Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
File: cead5bc0-2620-45bc-b97b-adb00020a426.roa (raw, json)
Hash identifier: Tgw3FfWz6DQHLNYHuzcLhqSNYY8i979LfWsOv6EjrzY=
Subject key identifier: 85:B4:94:0A:3D:BE:4C:6D:E5:55:24:B9:81:C1:F0:85:F7:C4:49:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CC722363F0411965BB5A34EBCBC0512160DA677
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
Signing time: Mon 26 Oct 2026 05:30:46 +0000
ROA not before: Mon 26 Oct 2026 05:30:46 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c7:22:36:3f:04:11:96:5b:b5:a3:4e:bc:bc:05:12:16:0d:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:46 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=926614a0fe9eeb759f6463aca578777f8480837f5b701b9643e6edb6cf29ee99, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:d6:a6:18:b2:66:ae:24:62:4c:c0:a6:1c:
8e:da:82:d2:62:8e:02:3f:f9:44:e3:fc:79:be:eb:
33:1a:bd:10:09:4a:97:93:95:13:ea:9f:43:d3:50:
c2:84:60:10:97:ae:90:52:5d:15:11:80:ed:e9:bb:
f8:e0:7c:4c:9d:80:28:50:03:49:65:43:3a:18:f5:
44:d3:ff:97:fd:9a:2a:a3:d2:ca:59:94:90:54:6d:
f9:5f:82:f6:1a:d9:72:8f:1e:94:3a:49:a2:9e:86:
7e:c5:4f:43:d8:b8:3d:1e:01:8b:77:40:28:48:72:
ec:7e:5c:c8:b9:ff:f9:20:22:9c:0d:06:cc:aa:30:
66:03:39:24:40:a1:b3:15:ee:9a:5c:00:2d:ac:38:
96:77:65:bc:49:7a:80:fe:e9:72:e8:31:ee:29:d3:
d1:f3:08:a9:78:d4:81:de:7f:1a:4c:fe:6b:58:89:
a1:d8:7c:a2:a7:6a:46:03:d5:63:3a:2d:7b:52:ca:
0d:47:05:47:37:3e:e6:8e:11:5c:48:ad:7f:6f:68:
f3:54:6b:e2:d6:94:15:85:76:e7:5f:b3:63:00:7f:
09:49:f8:93:e4:66:c7:c2:74:ee:79:54:9c:7c:68:
1e:12:7b:83:53:38:97:cb:6f:bc:7d:b5:ab:8b:55:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:94:0A:3D:BE:4C:6D:E5:55:24:B9:81:C1:F0:85:F7:C4:49:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cead5bc0-2620-45bc-b97b-adb00020a426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e080::/48
Signature Algorithm: sha256WithRSAEncryption
79:57:dd:13:57:85:e7:86:38:bf:6f:c5:84:1f:f8:31:88:a7:
36:69:d3:0f:16:cb:00:c0:0a:95:01:f0:b7:57:70:b2:06:56:
e5:13:6c:de:0c:c2:57:63:d2:88:53:36:7d:86:7c:f0:34:32:
46:33:9b:a0:d6:83:ee:62:21:40:3e:ec:2b:cf:32:77:c6:bf:
4e:10:72:3c:0c:b1:ca:e4:47:f0:36:32:52:12:2e:36:d5:cd:
97:45:29:50:fb:f6:29:84:56:08:bc:8d:70:b2:fc:ef:da:a5:
76:a0:e0:04:c4:31:14:47:9f:23:74:01:2c:ed:6d:1f:8d:bf:
d7:6a:91:f1:5b:4c:71:73:56:b1:fc:c1:f3:ca:d7:78:0e:f9:
b7:2f:de:18:6d:00:8e:2e:7f:b2:a1:02:f3:ce:04:8e:e8:ac:
0f:00:b5:13:8f:f1:9c:f2:f0:b9:ec:c1:f1:0c:ed:b0:8f:81:
67:91:09:f9:c1:44:b5:78:01:71:03:b9:de:cc:50:4a:64:f0:
b9:9a:ed:9a:cc:8e:c3:4a:b1:5d:a6:14:8e:33:7d:b4:8e:c0:
4a:22:07:3e:be:5c:ca:c8:d0:ee:ed:63:32:28:f0:31:4a:4a:
24:d7:aa:b4:83:4b:79:d5:e0:fd:91:fe:7c:24:d9:9e:3b:f3:
d7:c3:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:00:31 2026 by rpki-client