Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
File: eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa (raw, json)
Hash identifier: m7nCEjjR2gZLOcDCtB39IXD6p8dunHHnaums/Jse2kU=
Subject key identifier: A5:35:8A:F2:0A:30:BD:9A:79:DC:32:F5:2E:89:66:F3:D1:B0:F1:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0AAC63AA9C49CED9B4995BE4BDE83161FC1AE3BD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
Signing time: Mon 26 Oct 2026 05:10:54 +0000
ROA not before: Mon 26 Oct 2026 05:10:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ac:63:aa:9c:49:ce:d9:b4:99:5b:e4:bd:e8:31:61:fc:1a:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1919f9720eea94cd6262709fa1200d58d58141e7dfc98e84f33c08b42faaf8bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:de:45:f3:34:a8:5c:ca:a2:19:a4:38:0f:
00:ed:24:56:34:36:fe:e3:a1:ce:ef:3f:c5:0d:be:
d3:f8:1a:cf:d5:cd:f8:84:2a:50:25:f6:d5:86:e2:
72:35:94:44:cf:df:67:13:b0:ea:b4:e0:9f:b8:64:
2e:8f:32:d8:46:1c:2a:78:cc:77:a3:0e:b3:0e:ea:
2c:e8:2f:3e:08:18:3c:6e:f5:d5:45:a4:eb:aa:47:
7c:c5:24:40:e4:e0:81:41:3f:13:f3:2d:ee:25:01:
52:99:f4:61:10:24:65:07:7c:de:81:15:54:54:78:
42:70:9a:fc:c2:5b:58:fe:9f:3a:ed:4a:5e:7a:1b:
0d:ba:ea:ef:16:0e:dd:1a:3c:9d:d7:d7:a3:17:75:
bb:86:7b:11:7a:85:09:79:62:36:92:77:bb:c7:09:
03:bf:6e:9b:1f:f6:0e:bd:1b:d7:15:41:0c:df:2d:
92:fd:35:33:d2:f2:77:48:45:97:4e:85:f9:1b:7b:
b9:ba:b9:d5:0e:98:4a:67:ce:68:6e:5a:71:1f:5f:
0a:c9:02:8f:3c:b4:23:e4:42:39:9f:3a:8a:1a:fd:
10:46:e4:23:c9:85:3c:f0:03:4b:f1:1f:1e:f2:36:
90:17:5a:90:50:8c:a1:c3:e3:fa:21:61:57:0b:8e:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:8A:F2:0A:30:BD:9A:79:DC:32:F5:2E:89:66:F3:D1:B0:F1:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4040::/48
Signature Algorithm: sha256WithRSAEncryption
4e:21:16:48:b6:45:8d:fb:e5:b2:c0:1f:a1:3b:76:4c:f0:0c:
59:7b:b4:0b:57:97:1b:f7:6b:65:c8:19:8d:ac:11:9b:8b:02:
36:42:c3:a0:43:f9:32:1b:cf:0a:26:ee:ee:35:15:6f:b5:42:
d2:59:39:a6:5c:64:06:4d:6d:ac:40:ee:f2:63:44:30:ab:07:
cd:ef:61:91:05:38:4c:bf:8f:1b:62:83:9c:33:5b:5f:3b:7c:
c5:81:d9:dc:c5:e0:c5:48:80:20:27:06:b6:12:80:1e:73:55:
b5:fb:b4:fc:72:7d:27:11:e2:81:40:a4:e6:d6:80:df:47:e5:
b3:d5:27:28:2e:fc:b0:b5:ac:d3:01:7f:4e:0e:ee:21:65:ff:
f0:26:4d:9b:f3:5f:99:1c:0f:ea:80:d7:89:f9:d4:19:07:5b:
f1:55:e9:75:ae:6b:93:1f:f5:9f:34:19:be:41:72:e6:9b:59:
3d:fd:9c:9a:e3:75:6a:bd:dc:2c:ff:dc:ca:60:fd:0e:fa:cb:
68:0b:37:02:d9:56:b2:bc:23:68:6f:66:1b:c3:75:a4:f8:81:
a8:a5:ec:5b:7e:10:ba:be:95:90:5c:22:95:c3:f9:a7:63:05:
a5:ae:df:72:19:8a:2e:49:ac:61:fc:82:74:f7:cd:4d:54:f3:
45:09:d5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:47 2026 by rpki-client