Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
File: ddbb8798-3423-4d98-a384-58621b010556.roa (raw, json)
Hash identifier: kj7XOC9Hh18YX+rCk+H8oqziBWVKECk2qU1OHWjoldE=
Subject key identifier: B1:C1:F7:30:51:BE:21:3F:A7:D4:F5:CC:9E:36:FE:6E:2D:59:AC:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D9E1D51A3E6E476838843AA93B6595288A728FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
Signing time: Mon 26 Oct 2026 05:20:46 +0000
ROA not before: Mon 26 Oct 2026 05:20:46 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:9e:1d:51:a3:e6:e4:76:83:88:43:aa:93:b6:59:52:88:a7:28:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:46 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=68f180af5084c20ad4ddda48ff8413e5bbdd72825a7d7b0f6b9d33a4cc76ba99, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:89:e3:46:9e:31:4c:d2:29:71:36:41:da:
c0:5b:37:1c:7a:0e:3d:a6:31:5a:70:09:ed:36:ce:
78:27:d7:7c:b5:f9:b0:ce:bf:64:92:49:90:82:a7:
6e:6d:cb:15:b8:7f:48:f0:74:0e:e7:4b:84:aa:f5:
f9:69:57:9b:96:89:cf:c4:df:71:85:05:f1:20:47:
35:01:e1:90:1f:1f:92:4d:b0:0e:9c:f7:04:42:f7:
c7:ad:4d:fa:61:98:78:9d:9d:57:38:21:bf:d2:0b:
42:76:43:03:7f:bb:5b:f0:df:fa:aa:30:e9:89:b3:
a1:22:7b:32:32:f7:ad:9e:da:21:48:f8:cc:c7:a6:
43:cf:f3:81:b3:36:c4:6b:8d:46:fd:36:9c:b3:42:
2f:de:d0:07:6b:ba:99:56:a3:b2:d6:30:5a:ae:f2:
ba:a6:91:4b:98:7a:44:41:8c:67:9f:02:ef:71:9a:
21:b1:5d:2e:aa:7f:dd:04:82:7c:cd:1d:88:37:c3:
43:ac:8c:18:90:fd:1b:b5:38:75:c1:54:33:cc:6d:
32:46:ac:c1:08:0a:07:c5:25:1e:92:d6:2d:14:89:
d2:39:4e:bc:c1:f5:ac:94:7b:33:5d:34:6b:1b:99:
3d:3b:b4:6d:e5:70:4e:7b:e8:86:b1:17:63:ae:4a:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:F7:30:51:BE:21:3F:A7:D4:F5:CC:9E:36:FE:6E:2D:59:AC:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:c00::/38
Signature Algorithm: sha256WithRSAEncryption
83:55:0e:9f:9c:fe:bb:2f:27:2c:f2:22:66:5c:e1:18:d7:38:
ca:4a:a8:d7:2a:52:92:8a:f9:bf:93:b6:fa:1b:3a:42:f4:bc:
ae:0d:f1:a5:cf:ce:e7:be:cc:d9:f0:5c:22:ff:fa:47:bd:ac:
37:b7:5e:22:14:f8:67:c8:93:c8:d3:ae:90:6c:59:cc:ab:88:
66:45:46:6a:4b:e8:f7:df:73:be:7b:ae:f8:3b:d4:43:55:cc:
63:14:15:84:17:f8:5d:b7:9e:be:67:9e:0b:56:c9:86:f2:1c:
7c:7e:cf:e6:c7:14:9c:a0:7c:92:a1:89:8b:20:5a:41:57:96:
05:fa:eb:90:da:ed:8b:3b:99:7a:47:b9:db:e1:05:2d:d3:a7:
5d:b6:4c:8b:96:3f:2c:f0:30:53:2d:d2:4a:69:8a:e6:7c:27:
03:63:3c:54:2b:15:a6:16:02:32:32:b4:4a:c1:c1:33:32:d3:
ed:3d:9f:f5:47:7f:5a:51:18:6c:40:e6:65:b5:f1:c1:76:63:
ed:88:9c:02:13:fe:3f:73:d3:64:b8:cb:b7:4f:71:d2:b5:d9:
e2:f3:75:a2:b3:79:b1:79:79:87:8b:70:96:9a:82:39:0b:b2:
10:05:d5:9b:f7:3a:0a:c8:fe:8c:1e:88:eb:4f:04:d9:23:a3:
50:03:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:15 2026 by rpki-client