Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: /dNIpBIGNnp1xjmZwKTzVHXjIEI46dmJ9fYDhEDfsww=
Subject key identifier: 3F:65:D6:9F:CA:C0:7F:30:70:17:EB:92:40:07:1E:29:77:1A:D0:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A18E4E84DCEB40098C38F8006A91F31764D41F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Mon 26 Oct 2026 04:50:07 +0000
ROA not before: Mon 26 Oct 2026 04:50:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:18:e4:e8:4d:ce:b4:00:98:c3:8f:80:06:a9:1f:31:76:4d:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7b48308af7f12740333698894df7100e18e89e21d29c8a85c6e3c01b0c04d3e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:a0:b4:fe:bc:b6:d6:76:58:92:a9:ab:de:
be:4c:0a:2d:2d:53:e8:14:18:d0:4c:04:cd:20:9a:
a0:5c:cd:5b:28:f5:be:ba:f6:90:84:af:e0:20:bf:
85:45:ed:50:2d:f4:82:53:35:b4:7c:93:43:15:26:
6c:21:8c:7f:a8:35:1b:c4:5e:8d:51:20:c3:7b:a4:
5d:c0:1e:f3:d1:26:ec:77:00:d7:56:be:de:03:fa:
e3:db:ae:8b:30:d5:2a:73:7c:12:1b:86:15:c4:b4:
28:b4:61:e3:d9:f4:b2:30:e5:69:df:ca:58:a6:3b:
97:10:44:77:35:fa:47:93:2e:c3:30:92:52:85:93:
66:17:89:78:1c:23:0a:9f:3f:40:c3:ae:b4:54:40:
91:48:26:dd:c7:8a:a4:96:97:b8:a0:16:57:bb:40:
24:21:7d:09:31:d5:08:a8:f9:1c:9c:e3:7a:2b:3c:
65:fe:de:4c:52:c9:d6:5b:80:9c:3b:5a:7e:9e:04:
04:f2:e4:4f:50:6c:54:51:b4:37:cd:e7:36:8a:ca:
1c:db:78:70:28:25:6d:f1:5a:7c:e8:8b:c4:15:2f:
85:bd:b3:75:82:e6:0e:1f:26:b7:10:62:77:00:91:
7d:5d:f1:66:8f:6f:83:bc:6c:bc:99:3d:db:13:6a:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:D6:9F:CA:C0:7F:30:70:17:EB:92:40:07:1E:29:77:1A:D0:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:95:2f:bf:fa:39:17:95:3e:29:d7:49:11:9a:c8:14:3a:28:
c9:77:b9:aa:09:05:13:51:cb:a4:c1:d2:2a:cb:45:88:08:cb:
90:32:f4:20:e8:c8:69:05:8c:f2:ce:bf:f3:ab:f5:82:5b:7a:
75:03:ed:77:9a:68:25:26:41:bc:40:89:ec:14:5f:9c:c6:9e:
73:6b:35:36:e0:d7:61:ae:a3:58:60:3d:46:91:18:8f:4b:64:
45:3b:75:a4:1d:2c:dd:9d:fe:91:81:33:a6:c4:41:d5:59:e3:
ea:be:87:61:11:ed:84:e9:69:dc:36:e9:32:af:69:33:38:b3:
8e:0d:06:a9:6f:ab:06:d0:29:f1:c8:4e:b0:9e:e6:c4:39:55:
41:43:1a:c1:a5:f1:e7:53:6a:11:15:80:01:8f:3d:d1:a9:49:
4d:bb:49:63:86:d0:13:87:9f:35:eb:c3:0a:6e:a6:03:83:64:
de:49:41:3b:2d:88:d5:18:4d:f1:49:70:7e:f8:c1:39:d5:49:
30:c0:d2:50:21:2e:cb:c0:70:bb:03:07:52:74:e8:c9:b8:a9:
9b:7f:65:38:a2:06:eb:08:78:28:04:1b:d6:c8:c4:31:d8:e8:
88:1c:3f:63:9b:d9:9b:9a:0b:54:a9:eb:05:78:68:29:8d:5d:
7e:ed:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:30 2026 by rpki-client