Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
File: ea31a166-ce12-4108-9868-894ac9df0e65.roa (raw, json)
Hash identifier: SdlU3W8JrOqdYU4jfwVou++PkgC+cY6ntW891FxnXu8=
Subject key identifier: AE:FF:39:96:28:28:21:CE:09:D7:67:3E:49:8C:7D:EF:07:C7:05:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B5FF1DCCCCC8508D8A76CFE5813C791E3F9FB18
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
Signing time: Mon 26 Oct 2026 04:50:37 +0000
ROA not before: Mon 26 Oct 2026 04:50:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5f:f1:dc:cc:cc:85:08:d8:a7:6c:fe:58:13:c7:91:e3:f9:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a05140f0b46bf55088f50d62c70d2161b3811bfa8b1b451c983c04bbca8f4035, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:68:99:fc:62:fa:a7:af:be:ac:3e:6e:7d:
31:2b:fe:d2:aa:46:51:93:17:9f:25:80:b0:d6:f4:
13:42:2e:b8:24:93:96:24:cd:74:b0:1b:db:83:52:
31:76:95:c2:55:53:63:38:62:57:89:de:2c:66:a5:
e3:f3:a1:0b:d9:e2:a7:0c:05:42:73:7c:1e:8f:c8:
7d:b6:82:17:ff:67:8e:e9:5d:e3:6e:30:e7:09:46:
90:0a:99:ce:6d:d4:04:7d:e1:6e:5d:a4:71:0e:ae:
50:36:03:d2:66:2c:4e:42:ba:2e:22:4f:b7:4f:31:
ef:b8:7c:93:4d:dd:e7:39:19:05:8e:cc:f1:56:59:
9f:7b:e9:f0:79:3f:f7:90:c7:0f:38:80:9f:f9:a3:
46:47:72:00:58:a4:d5:73:fd:fb:e5:87:09:e9:92:
90:93:52:35:15:44:82:35:46:3d:43:33:ed:cb:9e:
98:13:90:86:68:63:0d:92:09:f1:1d:03:0a:0a:0c:
95:ce:59:b5:74:12:82:1e:64:66:c2:06:a6:6a:fd:
86:e4:60:27:09:d9:47:b8:1b:5c:af:c8:fa:39:97:
6a:94:43:4b:ec:86:a6:35:e0:10:b8:8c:bf:2d:1b:
26:75:49:5d:94:17:39:7d:3d:e3:f3:28:c4:e3:69:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:39:96:28:28:21:CE:09:D7:67:3E:49:8C:7D:EF:07:C7:05:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b080::/48
Signature Algorithm: sha256WithRSAEncryption
38:54:38:53:64:c6:f3:c4:93:f9:b9:96:a3:05:32:47:6f:75:
99:19:aa:8f:57:60:10:9f:f1:f4:66:98:16:87:10:7f:32:fe:
3c:1b:39:e3:86:44:5c:a8:65:a0:02:37:97:68:d6:cf:4c:77:
3e:4f:e2:ff:62:57:92:2e:de:48:a1:58:b7:79:71:e3:d8:60:
3c:7f:a7:2f:86:95:1a:bd:ae:2c:0a:71:84:29:42:38:43:89:
4f:22:62:45:36:12:d1:ce:42:d6:b9:56:2e:43:3a:7a:2b:9e:
a3:f8:c2:8f:4c:54:29:9d:36:8e:2a:25:12:49:ee:b3:22:0a:
cf:06:49:cb:5f:09:35:d7:d5:f3:85:11:97:7f:a4:10:6e:17:
4e:ed:fb:ac:bb:2f:41:7a:0a:b4:15:70:60:96:59:f1:5a:d3:
bd:4f:61:b5:db:0e:ac:84:d9:a5:b6:6f:e4:06:d7:7a:19:cc:
a4:5a:d6:9a:66:89:1a:e6:6e:67:4d:92:99:35:48:f6:df:9d:
b1:0c:d1:7b:1e:bd:4e:9f:c3:61:00:b5:76:1a:85:1b:25:7a:
05:94:fd:94:43:75:c3:ba:bc:53:6a:43:6b:10:a1:c8:d6:11:
e6:98:ed:4e:64:46:2b:c2:c1:68:de:9c:e5:e3:00:b8:31:4a:
b8:bf:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:31 2026 by rpki-client