Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa
File: f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa (raw, json)
Hash identifier: lXNCHU/INDABQg1pNdXxF4gJnPQyPbLPRayH8QaQPpk=
Subject key identifier: 56:1A:78:BB:E9:1F:C2:0E:CE:9D:29:84:10:59:FF:26:FB:97:35:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1570183FC680038F7100648DC14CBA343D5722BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa
Signing time: Mon 26 Oct 2026 04:50:25 +0000
ROA not before: Mon 26 Oct 2026 04:50:25 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:70:18:3f:c6:80:03:8f:71:00:64:8d:c1:4c:ba:34:3d:57:22:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:25 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=83bf44d71074d22ba2c1b05fe832b621c12ca4b400584a2affc9f720bd011b7b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:1e:4b:43:a6:c8:b1:45:39:44:f8:e5:4b:
9b:6c:e3:e2:9b:fd:01:7b:3f:cc:dd:0b:96:b1:ec:
1a:70:97:41:ff:da:b8:5c:8c:bc:b1:bf:8e:f8:a4:
bf:1e:9f:62:b5:9e:e9:30:9a:62:f5:71:7d:d2:28:
8f:06:2e:02:e2:18:40:c2:c3:9f:13:c1:8d:fe:e5:
82:13:99:5e:91:8c:64:94:59:54:ee:cb:ac:65:7d:
45:06:a6:05:c3:f1:98:12:15:c2:36:38:4c:ae:c9:
bf:fa:12:26:bc:63:13:f2:3c:cb:89:1a:be:15:61:
06:c4:11:f6:94:24:fd:85:e8:c4:51:1a:5b:4a:2e:
f0:05:0a:74:ce:f6:af:22:e4:87:a3:f9:b6:a5:a8:
d7:23:ba:ef:7a:be:bc:6e:4c:72:26:65:a5:d1:73:
d9:d3:fe:9c:e7:43:ef:02:6a:b5:cf:88:db:1a:fc:
9a:b0:02:77:5f:22:87:dd:6e:47:b2:e2:e7:3f:93:
52:83:b0:32:a0:ad:e4:55:6e:57:51:f9:f7:d5:5a:
3a:31:af:17:6f:bf:29:5c:e4:b8:27:f0:b1:8e:43:
bc:46:4c:cf:1d:3b:28:9a:63:0e:85:b4:f0:32:a8:
54:55:ae:a9:4b:27:41:24:e9:3a:1f:ee:eb:d0:6a:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:78:BB:E9:1F:C2:0E:CE:9D:29:84:10:59:FF:26:FB:97:35:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:ac:a9:24:0d:42:d3:5f:a6:b3:76:f0:43:5e:c5:72:be:74:
7f:ed:e7:5e:bc:89:df:13:e0:7e:1c:19:f0:c4:03:07:09:c1:
52:8e:33:47:7c:c5:7d:d7:1f:ba:31:38:1a:d5:6b:da:46:42:
86:5a:4e:10:a3:80:e4:37:4b:83:9c:09:da:e2:96:1f:99:ba:
69:a1:b1:7e:4e:05:a2:ea:77:9a:78:bc:0a:bf:96:bc:d6:14:
18:e0:57:d9:9a:d0:6d:f5:07:5b:26:44:8c:91:c5:71:25:0e:
53:85:bf:20:4e:1c:d5:05:37:c7:7b:03:eb:55:87:f2:db:93:
e1:c5:1b:d3:7a:48:04:dc:d9:04:18:fc:c0:0f:40:05:b0:92:
d2:8f:55:1a:2a:f0:e0:49:a6:62:7f:48:89:92:9e:b1:8b:d7:
68:df:cc:66:81:ac:c3:a5:5a:d3:7f:38:93:d1:45:67:93:c5:
8a:0b:5a:e0:fc:77:52:81:8b:10:59:6b:bc:2b:39:4b:0d:29:
be:43:75:dd:27:e3:1c:1d:48:df:01:76:f7:d8:f7:57:8b:18:
e9:34:38:5c:fb:db:1b:5c:c3:79:40:72:5b:02:69:a9:bf:70:
35:74:8b:cc:ed:e7:b0:f4:e1:69:32:13:00:96:93:40:f1:8e:
a2:cd:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:47:38 2026 by rpki-client