Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
File: e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa (raw, json)
Hash identifier: BfljZ5GOCChJflS+3P2QJaLEy72CaY5RjksV2oZXakk=
Subject key identifier: C1:AF:B0:00:BD:5C:55:CD:D8:84:68:5B:DD:50:3E:6F:29:5F:C5:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 323D88188933AB13962429E7C034018A9C361BE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
Signing time: Mon 26 Oct 2026 05:02:37 +0000
ROA not before: Mon 26 Oct 2026 05:02:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3d:88:18:89:33:ab:13:96:24:29:e7:c0:34:01:8a:9c:36:1b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=cabf3fd2fa2861b4133e16a24275f7eddfe6d63bd3a4fc7f0e06fc4fe1f10aea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:77:cf:ee:36:25:34:eb:3e:88:fd:18:d2:
ce:8b:83:e5:87:85:9e:a0:4d:a0:2a:f2:1d:24:ea:
f3:c9:12:54:01:b7:36:42:39:d4:a3:9d:5e:a8:98:
ca:46:93:fd:84:7d:36:ca:24:0b:50:46:5d:57:c5:
99:e5:23:0e:fc:8e:f1:6e:89:26:1f:0f:5b:eb:b6:
4f:74:70:ea:fe:76:c3:dd:88:76:38:96:ad:7f:fe:
c6:f7:1f:33:3d:1e:ff:7f:57:10:a8:46:12:2b:8d:
83:d1:c8:1d:ac:23:36:ad:58:d0:42:8d:55:f5:d1:
1e:47:e1:71:9c:eb:44:1a:0b:7f:74:31:60:ec:04:
9d:60:28:11:63:5a:1f:f1:a8:6d:52:16:cb:4e:8d:
0b:ff:0b:7e:79:73:d4:e0:3c:08:9c:9d:04:bb:2d:
45:c6:7e:76:e0:bd:e1:d8:02:89:5c:b4:b2:be:b2:
d3:28:a5:5f:5c:2c:a1:68:19:28:3f:b5:41:99:e1:
12:5d:a8:08:0d:b5:af:e5:4a:a3:16:3a:ec:66:a2:
27:bd:c1:09:dc:6c:78:0f:70:0d:0d:9c:a6:e3:72:
34:03:3a:18:88:1b:34:ad:e5:d4:63:d4:94:b2:d6:
d2:33:c1:d5:f7:3a:ea:02:57:e1:36:b9:ff:44:da:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:B0:00:BD:5C:55:CD:D8:84:68:5B:DD:50:3E:6F:29:5F:C5:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/35
Signature Algorithm: sha256WithRSAEncryption
b5:9f:c2:64:df:fa:18:d1:54:dd:7e:aa:46:07:ce:31:b6:b2:
64:dd:4f:69:6c:3d:d7:05:f8:63:6d:04:6f:aa:04:6b:9e:da:
88:c4:eb:e0:75:74:81:04:b3:48:69:18:44:e9:9e:00:a3:ff:
3d:70:d7:66:d2:b0:d6:ab:53:3a:a9:09:ad:11:db:9e:17:03:
92:c5:21:8c:bd:1f:92:01:7f:67:d6:19:d2:f3:d6:14:f9:c4:
2c:ac:22:c9:38:71:ed:66:9b:a9:94:1b:76:04:b8:ba:11:ac:
52:2a:67:73:69:56:3b:ac:e6:70:80:f4:cd:6a:fb:3a:de:d0:
77:0c:7a:35:e4:87:8f:d2:69:2d:c3:94:55:a6:1f:19:d5:2b:
92:2d:d4:16:32:e8:5d:c4:1b:4e:1a:b5:7a:67:b6:41:6d:4a:
66:b5:89:ba:3f:ce:28:80:b5:65:57:13:06:5d:9b:42:e4:f5:
8c:f1:26:ec:25:9c:31:01:f5:30:dc:9b:21:40:b7:5b:99:d5:
24:0b:54:98:06:c9:52:0f:b6:97:08:56:ca:99:d8:14:ba:b0:
02:4d:ef:0c:a6:98:3e:f1:35:bd:31:5d:6d:8a:80:42:6e:0c:
83:fb:03:b8:de:9e:46:6d:90:dc:2e:78:57:8d:c2:1b:ec:c2:
8d:2b:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:15 2026 by rpki-client