Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
File: f3736ec9-491c-43bd-b672-c821fdae78f1.roa (raw, json)
Hash identifier: 1/t5+FOY/MZEf8HDVc2fWubz3PIFRvyb366zCDvfdC4=
Subject key identifier: 96:2C:52:B0:18:3F:9D:16:4C:A1:4C:C4:80:E8:C3:A0:2C:93:9F:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09B6A32EB3DE27AB0DA3312B1D5AA2DC376989E2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
Signing time: Thu 22 Oct 2026 03:50:17 +0000
ROA not before: Thu 22 Oct 2026 03:50:17 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b6:a3:2e:b3:de:27:ab:0d:a3:31:2b:1d:5a:a2:dc:37:69:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:17 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=1f3865d12cf7536b8d7179bde21362c3dfaabd0e1fe54c35fa6b86b9a58469fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:0e:56:0e:3c:5a:11:42:d9:21:23:3a:d2:
cb:3c:0e:39:69:58:0a:90:18:39:5c:04:5e:68:49:
c3:37:54:46:27:74:96:86:c7:80:0a:1a:36:d4:33:
4c:a5:f3:10:87:08:15:b5:bf:b4:aa:b7:48:4b:26:
c1:a5:5a:df:85:c4:a9:dd:59:ff:00:6b:0c:29:9c:
dd:e6:dd:24:2b:db:fa:c9:8b:cd:20:7b:92:7d:ff:
a4:70:a3:cc:3a:55:1e:eb:6f:21:ad:41:89:cb:71:
8c:d8:ac:ae:e3:68:0a:cc:c7:9d:f7:9b:16:7f:fa:
50:87:b8:1f:e2:90:ad:46:4c:fc:b8:78:ab:cc:54:
52:14:9d:c5:ab:ee:4c:79:bf:cd:eb:7c:25:9a:ea:
51:a9:5e:c1:8b:f0:bb:ea:fc:91:ee:0e:87:c6:34:
f5:22:4d:2e:cb:22:c4:34:7e:04:e8:59:52:5a:3b:
12:e7:c5:c9:d0:fe:0c:7c:ae:1a:52:b2:4b:fe:ee:
cc:d1:3d:1a:76:74:b7:12:aa:02:17:a4:06:2d:e4:
9b:30:f6:66:a0:d6:54:26:13:5e:f8:c9:0a:b6:41:
6d:2e:09:09:ec:98:c5:a7:08:15:87:26:e8:9b:c8:
f5:dd:7c:d2:82:5a:a3:66:d4:a6:17:55:13:3f:e6:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:52:B0:18:3F:9D:16:4C:A1:4C:C4:80:E8:C3:A0:2C:93:9F:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f3736ec9-491c-43bd-b672-c821fdae78f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/48
Signature Algorithm: sha256WithRSAEncryption
74:95:77:60:9c:96:8e:dd:ab:9f:9c:3d:97:7e:8c:8a:10:13:
4c:b9:56:e6:b2:f3:36:6c:45:56:71:c4:ea:0f:32:03:9c:07:
44:92:a3:2b:f1:0b:2a:43:65:a5:f7:75:49:93:76:3c:11:77:
9d:3b:63:c1:0a:01:92:0b:23:e5:7a:77:c6:6f:75:e9:e2:dc:
92:55:b7:ba:c9:e9:f6:ee:9d:3e:6d:a1:9d:b1:6a:d7:f9:72:
9c:27:d5:f1:4a:4d:6b:06:47:5b:54:1e:ad:d6:36:a9:fa:c2:
7c:cc:01:63:c7:83:9e:71:a8:df:23:28:a1:2c:0b:e1:d1:bd:
c5:1f:bf:89:77:d0:5f:fd:43:05:7e:f1:83:a6:d7:ce:8b:14:
83:69:51:f9:03:a3:bf:de:db:60:b6:8b:e3:1c:8f:5b:e0:22:
c0:d9:a8:08:ea:d2:31:90:3b:88:91:cc:c9:43:fc:fd:33:f4:
01:d6:12:d0:4a:66:09:38:d8:52:ad:fa:25:7e:ca:8b:b1:e3:
db:c6:81:d0:3e:9c:b0:39:ba:5a:b3:38:a0:dc:89:ac:cb:72:
6d:70:a2:8e:db:5e:bd:a9:1e:b1:cb:52:a5:4d:03:bb:45:1d:
5b:e5:a3:35:ec:1b:1b:17:fe:1a:9a:cb:af:aa:63:35:f3:38:
5a:ae:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:15 2026 by rpki-client