Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json)
Hash identifier: /Co+qDYITnMJhIO13xcGflJh2/VPk0g36ceDV6lt1tg=
Subject key identifier: EC:BE:DA:4F:8A:CE:4B:1F:75:8F:6B:A1:AD:AA:AC:5B:F4:EE:3B:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 198C5ECB1502D7E0AE253573E7414B965F01125B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
Signing time: Mon 26 Oct 2026 04:31:04 +0000
ROA not before: Mon 26 Oct 2026 04:31:04 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:8c:5e:cb:15:02:d7:e0:ae:25:35:73:e7:41:4b:96:5f:01:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:04 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ae3f1262ce9069b35d4e006bd86e9cabc7a01d682c2fa33889549b1ac943338b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:31:b8:5b:6d:19:a1:23:ea:bb:c5:a9:31:
55:38:87:ac:d8:77:e1:cc:d9:61:de:0d:06:14:65:
7f:45:d4:15:30:bc:46:6b:31:6a:63:a3:a7:5f:e2:
53:b8:71:d9:ae:99:59:91:db:8e:b0:38:9e:41:6a:
3d:27:c5:b6:49:49:78:f8:6e:f1:e7:3e:ac:52:3c:
fe:e6:94:56:61:8c:c7:63:eb:c5:c3:34:c6:ac:ba:
ad:9d:d6:0e:f5:1d:20:01:53:32:46:36:25:83:68:
a3:15:cc:ed:4b:b4:65:ba:14:37:e1:75:80:77:21:
e6:7f:90:03:1d:87:05:03:ed:c8:55:f4:d0:14:05:
d2:6d:c8:82:8e:4e:01:c9:ae:a2:86:c0:aa:20:32:
e0:1e:84:71:f5:2a:f1:ea:07:ec:44:4a:0d:47:0d:
27:9f:6b:41:cb:39:e5:fe:17:15:a5:00:5a:e8:15:
29:6d:f0:16:37:b7:7a:4f:fb:ee:da:23:b9:cc:d1:
de:e7:62:49:f6:5c:30:6e:0c:c5:bb:e8:18:30:b8:
59:da:b1:ea:01:b6:34:b8:3e:90:38:e1:45:db:ab:
5e:73:a7:0f:3c:f6:39:78:34:20:8e:56:39:a9:75:
2d:55:36:a1:1b:44:8d:03:ec:44:95:f7:22:3b:f7:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:DA:4F:8A:CE:4B:1F:75:8F:6B:A1:AD:AA:AC:5B:F4:EE:3B:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:a4:ba:6e:a8:5d:83:d9:2d:f3:54:37:96:08:28:2f:80:ed:
55:c4:f7:01:1c:96:bc:7c:9a:13:8b:b8:37:12:47:59:df:f2:
d5:89:e5:d2:a6:7e:aa:8c:30:2e:e0:52:f3:d2:56:b7:d5:1a:
5f:43:36:8f:0a:10:a6:b1:3e:6c:4e:d5:7a:78:33:73:5a:79:
2b:26:b7:04:77:58:6f:b4:10:2a:49:8b:79:00:63:f9:fa:a6:
f5:b0:28:d2:70:51:bc:e7:24:22:22:87:1b:75:7d:de:4d:91:
89:6e:38:77:25:ac:4d:9e:c3:84:7b:a9:4c:18:b7:08:21:28:
b9:bb:41:27:a1:81:ce:c7:7b:83:82:e1:a7:a3:2a:4c:ae:db:
d4:9a:28:af:30:3b:ca:bb:1f:b2:db:56:f6:fd:20:82:6b:92:
06:0c:09:ff:e3:6a:7c:c2:85:b7:c9:a8:23:ed:06:0d:c9:f6:
fe:18:1d:49:f7:07:ab:ff:5c:02:4c:47:20:89:15:dc:33:c8:
ac:71:8f:9e:03:f1:6b:fa:aa:62:ad:f0:dd:b0:ad:40:5e:64:
19:39:b8:1e:ec:06:a9:9c:46:6f:34:56:52:89:4b:19:b5:92:
df:c4:1e:78:6c:04:f9:51:d5:ac:5d:93:14:bb:da:0f:d1:23:
17:ed:f8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:29:51 2026 by rpki-client