Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d776994a-af2b-429b-a96a-85d6c3d8262a.roa
File: d776994a-af2b-429b-a96a-85d6c3d8262a.roa (raw, json)
Hash identifier: 2xl7mAWTiCOqFTzL8y7Ac8CZk4m1auquqGdkh4eUzBY=
Subject key identifier: D8:4E:2E:C4:CD:DE:D0:9E:7D:BF:7E:E0:AB:8D:C8:9C:0C:AD:57:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FC72F7BC0D14EACF8B309DC4C236FC497184383
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d776994a-af2b-429b-a96a-85d6c3d8262a.roa
Signing time: Thu 29 Oct 2026 01:02:46 +0000
ROA not before: Thu 29 Oct 2026 01:02:46 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c7:2f:7b:c0:d1:4e:ac:f8:b3:09:dc:4c:23:6f:c4:97:18:43:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:46 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=fa8c3350634aace2359fc1d39a41fb36c22c0295acfbacf2303dafd396f4120d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:85:17:2e:e4:b1:83:08:b2:3f:17:1c:c9:
12:87:20:fd:22:a5:3e:82:66:4a:3c:08:72:bb:8e:
ee:2e:49:72:fe:75:d3:4f:34:f3:d3:f8:56:f4:ab:
0e:ff:b5:6d:3d:4a:25:07:22:da:93:e6:1f:72:fc:
c6:18:c8:a5:78:26:16:e6:ed:6e:9e:e1:ae:d1:0f:
be:15:c0:87:31:23:07:f3:bb:9e:4d:a9:a2:22:da:
81:4f:2f:b7:81:e4:50:de:d1:49:0f:bd:f9:b8:9d:
0b:03:5e:2c:a4:5a:7e:07:45:3c:31:c1:5e:c3:37:
16:71:c0:3b:4a:85:86:0b:04:ef:86:f8:5d:e2:cf:
02:f5:a2:54:04:41:b4:1f:18:c1:58:4a:ea:db:68:
6d:74:bc:8f:7c:ab:a9:67:47:6a:ef:fc:5d:41:0b:
f1:2f:9d:59:93:63:12:db:4b:16:a0:ea:65:1d:89:
9a:a2:1f:a8:32:d4:74:cc:68:7e:5b:eb:33:31:0c:
02:f8:3b:f2:27:08:66:0d:75:4e:e5:26:1f:b4:73:
5a:54:07:7c:76:4c:e9:8c:38:43:e5:97:30:96:63:
e2:00:3f:23:f1:7e:5d:57:ae:92:65:8d:da:ca:0a:
39:ed:86:18:56:db:92:ea:e1:37:83:00:df:66:4b:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4E:2E:C4:CD:DE:D0:9E:7D:BF:7E:E0:AB:8D:C8:9C:0C:AD:57:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d776994a-af2b-429b-a96a-85d6c3d8262a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c000::/40
Signature Algorithm: sha256WithRSAEncryption
88:09:2c:63:34:63:1f:30:1c:8b:e7:de:99:58:96:2b:ba:56:
35:37:b6:ec:80:cb:53:4a:a4:57:f6:c8:a9:19:38:07:75:25:
18:1d:1a:fa:93:46:e7:a2:f6:42:0f:72:79:41:83:46:24:5e:
c0:c6:32:8e:04:52:5c:98:6e:fc:a1:b7:36:19:59:da:95:f7:
66:51:96:40:d0:69:a4:7e:8a:62:f0:bf:12:39:39:db:c5:87:
97:73:ce:08:50:f6:bb:a8:cf:bf:4c:a2:f4:e9:f7:3a:58:a9:
51:d6:e9:31:2c:5c:1e:f9:c5:68:16:cd:16:cf:e1:67:4c:c5:
cc:5d:f3:1b:24:35:92:cb:73:26:b3:e5:c0:b7:0c:c2:87:07:
3b:f2:4d:00:f7:67:44:40:16:01:29:00:4b:f7:83:ac:d9:93:
bb:9e:a1:7c:e1:f8:70:a6:fc:55:9f:20:ff:47:4e:82:8d:e0:
f5:c7:63:d3:99:98:27:24:4d:ca:e1:15:8e:10:c7:30:13:0a:
97:13:b0:a0:b6:84:0a:b1:4d:9c:b1:48:3b:78:98:77:d4:04:
91:a0:88:f7:e4:b2:a3:13:44:66:30:8b:ac:cf:3c:71:6c:48:
dd:b6:41:fa:75:f9:3d:5a:c4:7b:f5:f3:85:c3:2b:e8:22:97:
3a:10:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:17 2026 by rpki-client