Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
File: d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa (raw, json)
Hash identifier: 7V5pzyeIVvgMx/9MAGtAGX5R62TaLtoXXP/bOWnMPhg=
Subject key identifier: BA:F4:3F:9C:4A:63:AF:9D:88:CC:4C:BE:2F:C1:85:3F:65:75:8B:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 409AF4A896D6471FD62F3FF5E526914365F9B3C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
Signing time: Tue 27 Oct 2026 00:02:24 +0000
ROA not before: Tue 27 Oct 2026 00:02:24 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9a:f4:a8:96:d6:47:1f:d6:2f:3f:f5:e5:26:91:43:65:f9:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:24 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=a43db69b4a47003a9291733776f2e59f78338bcaf63033a9910cbf14a6f3d760, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:e5:d9:04:c7:bb:60:e0:ac:ac:be:f4:fa:
f1:79:b9:2b:0d:4f:a5:cf:ba:60:56:99:27:45:a4:
0d:ba:f0:6b:1b:56:da:30:af:a7:0e:d1:1d:93:69:
45:9b:2d:7c:a9:7b:d7:2a:ef:c8:92:06:45:17:46:
74:c0:d7:be:7f:4b:6b:0d:5a:a6:27:13:f0:e2:ab:
37:f5:5e:59:a3:2c:2d:d3:6c:3e:b5:a7:b6:6b:ba:
19:54:58:e2:42:da:af:9a:5c:bc:60:a1:0d:6a:eb:
11:cf:c6:6a:78:87:65:70:78:ad:27:ab:0d:1d:1d:
9a:99:63:1e:8a:11:35:02:85:f0:b6:f7:ca:55:43:
36:44:5e:1f:89:31:43:70:04:a8:70:99:be:b3:d3:
6e:1c:03:35:6f:3a:ff:a9:44:ee:27:74:08:4b:ed:
a7:3c:c3:ee:2d:48:4e:14:d5:ab:c9:f2:ec:71:9d:
82:58:c8:e4:dc:bc:d0:39:91:be:0a:80:cf:25:08:
41:46:04:01:5a:f0:7f:f2:e7:b7:22:51:5a:6f:7e:
e6:d9:00:a7:c3:79:3d:f8:5a:68:6d:37:05:dd:4b:
68:8f:dc:8e:b6:e3:d2:af:f4:e0:6d:34:e5:a8:3c:
98:02:83:3b:3a:f0:8c:98:9d:7f:d8:22:af:70:00:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:3F:9C:4A:63:AF:9D:88:CC:4C:BE:2F:C1:85:3F:65:75:8B:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1800::/38
Signature Algorithm: sha256WithRSAEncryption
18:dc:ed:af:be:24:89:9d:c5:4f:ae:9b:7c:ba:ef:7e:7d:e5:
10:93:27:df:f9:23:62:48:4a:99:ba:40:34:0e:1d:d0:c9:6e:
3b:ed:cc:77:8f:a2:fe:7f:b3:b0:03:44:16:72:65:6c:60:71:
c3:33:56:10:7b:e1:7c:05:e7:57:53:20:a1:cb:76:22:2d:23:
d0:0f:65:ec:bc:58:b7:af:b8:ae:7b:e0:92:18:d3:3f:bc:c6:
40:02:fb:d8:78:5a:12:4d:fb:bf:32:b3:6c:1f:62:34:96:ad:
e4:0a:be:0b:c6:e4:e8:49:31:d5:66:b4:8e:45:09:35:6a:51:
82:85:80:c0:75:b1:be:a4:5a:d6:00:d3:36:82:21:0d:03:f0:
bf:92:35:60:64:b9:27:8f:c5:a2:68:f1:80:d2:fe:21:8b:64:
9d:8f:e9:89:8b:37:20:c9:c8:b2:95:f0:b2:55:33:d7:21:0a:
1a:3c:c2:d4:16:90:c1:ef:6e:70:2e:b4:16:0d:10:e8:e3:cb:
11:fe:c5:05:6d:a4:9a:cf:d8:c4:8b:08:f8:e1:37:6b:20:79:
d1:9d:8f:56:33:48:9e:74:50:b5:ed:c9:c1:3c:71:66:68:9c:
76:53:de:86:9b:7f:10:63:59:34:eb:c7:4b:0c:80:bb:dd:cf:
63:c0:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:18 2026 by rpki-client