Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
File: ef1c587f-7016-4879-9f71-ad8ce780a8da.roa (raw, json)
Hash identifier: e0vciEP5JKQBE2ajhi6f4MlWgFk8r/ichtHdF6CiZPo=
Subject key identifier: 8F:17:B2:E0:23:C5:76:E1:83:38:B3:2E:38:A0:D8:A1:95:A1:6E:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16D9DB59C5E22802BCD7651C1ADB9A618AB24346
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
Signing time: Sun 04 Oct 2026 00:30:41 +0000
ROA not before: Sun 04 Oct 2026 00:30:41 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:db:59:c5:e2:28:02:bc:d7:65:1c:1a:db:9a:61:8a:b2:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:41 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=1ca827094659c48f32ae69ccccdfe3128f23d821978e65413e23b8ad73dd558a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:b3:1c:be:63:4a:1b:02:59:ac:78:a7:5e:
b2:e9:93:61:f8:23:f0:47:ed:69:7c:6b:43:83:9a:
56:a7:13:3a:a4:06:32:51:52:45:d2:f8:d2:cf:26:
7f:2f:0e:d7:ee:c2:7f:e3:28:1c:ba:43:e1:2d:e5:
14:9b:80:9f:96:15:47:12:67:e0:db:ce:59:e8:7c:
b3:67:09:64:49:93:7b:cc:dc:a4:49:2a:f4:24:2d:
e7:73:d6:5d:33:45:2c:b1:9a:f4:2b:c9:96:fc:2d:
34:c7:b8:e2:49:c9:6e:1a:0c:44:ba:33:76:bb:8f:
c1:5c:de:50:3d:2a:5a:8d:66:00:25:15:60:7f:b2:
72:43:2f:b7:df:b5:9b:32:cf:e9:c5:ff:66:1d:89:
e5:ff:50:98:22:0c:03:97:e1:fb:d3:b4:c8:75:c6:
ea:69:da:15:a9:f7:2f:20:d2:c5:d5:4e:24:7f:c6:
25:5b:64:a1:f9:20:94:c6:cf:a1:7c:4a:9f:7e:99:
5b:cc:23:30:dd:11:5b:6c:8e:fe:50:29:45:6b:5f:
b8:6d:6d:28:1b:4e:41:40:7b:ec:ac:d0:9f:66:1e:
8c:25:2c:3c:80:4a:7e:44:5c:0d:fa:e3:de:2a:38:
fb:61:0c:ca:ad:70:e7:aa:67:b8:8a:c0:18:6f:62:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:17:B2:E0:23:C5:76:E1:83:38:B3:2E:38:A0:D8:A1:95:A1:6E:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:57:4e:20:8b:e0:4e:ca:d2:4e:03:ac:58:bb:7b:c0:49:dc:
64:77:c0:91:bc:55:2a:d4:f5:23:19:02:83:a9:42:07:65:a0:
af:87:ba:5f:f8:56:ef:82:93:14:ec:24:1e:1c:a1:3a:89:21:
4d:2b:41:bf:81:9c:99:49:42:e2:36:19:6a:e1:93:c4:69:46:
47:ba:72:cf:e1:28:73:d8:ec:ad:87:60:44:71:b1:5a:ca:54:
f7:93:40:bc:86:9b:93:77:77:1f:08:8e:bc:15:28:52:0c:ad:
6c:c6:5d:6b:44:ba:16:bb:62:25:b3:86:51:43:e6:84:dd:6a:
6c:98:21:47:e1:8c:81:71:54:f6:58:e5:4a:9a:f6:6f:c6:33:
c0:56:07:b3:d9:31:fc:0d:4b:3e:3a:f3:d9:30:77:85:6a:c3:
f5:fe:fb:fe:99:24:2c:b0:d3:61:3b:f6:7c:3b:20:2f:43:a7:
cd:d5:71:40:06:1f:cf:5e:4f:79:d2:d2:61:df:6c:c5:cf:40:
60:08:6b:f7:62:59:c7:27:66:ab:26:83:ec:d2:ea:ca:5d:7e:
4c:e8:0f:7b:71:88:2b:1e:60:9f:5b:ae:ff:10:91:8f:97:41:
fb:22:b5:79:dd:77:c9:4b:1c:de:a3:17:09:7d:23:02:7f:0b:
5e:be:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:08 2026 by rpki-client