Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
File: e3c7ab12-58a1-44db-9063-7d7fef442d38.roa (raw, json)
Hash identifier: +xPID0Hi6Bsqt01HtWsp6JMOqRImT2QmXjFzDCE+FKE=
Subject key identifier: 66:51:49:86:18:83:67:6D:6A:84:C8:C9:F4:A3:F5:76:2A:E4:2C:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60E4493956F5C2E172F96D92AFF9EB191DC2F7CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
Signing time: Fri 09 Oct 2026 01:30:47 +0000
ROA not before: Fri 09 Oct 2026 01:30:47 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e4:49:39:56:f5:c2:e1:72:f9:6d:92:af:f9:eb:19:1d:c2:f7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:47 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=b31e6139d7979c821e7c74ab6fe1fa5ac74a5fffee3bdd0520315c115e939063, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:3f:fc:8e:cd:64:1c:4a:93:4a:f3:54:b1:
7e:8a:06:e3:b0:f9:0d:1d:62:df:20:21:07:4a:3c:
f1:f4:d3:8e:23:cb:cf:2e:64:cd:0d:09:a8:3a:e3:
fa:8f:82:02:ba:c3:68:2e:5d:c6:13:e0:be:9d:1a:
e8:83:ed:3a:2a:d2:b8:f4:39:ab:33:92:99:f2:80:
b9:b9:e3:a4:2b:01:88:63:11:ce:e6:15:76:4e:c6:
03:0c:3b:25:75:2b:a3:55:7f:46:2c:62:07:20:6e:
b0:e8:63:c5:c4:7c:ac:cb:c6:75:d8:27:91:37:74:
d5:2f:b3:ea:a2:6f:ab:97:fb:2d:56:5b:16:14:85:
f3:83:74:c5:b9:de:23:19:72:ed:92:7d:d6:99:db:
ba:01:fe:5a:d2:47:eb:d9:cc:0e:2f:4d:24:97:8f:
b3:03:e7:15:3e:24:a5:9a:a4:7c:57:88:fb:83:25:
89:a2:5a:b9:f4:ae:cc:54:26:06:54:ba:06:54:16:
2e:e0:63:ef:ba:81:a9:ee:15:e0:71:38:59:d2:b4:
50:33:7a:cc:e7:9c:8a:da:30:a2:05:25:8d:61:fc:
d8:94:ac:69:54:bd:80:1b:44:a0:72:06:14:f8:ef:
51:25:28:38:f9:1a:43:4c:04:cd:c1:f8:f9:a6:fd:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:49:86:18:83:67:6D:6A:84:C8:C9:F4:A3:F5:76:2A:E4:2C:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c080::/48
Signature Algorithm: sha256WithRSAEncryption
78:88:fe:a1:8e:6a:c8:03:41:ec:bd:90:39:8a:23:d1:3b:af:
77:1a:3e:4c:fb:f9:9e:03:de:36:e6:1a:af:77:d8:27:93:f3:
8b:81:80:5a:39:9e:08:e3:5b:e3:0f:44:7b:92:d9:a7:8a:a3:
09:98:74:61:4f:4a:e0:e2:9e:24:04:9d:74:7a:01:d5:97:f8:
1b:80:eb:47:e6:ec:45:14:db:02:cf:47:8e:a0:4f:1a:7e:01:
f8:76:6d:ce:4c:18:e2:7b:17:5e:4c:96:3c:dd:c8:fc:95:55:
95:aa:28:e0:60:e3:86:df:d0:3d:c5:ff:f3:08:8c:07:e8:33:
14:a0:0e:3d:66:f8:0b:29:2b:af:75:67:51:7b:b3:8a:0d:04:
85:3b:08:d5:e2:6c:53:f7:fc:75:76:63:cd:15:71:56:1b:7a:
f6:e0:bd:15:ac:71:13:c8:63:5d:95:39:58:3b:ff:53:1c:6a:
16:c9:1f:b7:8c:5a:69:93:16:dc:54:9b:02:fe:26:db:06:8c:
ff:9c:01:39:bf:b1:12:54:54:e7:3a:e5:c7:31:a2:63:fe:ee:
75:b5:eb:1b:a4:8c:43:9d:47:b8:7b:c9:60:e7:5c:34:e1:38:
49:d9:c2:09:77:48:50:c0:09:65:60:10:66:fd:d9:cb:f1:45:
01:8e:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:36 2026 by rpki-client