Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
File: d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa (raw, json)
Hash identifier: NvzCQ4QnNYOzA6XqD0yv0pTXLiHHI8SCoSO8/waGGnU=
Subject key identifier: AD:7C:34:A1:E5:CE:5D:99:84:72:42:CF:19:C5:31:E9:07:52:0B:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DB6358D4ABD9AD41562BAA16356E8E73FE22F72
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
Signing time: Sun 11 Oct 2026 15:20:29 +0000
ROA not before: Sun 11 Oct 2026 15:20:29 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b6:35:8d:4a:bd:9a:d4:15:62:ba:a1:63:56:e8:e7:3f:e2:2f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:29 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=75041aa5b9828dc4d63f7c3e7b35066942b427daea9e63434f539a050e46311c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:61:52:a8:3a:b7:3b:4e:b9:82:62:dc:e9:
4b:10:39:1c:1f:2e:51:1b:17:cd:e4:b1:c1:48:53:
87:05:c4:0c:10:bc:e1:ff:d2:a0:dd:fc:93:db:1f:
c4:10:d3:fa:3c:e0:dc:4d:dd:30:0a:9e:c8:96:10:
4d:70:e0:c4:1f:dd:a2:02:21:2b:28:e1:b0:d6:b4:
f9:9c:27:4c:50:02:15:cf:ef:d9:0a:88:e0:c8:30:
81:12:2c:6e:c5:79:b2:a2:19:cd:7d:e2:31:59:5a:
88:95:f9:46:b1:d4:5e:0b:d9:98:09:cf:8b:c3:5d:
14:84:95:bd:14:4c:9a:34:53:1c:b3:36:f8:c8:2c:
e6:f8:61:ec:9c:82:b7:d2:51:a9:e0:dd:53:d9:44:
05:5c:3e:0d:d2:0b:2a:ab:e8:c1:68:d9:54:3e:b0:
3c:6e:e0:4a:a2:0d:c6:0e:f5:41:bb:1f:a4:bb:09:
00:c2:63:d2:57:0e:67:81:67:8e:e6:e7:6b:14:a6:
6b:a1:7a:bd:cc:e1:1b:a4:d2:83:7a:a7:1c:a6:8d:
8c:2e:38:c5:73:15:23:b4:ec:4e:8a:27:55:e8:82:
d1:2c:0e:93:d9:38:12:8f:0f:7c:6d:70:12:ee:02:
33:be:fd:ee:1d:b8:dd:e7:31:01:03:6f:35:50:3e:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7C:34:A1:E5:CE:5D:99:84:72:42:CF:19:C5:31:E9:07:52:0B:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c040::/46
Signature Algorithm: sha256WithRSAEncryption
0f:b1:c8:72:c0:e4:5e:55:00:37:60:3a:4f:1c:39:45:db:7d:
f9:22:5d:d4:25:4b:c9:37:69:b8:68:29:71:a5:a3:86:d2:a2:
a5:78:30:03:3c:ba:11:76:d6:23:6e:82:9b:b9:0f:66:58:60:
c1:89:77:f1:56:ef:49:85:be:87:5c:7d:84:3c:05:f9:89:47:
65:63:3f:37:36:9d:ec:72:0f:16:1f:68:b7:02:aa:8f:35:56:
3e:46:f1:67:7d:e3:a0:0b:7a:c8:33:43:c9:20:fa:a7:dc:a3:
2b:78:85:da:0a:8c:c0:fb:53:4b:78:44:62:52:9a:9c:e0:f4:
f8:a8:8a:e7:9f:a8:4f:03:41:33:ef:6b:2d:30:56:5d:36:3f:
53:06:13:6e:ea:ca:ce:ba:1f:2c:98:c4:c0:94:42:ca:cb:96:
9c:02:8d:40:69:3d:de:4c:a6:48:60:9c:78:ac:38:4d:3e:58:
72:e2:ee:b1:cf:44:dd:17:ef:03:27:c7:d1:70:25:00:bd:24:
bd:ad:1b:55:3e:6d:f3:5b:47:3a:27:66:39:68:aa:c1:78:5a:
53:e7:19:ef:38:3f:4d:ed:f9:29:0d:03:05:41:65:22:77:cd:
c9:49:8b:0d:63:96:42:68:6a:5c:7d:92:33:34:22:9e:20:ea:
51:30:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 16:08:53 2026 by rpki-client