Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File: d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier: 4LltPBU72AXNUv+n82hsfN1b4D+Cd7pGKKDRPnWqtFY=
Subject key identifier: 40:E0:9D:44:63:8A:B9:AF:6A:62:11:86:91:D5:30:1F:80:F3:70:DD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17ACC67C1BE48679E573CAAF4AEE484AE5C36F2E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time: Mon 26 Oct 2026 05:21:05 +0000
ROA not before: Mon 26 Oct 2026 05:21:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ac:c6:7c:1b:e4:86:79:e5:73:ca:af:4a:ee:48:4a:e5:c3:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:21:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5b73f26072899f30cd819cab3d563d68aaf7cc08175cf0c629a51df99681bb84, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:e1:af:04:2c:8a:5c:49:ab:24:e0:9e:5f:
80:b6:4f:35:81:49:42:6a:cc:4f:34:2a:2f:da:30:
05:62:e0:99:f1:77:c8:7c:f1:b0:8a:79:16:35:7c:
16:f1:a7:9b:a9:bb:da:9b:aa:31:89:4a:79:bb:80:
7b:ea:78:99:9b:2e:ee:37:fe:e3:00:2e:6d:22:2a:
de:d5:84:c0:bd:89:b4:0d:11:d2:5b:ed:af:4d:a1:
0d:67:43:57:9f:16:43:69:cf:ec:cb:a9:a9:1f:c0:
4e:d9:25:9d:5e:57:b1:20:c5:02:ee:d6:f5:0f:58:
fa:06:3d:3d:95:3b:24:38:70:bf:43:21:88:c1:14:
2a:83:61:13:d8:09:c4:46:26:1e:c9:ae:e5:ab:4b:
a5:62:01:13:07:17:10:e3:9f:f8:6f:e9:18:12:44:
42:f2:5d:69:85:fd:8a:8e:7a:54:6c:fd:72:b8:25:
6e:c5:b3:a0:2c:ea:83:f9:29:a4:c0:e0:84:c6:65:
7b:28:f9:dd:f6:d0:8f:1b:a8:19:e0:b2:53:fb:07:
f3:ff:f4:70:80:d4:fe:00:35:14:b0:a3:6a:d8:d7:
18:a1:bc:d3:96:92:cc:a8:07:c1:f4:db:90:94:01:
41:8d:fd:82:e9:4b:da:d2:09:5f:0f:8d:6c:de:09:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E0:9D:44:63:8A:B9:AF:6A:62:11:86:91:D5:30:1F:80:F3:70:DD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c080::/48
Signature Algorithm: sha256WithRSAEncryption
80:45:fd:12:8f:9d:fd:5c:80:af:59:65:74:5c:4d:96:88:f2:
60:da:00:fe:c2:01:e6:e0:50:e0:97:d5:c1:0e:56:9c:5a:0f:
16:50:87:ad:87:fe:a9:be:f3:d8:53:8b:9d:a5:d1:5c:b9:0e:
04:cc:d5:3f:aa:b0:38:21:d2:f7:e9:e7:33:50:10:1b:9b:29:
e8:06:af:ce:ef:d3:27:90:42:d8:78:36:b3:cd:52:4f:6e:5b:
31:3a:1d:51:cb:8b:b3:ca:4d:91:da:e3:1c:d5:4c:cc:f0:fb:
a3:b5:06:5b:06:3f:1d:9f:f2:27:25:37:65:4e:ca:03:90:fb:
6d:ca:85:20:12:50:0f:14:2f:62:82:eb:ef:15:d5:03:8b:2d:
22:db:7a:5a:72:3d:9b:48:51:84:70:c1:86:20:cd:12:2f:6f:
6e:40:4c:af:cc:b7:6e:8c:ce:fc:58:37:7e:88:bb:26:70:ea:
17:30:51:97:9e:4f:43:c6:94:ff:d2:87:e6:b8:48:e4:f6:fa:
63:c5:7e:67:1f:2e:3d:b6:7e:74:15:e1:d6:6b:cd:5e:2e:42:
c8:a5:bf:64:64:7b:71:eb:48:df:cd:24:48:f8:46:d4:48:9c:
1f:b5:e5:58:b3:3d:d6:06:98:22:35:49:20:cc:a8:1c:82:76:
fb:19:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:40 2026 by rpki-client