Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f067aa52-ee52-4fb2-867c-8dc79786d43d.roa
File: f067aa52-ee52-4fb2-867c-8dc79786d43d.roa (raw, json)
Hash identifier: Z5vONITjopu9PdzjJoyn8tDgTaWa3U/Sb9uWLfayfzA=
Subject key identifier: DC:9C:C8:80:B3:E2:2C:8E:2D:8D:E0:4F:F7:75:B2:C1:A7:39:4D:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 476E950C3450AD5BA467501DFBECFAF3C700BC62
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f067aa52-ee52-4fb2-867c-8dc79786d43d.roa
Signing time: Mon 26 Oct 2026 04:40:06 +0000
ROA not before: Mon 26 Oct 2026 04:40:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6e:95:0c:34:50:ad:5b:a4:67:50:1d:fb:ec:fa:f3:c7:00:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e57ca5cc0531bac8981acbb18cd9946a9948c4bc8ab2cc1b08daf2b66d6e2694, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:c9:35:50:50:45:22:2c:10:a7:42:35:9b:
db:ea:be:65:bd:d4:f5:fa:be:d2:7f:67:13:04:0e:
03:8e:3e:57:1e:98:fc:97:73:9f:29:34:17:5d:44:
c9:98:80:56:f4:b3:65:ea:1a:5c:4e:67:1b:70:90:
48:e4:ce:30:ca:b1:d5:51:f8:8c:2d:ff:81:bd:ab:
5a:53:62:b3:43:dd:82:c5:be:7b:56:07:ff:b3:9a:
19:f7:ae:3c:7d:2a:3f:00:d4:f4:9d:83:f6:99:e2:
72:18:e2:a2:b5:2a:03:b0:79:0d:57:98:9c:57:ad:
47:b6:ad:55:5b:e8:20:68:ea:a1:cf:9e:ac:de:12:
2a:65:60:09:9f:63:70:69:44:02:fb:74:d4:dd:f6:
18:e8:db:c6:1c:5c:c7:19:4d:2b:e1:a8:dc:c1:29:
ea:ab:f0:72:98:17:d0:31:94:85:cf:85:e3:80:83:
2a:dd:c1:e5:1b:b1:81:07:33:ae:c3:e5:e5:34:12:
72:de:51:30:c0:42:42:df:8c:a5:bc:b4:0d:a6:08:
e2:6e:50:a0:e9:32:cc:82:ed:b1:08:6b:54:a0:92:
a5:30:de:89:37:cb:70:68:f2:f0:ab:c7:5b:e2:4e:
74:c8:be:62:64:59:0f:4c:0b:7c:d3:f6:09:18:d1:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:C8:80:B3:E2:2C:8E:2D:8D:E0:4F:F7:75:B2:C1:A7:39:4D:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f067aa52-ee52-4fb2-867c-8dc79786d43d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2080::/48
Signature Algorithm: sha256WithRSAEncryption
28:1a:9b:26:e2:b6:1e:cc:e9:7b:a1:c1:ff:3c:b0:d0:75:80:
02:41:68:19:9b:e6:87:b2:2a:f1:93:56:83:07:85:e0:ae:0d:
68:74:e5:5b:26:c5:45:fd:c7:d1:f5:72:08:e4:ea:27:a2:82:
59:8d:d5:d5:84:a1:93:4a:b0:29:ab:fe:66:23:d8:0b:19:6e:
d8:56:cb:5e:f8:90:9f:4d:3f:2b:ce:9d:0b:54:30:9f:01:4a:
96:9f:41:54:ce:2f:65:c2:10:80:16:d1:5f:d2:a0:6b:c1:a4:
b6:a3:d4:f5:72:d5:17:0b:67:a9:19:de:9b:ca:c6:69:af:8f:
ac:c5:61:ef:24:b0:b6:87:05:eb:8c:39:bf:f6:94:bc:22:87:
da:ad:5e:fd:36:17:80:aa:1e:18:74:1d:51:3d:ac:fa:0e:7d:
ff:82:b3:d6:fb:35:a2:f7:08:b5:cc:e2:f4:9a:ce:68:10:45:
f7:a6:9a:31:b7:c8:bc:1e:3c:d6:8e:e1:3d:79:48:a6:13:93:
7f:cd:09:89:b3:6f:a2:0c:f0:27:b0:9b:40:1d:39:14:fa:58:
87:93:ff:82:08:e6:ed:61:71:a4:a6:de:6e:01:fc:34:79:c6:
5a:b0:79:33:78:cf:38:48:d3:78:aa:86:65:04:d0:5b:6f:74:
86:59:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:35:17 2026 by rpki-client