Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2d9776f-9750-4d76-93f4-210836f1105b.roa
File: e2d9776f-9750-4d76-93f4-210836f1105b.roa (raw, json)
Hash identifier: Cicv8flTPjNEJicSwc4hDYJVQQSS6uSD9r1QTubGmHw=
Subject key identifier: C3:22:CC:FF:4E:DF:C4:42:C9:4E:1F:DA:C0:3B:1D:35:90:9C:86:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29E040E9657C479F64E12D2230F91A2A2572D945
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2d9776f-9750-4d76-93f4-210836f1105b.roa
Signing time: Sun 11 Oct 2026 15:20:16 +0000
ROA not before: Sun 11 Oct 2026 15:20:16 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e0:40:e9:65:7c:47:9f:64:e1:2d:22:30:f9:1a:2a:25:72:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:16 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=1912eee5c903915fde50094d9a8830da2aa43a22edc967b571bd5db814c2b94c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:3d:1b:ab:b5:a8:12:7e:19:2b:4b:c0:dc:
4b:52:08:87:7a:c7:d1:84:25:16:4d:e9:9f:d8:45:
a1:4e:77:04:20:7f:42:ff:02:77:3d:74:21:2c:12:
3a:69:ea:08:ed:c5:c2:69:20:a3:19:3b:23:26:23:
34:8e:ef:82:30:ad:9c:ca:1c:77:44:dd:a8:14:87:
ac:98:21:4a:97:7c:cc:50:fa:98:59:94:d7:0d:b4:
88:40:56:34:c9:0d:ed:68:7c:4a:9f:19:1b:d1:6f:
82:3f:cf:c8:84:7b:69:dc:f6:a5:54:23:a9:d1:6b:
4b:60:7f:71:c3:f5:f2:b1:8d:2d:77:22:87:9a:bc:
5b:37:91:c4:77:84:b6:14:ab:d4:a7:af:f9:b9:45:
af:60:23:33:84:ac:de:e6:2a:42:7c:47:0d:ab:53:
cd:53:b5:00:a7:90:a4:13:7b:22:25:e3:77:81:29:
f5:b5:0c:82:98:74:27:f5:d0:47:35:9f:fb:5c:d1:
7c:9c:74:19:b8:e5:b4:24:2b:3f:22:04:f6:64:f6:
3a:e2:cc:35:aa:de:56:5f:29:c4:4f:14:29:cb:b5:
da:57:18:a8:61:bb:e2:82:a8:4a:76:bc:21:fe:ee:
a4:87:aa:76:e4:59:98:1c:89:97:59:13:a4:f9:a3:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:CC:FF:4E:DF:C4:42:C9:4E:1F:DA:C0:3B:1D:35:90:9C:86:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2d9776f-9750-4d76-93f4-210836f1105b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c020::/46
Signature Algorithm: sha256WithRSAEncryption
44:9b:cc:59:ca:b5:c7:22:59:9b:c3:7f:ed:da:38:a8:8d:ff:
64:37:3b:bc:ce:26:6c:9d:e6:99:b5:41:ba:19:64:80:b1:fe:
5e:ad:d7:4b:59:9a:24:15:ed:e5:91:9d:17:64:a9:aa:48:87:
e5:ab:32:de:d8:48:a6:6c:d6:a9:28:63:c7:b1:d9:ec:61:83:
6d:df:3d:6e:51:cc:0a:04:40:e9:46:39:bf:a9:6b:3f:55:16:
66:bf:86:ce:77:b5:41:41:cb:72:6a:9d:67:35:83:3c:2f:7a:
94:c5:6b:df:30:1f:7b:0b:6d:b1:d7:ea:4b:fd:85:4b:9b:c3:
8c:c3:78:bb:7d:7d:f2:b6:7e:1c:56:d2:f7:7f:75:08:16:f5:
c2:4d:bf:2e:59:51:98:e2:e7:ec:78:36:bc:b8:9c:f4:63:85:
6d:9b:07:13:41:25:17:53:29:42:fa:b7:76:f6:64:5c:29:2c:
0f:c1:2f:b6:eb:41:4a:d6:f2:28:68:0c:94:ad:7e:7b:22:13:
eb:83:78:bb:3c:7f:87:56:0f:15:06:82:b1:f1:a5:04:c3:75:
3b:e4:e5:b9:8e:93:67:e2:e8:33:bb:30:c6:15:a0:db:de:5d:
ef:c5:65:a1:27:5d:65:27:c1:52:54:5d:c8:0d:5a:95:fa:45:
73:7a:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:20 2026 by rpki-client