Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
File: e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa (raw, json)
Hash identifier: 1JQwfZAdOXOZJ2hF5vadLgtZuBPr+Ycus3Q4ZIhOr/k=
Subject key identifier: C9:36:6D:61:7E:80:43:83:C5:A4:FD:DD:C6:81:97:2C:48:69:84:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2807310F3237A2B19C3C9B3C4F36BB41981DAED7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
Signing time: Thu 22 Oct 2026 01:40:07 +0000
ROA not before: Thu 22 Oct 2026 01:40:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:07:31:0f:32:37:a2:b1:9c:3c:9b:3c:4f:36:bb:41:98:1d:ae:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=29ea617be0de890de169244f6c879308add407137cbd5033b8fe82ceeaaa0cee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:00:18:eb:6c:d5:e1:e4:57:59:2c:49:21:
fa:c4:13:1a:f5:11:cd:3e:41:04:75:0d:95:1e:cf:
91:4b:72:4f:72:af:38:5e:64:b6:cb:6b:42:7e:cb:
fc:8a:4b:94:67:98:6f:d8:e8:02:34:b8:5e:19:66:
da:4d:a1:02:ec:ea:ff:e6:69:83:9c:52:16:80:fc:
ad:78:3f:3a:09:1d:f9:71:5f:27:d8:ef:06:5e:7c:
2f:5b:46:27:00:f2:eb:1b:0c:4f:35:04:05:16:37:
87:c7:f3:e4:ec:c2:79:97:4c:cd:ef:af:e8:4a:a9:
3d:50:2c:5e:f3:9c:e9:0e:82:16:54:50:31:be:72:
50:04:ef:c8:42:b2:59:93:a2:2a:ca:6c:f9:14:20:
34:0a:5a:cc:20:58:07:53:c2:4c:a6:d5:ad:95:52:
ba:2f:b7:00:70:60:39:7f:51:e1:53:b0:27:16:f9:
ea:5b:6c:b5:77:8d:dc:f5:8c:ad:64:13:66:a8:5f:
56:e3:0b:b9:63:b3:05:44:e7:d4:19:ca:52:c9:55:
53:75:7c:24:4b:23:dd:1e:56:bf:49:c6:09:1a:4e:
87:40:2a:d4:ec:c7:fe:48:da:61:56:b4:8f:00:ea:
4e:8f:3a:c4:30:1b:41:81:d1:99:d0:fe:be:7e:c8:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:6D:61:7E:80:43:83:C5:A4:FD:DD:C6:81:97:2C:48:69:84:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e615fea3-3826-4c59-9574-72fb6cc8f2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:a000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:a0:38:b9:61:33:23:5e:d7:cc:63:23:4f:59:52:b0:26:69:
d5:ce:51:8f:9e:43:28:de:bc:2c:83:78:53:3d:99:b9:c0:4d:
52:09:4d:65:3e:79:75:93:64:d5:f7:a5:0f:9b:97:8f:4a:c5:
f7:9e:19:5f:5e:c3:59:9d:8d:ee:56:83:91:64:34:c6:14:1b:
1e:eb:15:52:87:63:6e:43:5d:4c:eb:4f:57:18:00:d8:84:8a:
d4:57:42:80:2b:8f:6e:19:7c:81:95:56:bc:60:ad:14:1f:e2:
cf:31:02:28:05:61:8a:db:7a:e2:ce:13:22:be:91:39:ff:83:
45:1f:c3:78:2b:1d:1c:c2:c6:f6:3d:68:3d:2f:95:63:87:09:
d8:fc:d0:44:19:36:15:16:29:c5:0e:e1:7d:de:f3:32:33:dd:
81:83:07:3f:f0:b8:cc:20:be:3b:da:da:ba:5b:40:ba:58:25:
ba:46:41:f2:f2:3b:c7:2e:b4:2b:12:2a:fa:b1:ee:b2:50:30:
85:93:db:d3:eb:e0:fd:90:28:e5:91:aa:e4:6f:22:48:e8:9d:
52:f4:f7:88:d5:3e:06:ff:34:de:0c:8d:e3:d5:b5:36:62:be:
d9:d0:72:d2:9d:82:94:d6:d5:87:b5:ed:e7:db:c4:ca:d9:26:
e2:47:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:38 2026 by rpki-client