:45:c7:2d:92:b9:6d:3b:79:5a:f4:b7:
ff:df:6b:e3:a4:c3:bc:07:ea:3f:d9:7a:f3:3a:8f:1f:6f:d1:
5b:36:a9:18:1d:7e:d3:3b:d6:f1:6e:b3:fe:ac:57:05:df:ea:
5f:6d:4a:73:4e:df:5f:c6:5a:a7:d6:11:67:e3:23:dd:20:f7:
a1:c8:10:77:04:65:bf:84:d6:4a:1b:d5:60:8f:4a:64:20:8b:
26:98:56:41:58:8e:88:31:fa:54:1b:b1:68:7a:42:37:65:2e:
5a:23:29:e0:6c:bd:b0:48:cc:1a:e0:04:b0:c5:88:c9:dc:bc:
59:4b:82:08:e7:e9:01:3f:6a:62:3c:5d:ba:f0:ae:09:71:71:
05:2c:6c:e1:f4:c0:b7:44:86:a8:97:32:b6:25:fe:2c:47:46:
ea:84:5d:4a:12:61:b1:2f:1b:4d:89:2f:fd:de:f9:16:a3:32:
6a:94:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:26 2026 by rpki-client