Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9548f1a-7b7f-4d9d-87b9-3b6a7da293a7.roa
File: d9548f1a-7b7f-4d9d-87b9-3b6a7da293a7.roa (raw, json)
Hash identifier: JLJCcGS1r8SqC+V5ntjRVfGguw/GJccGbzOlcbh+lKk=
Subject key identifier: 69:C4:16:F6:BB:21:33:3C:6B:AC:F3:ED:12:B6:CC:B8:1C:0C:EB:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3EB83E499F5BAA98068B0397BFBC83FA9162B6F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9548f1a-7b7f-4d9d-87b9-3b6a7da293a7.roa
Signing time: Thu 08 Oct 2026 17:24:32 +0000
ROA not before: Thu 08 Oct 2026 17:24:32 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b8:3e:49:9f:5b:aa:98:06:8b:03:97:bf:bc:83:fa:91:62:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:32 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=c1404358374819b901a8cf928c0d116dc9c1b1c2f951519f192f2a81b0f61780, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:53:c7:37:37:b1:86:0b:5b:b5:ce:c4:3e:
05:94:77:be:72:e5:8d:15:2a:15:df:7d:7c:84:72:
8c:7c:a9:f2:5d:74:2b:9e:b7:1f:dc:84:af:e5:90:
81:8b:3d:c9:d7:c3:50:66:b7:8b:d8:40:66:ad:8d:
1c:b8:7d:29:90:0b:1e:fc:f5:35:9f:4b:5f:f6:58:
62:07:a7:f3:69:a4:d6:92:20:98:e9:7c:b4:70:1b:
b3:0e:f5:fb:8e:a6:1a:fa:08:d8:8d:b6:89:85:00:
de:92:20:b4:39:67:72:af:7f:f8:6c:81:3b:9b:2c:
43:54:d6:24:25:1e:42:41:7f:fc:44:c8:e2:d8:92:
53:1d:7a:0d:90:e1:57:cd:1a:f3:4b:46:bd:cf:06:
04:9b:23:ec:5e:ce:12:2a:e8:48:be:d3:d9:2e:b5:
1b:e9:6a:94:85:0b:8e:e6:65:a1:40:97:b2:84:fd:
d2:d4:23:c2:83:9b:ce:e0:d8:75:7c:67:66:f3:31:
1e:81:0f:12:99:8a:70:fb:1e:d7:de:cf:87:bd:1c:
2a:70:3c:f3:21:43:6d:73:00:80:29:90:71:66:2b:
d6:42:ae:8a:d0:38:0b:5b:83:cf:40:88:cb:16:1b:
53:3c:66:46:ed:a8:a9:4a:84:4e:20:01:6f:fc:e9:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:16:F6:BB:21:33:3C:6B:AC:F3:ED:12:B6:CC:B8:1C:0C:EB:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d9548f1a-7b7f-4d9d-87b9-3b6a7da293a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:1000::/40
Signature Algorithm: sha256WithRSAEncryption
13:9f:31:22:5e:dd:5f:c5:55:08:d7:a0:f3:4a:d6:d1:9b:1d:
74:d1:28:bc:66:63:bf:36:cb:12:d6:d2:db:15:ef:75:93:74:
ed:81:51:09:d7:07:15:55:ce:a1:37:a9:79:a7:64:c1:dd:71:
8d:dd:00:93:64:ea:a5:d1:74:2a:39:ee:51:56:3c:3d:de:e0:
e2:66:5c:bc:67:f6:10:6c:d6:10:02:3d:c6:b5:30:02:af:08:
a1:d6:51:3e:2b:90:46:1e:2a:b5:0c:ee:07:dc:bb:30:7d:be:
69:65:19:5a:27:ac:66:2b:2f:5a:66:bb:50:08:34:df:7b:91:
c4:7d:a7:69:88:0a:38:91:8d:bc:f5:a4:1d:55:86:2c:1b:56:
53:80:2c:54:8e:69:ce:68:ae:ba:d9:0f:31:57:07:95:b4:93:
88:4a:93:e3:4f:c8:e8:8c:72:b5:02:3f:d7:3a:29:5b:63:04:
1e:64:e2:cf:bf:20:ca:51:a1:b7:aa:88:0e:d5:af:3b:62:30:
fa:00:ff:1a:0e:5c:86:36:82:34:b7:4b:65:65:99:6a:fb:e7:
85:1d:ea:8f:7a:e9:52:ab:19:eb:a3:cf:a9:9b:3d:9c:bf:8d:
ed:50:88:97:57:a5:33:ee:c5:7b:46:79:b0:ec:06:64:40:29:
32:6c:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:33:20 2026 by rpki-client