Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
File: dd7649a8-cae4-4d67-90f1-f01144285a2f.roa (raw, json)
Hash identifier: +zDWnO/+tLG6D6HzgMeidQf1LKGXwTifl9TrySSsPcM=
Subject key identifier: 32:99:76:15:6B:DF:76:7A:F2:BD:81:3D:F8:AE:EC:6F:48:5A:1E:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D6D14303D03564F18AEDA55E61FAA1CDA634CCC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
Signing time: Mon 26 Oct 2026 04:40:57 +0000
ROA not before: Mon 26 Oct 2026 04:40:57 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6d:14:30:3d:03:56:4f:18:ae:da:55:e6:1f:aa:1c:da:63:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:57 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8eaa80091c1fc4c8b9af53ff6a7d17f0fc4f187e08418f807eab8b5d5acc31ee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:3f:69:7d:60:39:04:18:c0:9b:b0:f2:97:
50:9f:ee:1c:bc:8d:35:de:61:87:90:fb:f6:d9:e7:
21:ea:ff:53:c8:4d:f1:5b:4e:79:e5:7b:e0:98:7c:
62:4b:9b:0d:31:1e:de:52:19:1e:fd:da:3c:96:13:
2d:6f:d4:68:d2:d7:c5:d2:12:59:d1:23:bf:56:cf:
e7:d7:11:a7:33:29:ea:3e:b9:38:72:f7:f5:5c:df:
c0:0a:6f:eb:76:1f:43:12:66:3d:72:49:21:f5:92:
23:2c:73:d4:46:7d:33:01:ca:88:0e:35:3a:78:53:
3b:92:43:a8:45:39:18:f8:b7:98:11:58:60:cd:66:
1b:e0:96:30:e6:5b:d2:11:83:e5:f7:34:8b:e6:56:
ba:e6:22:5d:b1:df:75:f2:79:58:5c:13:5b:8d:2c:
c8:4f:d8:9b:96:1b:62:9f:c6:c5:2d:24:42:3f:28:
54:14:6a:a2:f4:0d:64:47:e8:20:d1:b5:2f:42:a5:
c8:48:1d:08:2d:37:02:8b:97:cf:b4:d3:04:a7:95:
09:d9:b1:e7:6e:79:2c:e1:93:eb:97:98:b6:1e:64:
19:6c:76:1e:6b:40:05:a1:4f:95:b9:79:e0:a3:52:
0b:15:22:d6:8b:c8:b2:d4:6f:dd:38:6a:72:23:52:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:76:15:6B:DF:76:7A:F2:BD:81:3D:F8:AE:EC:6F:48:5A:1E:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4040::/48
Signature Algorithm: sha256WithRSAEncryption
a8:56:84:60:b5:46:bc:8f:6b:c0:bc:09:e0:6f:f9:bd:6f:6f:
97:3d:e3:0c:68:71:fc:54:ef:18:e4:d4:1e:47:9c:22:a8:df:
ad:6d:43:d5:e9:13:59:fb:81:50:f7:69:fe:87:de:87:8c:05:
e3:cf:83:d2:a3:e8:3d:ac:39:6b:91:9c:a5:bc:56:24:bc:1d:
10:e2:42:c0:58:b3:4e:c1:7d:d3:c2:d2:2e:03:d6:2e:5c:0f:
82:0a:54:57:6e:d4:4c:36:c3:31:28:3b:58:f3:bc:7c:5b:dd:
74:02:19:d5:67:58:50:69:85:65:b2:5d:10:d0:d3:88:dd:0f:
c1:5d:f1:31:2b:d5:4f:8c:6a:16:0b:ba:87:4b:ef:fd:1d:27:
d3:39:ae:14:f5:eb:91:ce:34:14:97:d1:0d:66:fa:cf:ba:e0:
9a:26:2d:35:60:cc:6d:36:cd:6c:30:75:1c:2b:70:cb:82:f3:
36:d1:be:2e:0b:92:54:cd:a5:6e:54:ea:01:68:b9:e0:7e:b9:
7c:87:40:d6:68:27:71:05:0d:62:e0:25:8b:26:25:fb:ce:ca:
12:1a:3c:49:ee:30:ad:da:a7:8b:61:4d:e9:5c:da:85:a8:fa:
11:4f:ea:4e:bd:96:df:80:05:61:79:ac:2e:22:6a:4d:0c:0c:
c4:77:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:43:02 2026 by rpki-client