Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa
File: ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa (raw, json)
Hash identifier: S+PlFJziQLtAtejqT5DSPX5UXLtOUXEGx9cm+TOxpuw=
Subject key identifier: 6E:5A:0D:6C:AE:12:07:87:98:30:04:A8:98:83:B2:3B:EE:AC:67:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53BFA45D238C04EBD228D7C8B8040A1426C447E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa
Signing time: Sun 11 Oct 2026 15:20:28 +0000
ROA not before: Sun 11 Oct 2026 15:20:28 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:1040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bf:a4:5d:23:8c:04:eb:d2:28:d7:c8:b8:04:0a:14:26:c4:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:28 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=0075bcce87286ddbebb8ab0bf5417c4123ecd30b2aab12c66df3e6ad1c33dab3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:47:d3:60:0c:e4:5f:38:13:bb:19:7c:aa:
8c:3d:1b:81:96:65:a2:f6:b3:ef:fa:b8:30:b5:8b:
bb:cb:ca:cb:48:ce:c8:08:bc:0d:64:16:d2:a5:d7:
ba:6d:9f:30:ab:89:3b:19:33:ab:c6:ce:c4:ac:01:
91:c4:8b:ce:04:7e:68:dc:29:6a:86:e3:d0:59:00:
94:f1:21:b7:f8:c9:c8:1f:d0:a0:f3:c3:20:15:22:
9a:a5:56:54:e7:72:d9:8a:11:7f:33:d3:09:f2:90:
4e:33:9a:68:c9:04:04:83:a6:c2:9b:3f:1c:6d:ac:
10:0f:74:79:c5:2f:d3:23:3b:ea:50:cb:80:c5:49:
c2:1a:e3:95:77:46:d8:cf:ee:45:2c:8a:5b:5e:ea:
72:be:f2:92:e4:e4:10:c6:ff:8a:bc:48:3f:8e:39:
20:a0:a1:d2:fd:c9:f3:39:7a:bb:a2:14:08:89:d6:
82:a4:97:a6:12:d5:b4:d6:61:e6:59:d8:50:a3:c8:
b9:cd:8c:98:23:34:17:4b:37:99:14:81:56:be:81:
d2:06:90:76:d7:e9:24:ca:3c:88:4d:6d:80:2e:80:
9d:15:bd:6c:1c:bb:73:f1:e0:ae:b4:73:87:62:ff:
82:51:0e:0e:ea:f9:19:81:e9:d4:36:b8:d1:13:ca:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:0D:6C:AE:12:07:87:98:30:04:A8:98:83:B2:3B:EE:AC:67:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea558c9c-d0cf-4cf0-99cc-884d490bd330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:1040::/46
Signature Algorithm: sha256WithRSAEncryption
46:ff:75:bf:b2:e1:1b:50:f2:45:12:2f:07:a6:55:c4:ce:b0:
11:42:c9:67:ca:f3:13:45:8c:c1:5c:5b:3b:d6:62:fb:e6:d6:
7f:ac:10:a6:84:59:23:12:64:2b:cd:d0:1b:db:6e:c6:8a:9e:
1f:13:c3:10:0f:de:39:08:03:98:ba:fa:3a:7b:a9:98:c8:ff:
d2:1f:48:9a:03:ca:5a:d6:d7:32:63:19:6e:79:e4:d9:10:c8:
c1:d8:a9:ae:a6:02:45:6d:30:d7:54:b6:f7:61:27:50:ac:74:
f9:74:22:ef:87:6e:08:dc:ca:3d:86:23:7e:95:02:b7:b3:49:
85:84:df:4d:27:a1:86:3e:16:2d:d6:92:71:3e:ea:a9:4d:39:
e6:21:5b:9d:c1:98:ef:b3:77:8a:02:c5:53:f8:61:44:01:9c:
50:c5:19:b9:67:7f:a8:9b:58:90:28:19:f9:19:81:3b:e3:fe:
19:04:77:ee:07:8d:75:04:fe:ce:91:ee:d4:1b:18:9a:39:7e:
5f:48:d9:80:41:86:35:bc:05:46:23:52:ad:0a:d1:bd:a2:6a:
02:ee:70:c8:0c:dc:56:4c:38:8e:03:0d:04:ea:ed:3a:3f:1f:
44:38:00:11:27:f0:03:cb:75:33:c2:e6:85:99:56:31:01:98:
24:7f:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:22 2026 by rpki-client