Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json)
Hash identifier: JxK6morBVdv2Clu51xdVcPUq1si2Fyk0w7Im9u4ewf8=
Subject key identifier: 84:2E:AA:21:CC:23:E7:3A:11:61:F9:73:18:D3:B1:C5:65:B6:AB:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CBC92F2DE78040F3222971BB20BA677138BA498
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
Signing time: Mon 26 Oct 2026 04:30:32 +0000
ROA not before: Mon 26 Oct 2026 04:30:32 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bc:92:f2:de:78:04:0f:32:22:97:1b:b2:0b:a6:77:13:8b:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:32 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a0faf7240a146b040d68eb122315ca793c2e5e22fe8ffad6b48352bb963da3f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:92:ee:c2:d4:5b:b6:47:e9:81:1e:98:df:
9a:12:43:34:fc:e7:e2:df:ed:65:12:3a:7f:07:3f:
49:1b:db:d5:3e:1c:a7:db:fd:fc:f6:ee:2c:66:a7:
2d:87:b1:0d:32:a8:12:ec:e7:ba:45:f4:d2:23:63:
ca:41:8c:0f:dc:8b:57:fc:77:7c:5b:5d:25:a6:8b:
81:b3:91:d7:9c:db:12:b9:7a:94:c5:4e:73:39:9c:
49:96:7f:a8:39:b1:ee:08:50:e0:c2:08:a5:fc:30:
1d:db:9c:ec:8d:a0:17:23:43:88:46:8f:ac:1a:b3:
54:50:8f:50:b7:8e:0a:c8:ed:53:8c:4e:e5:b3:60:
0b:74:91:65:8a:86:be:7e:e4:1a:87:2c:f9:2b:1a:
9f:14:ae:5e:e3:b9:fa:e0:6c:59:e2:82:91:0d:b1:
a1:bc:e2:b3:84:f9:aa:6f:cd:a7:ff:1c:f5:f1:4d:
96:53:ef:d7:a2:0a:33:e3:34:55:0c:71:f0:41:83:
8a:9d:50:84:c5:f5:c9:af:4e:7a:44:92:c6:99:0d:
34:bf:05:cf:54:2f:4f:22:7e:eb:9e:22:a6:47:fd:
3d:4e:17:ca:89:16:81:c6:4d:8e:02:44:aa:65:52:
f1:db:00:f8:58:f0:f0:9a:09:d4:f0:c3:32:43:10:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2E:AA:21:CC:23:E7:3A:11:61:F9:73:18:D3:B1:C5:65:B6:AB:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
27:f9:7f:bd:04:51:d0:ca:c4:a7:fc:bd:35:4d:6e:2d:c0:d7:
cd:0c:eb:26:95:21:95:b1:74:1f:2a:9b:b6:11:dc:07:bd:86:
b6:5d:89:ed:24:66:65:80:07:da:f8:7f:ab:32:d4:cd:b4:1c:
f5:6c:9a:cb:74:74:32:b9:6f:fc:dc:47:fa:6f:f0:d1:d5:91:
8c:97:14:c1:e6:66:7f:4f:03:ad:6c:e1:51:24:c4:8d:ab:5b:
e3:a8:d0:bd:fa:0a:15:87:27:5e:22:c8:4a:95:3d:6b:89:97:
67:c8:d8:2e:87:9d:ec:08:30:ce:0b:2c:2d:d8:be:35:08:9b:
0f:3a:a1:37:f2:13:be:f4:b5:9e:44:20:e1:7c:e0:b8:86:72:
70:a8:1b:e2:92:35:80:db:41:d0:ee:8b:80:31:b5:3c:bc:26:
50:e1:cb:de:2f:0e:f9:06:60:2e:77:a3:1d:d9:87:c4:58:73:
ee:30:32:6a:a2:44:10:a7:c9:c9:eb:5e:fd:94:8a:83:c8:b8:
ba:d9:04:b2:e9:00:af:ec:9d:8d:c1:8c:cf:a8:c8:7d:a1:d4:
9d:f4:7b:60:ca:54:d9:b5:43:96:2e:8e:2d:42:74:39:52:17:
9c:fe:ea:55:ba:de:75:12:4a:ca:95:8e:59:38:d9:84:2e:b1:
b8:84:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:50 2026 by rpki-client