Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
File: de12834a-9370-4c63-969f-bf8eef4cd73b.roa (raw, json)
Hash identifier: YWbo1zppJs/vNGK6Kc6hiLDlWySSkNzFkQcLzLb/d0U=
Subject key identifier: CE:0A:9E:79:82:52:28:5B:00:F9:72:62:25:D7:87:4E:7B:C7:65:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 43D81A928FE974A17E6824707E0BA9ED49520AF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
Signing time: Thu 22 Oct 2026 03:50:09 +0000
ROA not before: Thu 22 Oct 2026 03:50:09 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d8:1a:92:8f:e9:74:a1:7e:68:24:70:7e:0b:a9:ed:49:52:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:09 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=e16dbfe16857a0e6181fe30bad6cb6450d06a6212b155660002da5250d7f0bfb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:23:3e:88:57:c0:4e:72:47:be:1f:5b:c1:
3e:4e:93:66:44:57:5a:c6:bc:35:8b:1d:fa:9a:60:
6e:bc:3c:d5:d0:52:fc:b7:ca:f9:cc:2e:9d:e1:f3:
40:8a:41:1a:c5:57:ed:64:86:2b:86:c1:1b:c0:04:
74:a9:c7:92:f9:74:62:8e:cb:46:57:82:72:9c:aa:
e7:4a:7e:6c:4b:17:18:cb:1e:cf:77:3b:4d:cf:c1:
cb:8e:db:2e:e1:e6:53:a2:8d:80:33:7f:d1:3e:39:
1a:b0:8f:4c:1a:15:72:27:8a:b3:6b:7d:84:ca:63:
5f:4a:58:92:03:5e:24:f0:10:fd:7e:e3:1a:4d:b2:
18:ac:c0:c9:7a:c5:47:83:00:ed:9b:11:d1:94:51:
a6:27:5c:28:b1:ad:de:d8:a3:80:8d:f7:0a:b5:9a:
ed:a9:95:3a:6b:62:eb:84:b7:b4:7d:29:ae:a8:0c:
24:1f:9b:cc:de:c2:b0:84:51:af:bc:f5:cd:ec:af:
7d:4c:a4:24:2a:3e:9b:9f:37:40:9a:09:4a:7a:32:
83:12:83:d4:ca:a2:1e:c1:2c:6d:9f:38:90:5a:4f:
4d:ec:ca:0e:b4:4d:f8:83:64:af:77:d3:ef:30:04:
83:a8:60:c8:46:af:54:b8:29:5b:63:b8:4a:a2:11:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:9E:79:82:52:28:5B:00:F9:72:62:25:D7:87:4E:7B:C7:65:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de12834a-9370-4c63-969f-bf8eef4cd73b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4010::/48
Signature Algorithm: sha256WithRSAEncryption
8a:38:3d:b9:89:bb:bd:de:4d:a1:a9:46:fe:fc:b2:d7:08:0c:
69:80:85:84:b2:6f:24:72:4f:c2:9e:fd:c9:16:8a:6b:3c:48:
0f:45:de:96:d3:69:35:6b:8f:67:85:82:7d:17:08:4f:89:59:
5e:28:51:70:4a:66:58:63:ea:32:93:99:8f:84:00:7c:82:1b:
1b:50:5b:ee:25:9c:9d:26:b5:fc:16:bf:77:7c:89:9d:94:a6:
73:bc:cf:db:53:88:c1:26:7f:88:ca:1d:3c:aa:93:62:54:be:
6f:58:1e:d9:6a:e4:e8:81:99:65:df:fb:7d:9b:2f:e1:04:6c:
29:aa:60:a2:81:b9:0e:80:c8:80:ef:87:f4:0a:cc:b2:3c:45:
36:39:65:9d:d5:2b:06:62:c7:29:94:2a:84:d0:3f:04:01:36:
6d:be:81:52:41:18:55:20:47:4a:33:1b:5a:13:05:48:b3:5d:
b4:eb:b1:7c:16:b8:54:31:2f:19:19:4d:29:1d:fc:4b:fd:6c:
a3:83:24:00:03:c7:09:4f:ca:d8:9d:e4:2d:73:69:aa:90:7c:
58:df:7b:c2:ba:cd:00:02:b5:b1:27:ab:91:2e:e2:11:d7:5b:
b5:59:b3:9d:a1:02:92:a4:34:0b:bb:0d:e0:f8:b3:0b:75:8e:
b0:72:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:23 2026 by rpki-client