Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
File: d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa (raw, json)
Hash identifier: gdUDPyRP86hpFA1pw/BPA/5bqBhTFkyG2LyEEja64w0=
Subject key identifier: 9B:00:C5:0F:74:BE:35:25:54:32:C2:EC:2D:16:67:D5:25:7F:E3:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2013312E2F3A1DAE23215B6EF562FAC5BAC0BF96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
Signing time: Mon 26 Oct 2026 05:20:20 +0000
ROA not before: Mon 26 Oct 2026 05:20:20 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:13:31:2e:2f:3a:1d:ae:23:21:5b:6e:f5:62:fa:c5:ba:c0:bf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:20 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=79ee996c71ac424ebf96b0288bfef9a2db28640b0b1e39ed1fdbd3e43bfffdd3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:b9:36:1c:76:88:06:73:5e:67:b8:6a:9f:
22:24:3e:e9:39:78:8b:a9:ca:3f:7b:d9:39:be:28:
7f:d6:7a:02:44:6d:41:74:ef:f7:7b:c6:3e:c5:7b:
a2:68:0b:4b:6b:e1:ad:f7:6c:22:a7:a5:6e:d9:5d:
b1:01:de:e1:fa:da:21:1c:f2:86:4f:e3:d0:89:83:
60:11:42:2d:4b:fa:7b:c7:06:76:4b:fe:d4:e6:f1:
97:49:c7:03:81:46:3e:71:d8:a8:dd:72:de:04:79:
6a:1f:a5:f4:b9:4c:83:35:08:9d:65:58:f4:c1:2b:
46:fa:2a:db:62:c5:ee:88:ab:7b:75:68:6d:02:58:
e9:6b:9c:59:06:be:f7:af:a7:9f:39:bb:c5:59:d3:
30:56:05:22:a3:66:0b:33:0c:0f:24:3e:d4:20:06:
f1:7d:49:b6:72:ac:47:83:b5:a0:c1:da:72:de:84:
89:b8:c9:dc:fb:6c:4f:7a:f1:f1:7f:d6:fe:b3:8b:
93:08:b2:15:29:29:38:d8:ad:21:92:f4:02:f5:b0:
ab:df:6d:cc:89:63:73:46:fe:ac:e7:ad:34:78:00:
85:d2:a1:64:be:40:5f:93:21:ce:ac:d3:96:69:05:
ce:e7:04:7a:2d:93:1f:3e:3b:85:45:71:f9:89:01:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:00:C5:0F:74:BE:35:25:54:32:C2:EC:2D:16:67:D5:25:7F:E3:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:1000::/40
Signature Algorithm: sha256WithRSAEncryption
92:fb:4d:d0:99:f0:70:60:b3:b3:0e:d3:13:99:27:4d:2d:92:
4e:5d:31:47:51:64:f0:f5:33:35:b7:f7:99:4c:2f:e7:0a:41:
5d:35:1b:ca:fa:e5:47:14:8a:1c:16:40:ab:85:32:bb:e3:f1:
05:d7:fc:6b:7e:04:1b:00:ab:db:c8:ba:05:0d:4c:cf:22:ab:
a7:b4:4c:e5:7f:2a:5b:6e:74:8e:07:74:c1:84:1d:a7:d4:e5:
6d:37:a0:af:50:ed:df:e4:b8:5a:db:42:81:ac:65:78:a6:74:
82:c8:ab:18:d8:7a:40:fb:f5:e7:b4:69:4f:87:5c:15:3e:86:
4b:d8:c2:6e:7f:b2:12:9f:ed:ef:d5:e0:ef:84:80:fc:e5:13:
df:4b:d5:c3:58:93:1e:b9:52:36:b3:14:01:b2:95:84:3f:1a:
d7:e2:8e:08:3c:08:56:3b:5e:3b:35:b8:50:b5:6e:28:19:ea:
36:12:37:77:09:3d:0f:a8:0b:49:35:46:f5:cd:a4:aa:cd:ce:
f8:aa:cc:cf:85:50:89:96:18:e8:c5:44:fb:77:bf:c2:4b:d2:
1c:bb:40:79:18:8e:b0:b5:34:17:8c:52:0d:1a:2f:5c:33:28:
71:f7:b1:16:2c:e1:bb:14:42:05:38:cd:0d:c6:b8:fa:ad:12:
16:c6:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:48 2026 by rpki-client