Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
File: d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa (raw, json)
Hash identifier: LKlR1dVgrCY0iYLo2IfPAZz7SMVpfXk8d5kt1em6Two=
Subject key identifier: BA:4B:E9:43:57:F5:0F:B4:91:4D:C9:2D:73:F7:BC:CA:1B:0A:98:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2FDEE08A3B0CDA0A0FD45430075503509C5E5D11
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
Signing time: Fri 09 Oct 2026 01:30:22 +0000
ROA not before: Fri 09 Oct 2026 01:30:22 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:de:e0:8a:3b:0c:da:0a:0f:d4:54:30:07:55:03:50:9c:5e:5d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:22 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=54d6c280a8f75b782446459cea037da166e19e2e7102a3b2575a1f8ec87fb48a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:9e:e1:08:a9:1c:5e:63:9d:a7:f3:96:05:
d3:92:0d:32:8c:73:20:ae:cc:1f:b9:68:14:d7:96:
51:4e:52:94:9f:7f:d1:ef:94:ba:81:cf:90:ac:38:
75:62:5d:a0:63:50:bb:21:1a:82:f7:35:ba:31:1e:
ab:bf:da:68:d7:d7:6a:c1:bc:89:8a:c7:2d:ea:bd:
bc:2b:5c:c8:d0:f6:5e:f1:ed:08:5a:ef:bf:e0:44:
2e:d6:7a:bd:2f:b9:5e:b7:84:43:0a:e5:ad:75:fd:
09:89:da:43:64:35:c2:3d:9b:68:7f:9d:43:be:81:
1a:e1:89:65:97:b8:5c:25:af:a1:03:90:61:95:3d:
ad:04:10:69:76:d3:9e:1a:3f:62:9d:54:dc:c2:fb:
32:a6:9b:7f:70:d8:03:65:6d:2d:d7:c3:6f:39:89:
21:4a:40:a4:8b:2e:3e:2a:a0:79:da:43:c7:73:a4:
ca:d8:f7:73:3e:9d:e4:b8:8b:23:42:80:fe:b7:cc:
c9:6e:33:24:95:6a:a3:6e:cc:59:ff:c0:54:32:31:
de:a7:13:d7:a9:ea:1c:5d:eb:57:9f:c0:07:0b:63:
5b:07:22:b7:9e:0f:73:6d:3b:20:ec:d9:aa:3d:42:
79:a7:12:e9:16:91:ee:ad:00:1e:2c:07:d8:c3:ca:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:E9:43:57:F5:0F:B4:91:4D:C9:2D:73:F7:BC:CA:1B:0A:98:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2e3995b-4ceb-4baf-a74d-954e9f3c5d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:2040::/48
Signature Algorithm: sha256WithRSAEncryption
67:73:16:6c:60:c8:b1:4c:18:8e:4d:4e:29:d7:9b:5c:2f:47:
57:5e:ea:70:db:9e:4b:d3:7b:4c:a4:55:2b:5f:b4:ac:46:24:
fa:56:5e:44:73:11:c5:0e:fd:a7:43:08:c8:c8:eb:47:f0:97:
ff:38:88:9c:6b:63:1c:de:4a:90:04:29:8f:d0:70:a4:dd:e0:
78:3e:59:21:e9:02:4c:93:ea:7b:70:30:17:e0:1c:f5:db:93:
f5:38:8c:5c:c8:0b:82:af:93:37:73:39:0d:72:24:58:ce:32:
fb:1d:a8:93:e7:a1:d3:e6:22:14:d3:db:a6:4c:14:d9:f2:e0:
d7:f1:d8:ca:bf:23:5e:a7:42:8b:b1:16:d7:99:a2:1d:fc:8e:
8e:1d:3e:2a:05:a6:28:8a:8d:8d:23:53:3f:4b:4a:41:fc:f7:
b7:7f:ea:84:8d:06:52:ac:bf:42:1e:98:dc:54:2f:99:d3:b7:
8b:98:3e:5c:7f:37:61:26:39:4a:e8:a2:1b:bc:b4:88:ef:72:
10:52:ad:bc:7c:31:ba:f7:66:bf:b5:a3:8d:2b:ae:77:bd:74:
83:aa:45:97:0d:77:79:24:c2:29:ba:ba:d6:e7:99:03:b6:21:
82:db:18:db:54:6a:90:ea:28:9c:e7:ca:02:2c:ca:bb:78:83:
6f:c4:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:50 2026 by rpki-client