Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
File: e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa (raw, json)
Hash identifier: yLiPN6q4EOl3u2+IF+SFBOrZNsQ9UkvSPnipDLKRw9c=
Subject key identifier: 02:F7:4C:4E:5F:BB:BE:BE:DE:EF:5F:49:07:7A:06:7F:1A:C3:5B:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02FE9EC30CE9D45D8A35608793A222100BDFDC50
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
Signing time: Wed 21 Oct 2026 01:40:10 +0000
ROA not before: Wed 21 Oct 2026 01:40:10 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fe:9e:c3:0c:e9:d4:5d:8a:35:60:87:93:a2:22:10:0b:df:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 01:40:10 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=9e5c49046cc5f150a2b1f2ba17fbf2a970b3124991100cd18702b17b49b3bb57, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:c7:c6:90:9b:92:b6:b5:06:5a:41:05:3e:
6c:d3:85:67:29:26:af:63:61:d9:4e:3a:26:26:45:
76:d0:72:39:df:d6:42:ac:f8:4c:e7:c5:d1:05:16:
1b:6a:7d:1e:c3:5e:b5:dc:22:40:5f:d3:02:1f:6a:
50:52:3f:43:50:3f:b9:4e:e4:17:78:af:7c:47:77:
5f:76:16:9b:3f:d8:6e:d5:bd:48:bb:a6:af:ee:c5:
a8:57:10:77:aa:f9:83:4d:19:39:e2:31:f1:d4:c5:
52:58:68:a5:57:a9:89:43:73:d2:27:f9:16:39:2f:
51:cd:4b:7d:07:66:bc:00:e5:c7:13:c7:14:8d:bb:
40:1d:e4:97:17:87:64:c0:ac:bc:ea:41:7f:68:54:
e1:10:61:0f:bd:21:f2:73:6d:3a:20:f7:60:20:c3:
c1:40:ec:74:2c:ed:bf:8a:15:d9:62:1b:3b:50:fe:
0f:6b:13:16:0c:4d:92:fe:b5:d2:63:cb:10:7f:56:
83:5f:c8:01:28:f6:dd:6e:75:fa:50:af:41:01:af:
9d:12:ab:7a:45:26:a9:b1:cd:2f:db:74:62:8e:ff:
64:1a:d0:8a:27:8d:c4:2f:3d:4c:33:aa:f9:fa:91:
ac:a1:a9:50:ff:b7:4d:6d:d0:c4:ad:f9:d0:8e:e1:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:4C:4E:5F:BB:BE:BE:DE:EF:5F:49:07:7A:06:7F:1A:C3:5B:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:6000::/48
Signature Algorithm: sha256WithRSAEncryption
af:73:02:a4:51:22:6a:9d:8b:bf:ff:7c:f8:84:0a:66:e3:9e:
b2:1b:45:4a:ea:9d:f2:39:16:50:b8:81:ed:a5:e3:3d:41:5c:
65:be:1a:83:3e:38:5b:d5:34:74:ab:82:b0:c2:cf:ff:49:d7:
d4:e6:08:49:da:32:d1:71:a3:10:54:f0:12:e8:c9:63:f8:f9:
ad:ac:f9:5f:27:80:00:4a:b7:df:4b:c3:c1:ba:f6:2c:67:ad:
19:c6:5a:a9:74:01:ad:5d:1a:4a:79:16:e4:44:12:b0:f0:09:
c5:08:35:43:39:09:47:37:cf:5a:11:40:d8:e5:e7:d8:49:ec:
8c:ea:f8:a6:2a:ba:59:23:bb:44:9d:d1:4d:03:17:a0:e2:8e:
88:5f:84:ac:4d:ee:02:07:ea:8a:68:ff:1d:47:2a:94:15:2d:
ab:da:d2:ce:ca:5d:fd:6a:20:b8:63:03:34:46:98:c0:f4:aa:
b0:7e:94:cc:1a:75:b8:8c:28:4f:dc:2f:23:46:1e:6c:d1:89:
46:7e:ce:62:58:60:b3:3b:b6:b5:92:41:48:e2:0f:e7:2a:2d:
78:06:10:ea:de:d2:ec:de:ed:21:95:66:eb:c9:b0:c4:91:61:
23:b5:a9:c3:2d:9e:2a:c5:4d:1b:f6:dd:6b:d3:6d:98:98:64:
19:51:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:18 2026 by rpki-client