Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f51bf20f-531a-411e-baff-37a38bc29ce9.roa
File: f51bf20f-531a-411e-baff-37a38bc29ce9.roa (raw, json)
Hash identifier: rEXf2RH0ZekOnPNxF9H3gYAXtK3bBOe9FIBmyN5S5ww=
Subject key identifier: 20:D8:DE:1F:4A:B4:24:29:0A:70:DC:B9:61:B1:39:20:0D:7B:A3:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E0EE6CD1FC9D8CA8A9FFC688E6465127E607E37
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f51bf20f-531a-411e-baff-37a38bc29ce9.roa
Signing time: Mon 26 Oct 2026 05:02:38 +0000
ROA not before: Mon 26 Oct 2026 05:02:38 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0e:e6:cd:1f:c9:d8:ca:8a:9f:fc:68:8e:64:65:12:7e:60:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:38 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1ba18ef270bfea8c07e68f766bc97efba7d709a271ed3087a0684e9eb9fb4aef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:26:f0:fc:ab:98:4c:1a:e7:4a:32:d5:f8:
1a:96:73:7e:25:cc:d2:a0:f9:2c:ad:97:ea:2e:65:
e0:a7:93:e7:33:ad:98:c8:36:00:d1:81:1f:5f:fd:
9f:cb:7e:eb:ff:3a:6d:9f:30:96:07:e0:85:3d:f1:
7f:01:2e:65:ce:8e:30:bc:b5:ab:89:0f:82:f5:f0:
58:1b:d8:fb:1a:24:3a:de:01:6a:51:4d:51:e4:44:
81:01:2a:b6:0a:1a:2e:e2:20:4c:f8:fe:ab:aa:2e:
17:84:58:14:3b:eb:56:b4:7b:68:a2:38:69:ce:53:
57:7b:b6:b8:05:41:07:6d:ea:86:cd:06:61:05:1d:
89:e7:6d:c7:8b:dd:03:ef:b6:c1:63:5c:95:a2:37:
f4:8e:29:a5:57:53:fb:05:af:88:e7:82:12:41:17:
69:ba:14:8b:c3:6d:79:55:02:b2:d1:d4:68:c8:65:
ff:84:30:44:45:13:c0:ba:27:bc:ab:c7:63:28:d6:
5f:9e:45:53:ec:6d:ce:11:a3:88:e5:5c:3b:5d:4f:
65:bc:08:4d:ae:c9:7e:ae:f1:ba:23:c6:05:d6:0e:
c9:28:ad:78:08:84:9f:59:80:3a:a6:6c:50:32:3d:
a1:ed:68:dd:37:59:89:8c:7c:0f:f4:16:8f:a8:15:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:DE:1F:4A:B4:24:29:0A:70:DC:B9:61:B1:39:20:0D:7B:A3:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f51bf20f-531a-411e-baff-37a38bc29ce9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8020::/48
Signature Algorithm: sha256WithRSAEncryption
76:2b:c7:bc:03:6c:a9:e1:0b:65:a7:80:e5:c5:c7:e6:c1:60:
47:97:73:e5:59:c5:c8:16:a5:13:e7:cf:f7:f4:20:a6:8b:de:
3e:c7:b2:67:3a:b2:bd:61:5f:d7:e1:a3:69:59:95:85:42:48:
5f:3f:67:a4:2d:01:3e:8a:e6:c4:26:90:10:1a:bc:d0:3c:cd:
6e:52:3e:80:50:b3:9f:76:c8:df:6b:96:67:3f:6e:06:a1:6d:
80:50:f2:2e:a1:f3:66:bd:07:5a:00:7f:7d:49:47:66:94:62:
54:91:71:ae:0e:0b:e5:b8:56:a1:3c:b5:fe:5d:2b:fd:08:c1:
c1:cb:37:33:96:fb:42:5b:1b:59:42:45:fe:93:51:9a:2c:23:
1e:2c:62:23:2d:23:f3:bb:a1:4d:d8:11:40:51:5b:b2:ec:81:
aa:a2:b6:47:8c:9a:8a:21:cb:f2:23:fb:10:90:3f:1d:bd:b0:
1b:04:e1:5e:6a:42:c1:37:49:b6:8a:f0:e0:e2:96:49:77:89:
c3:45:4f:6e:3a:e4:ee:f7:79:db:8b:da:ca:6c:90:a6:ff:34:
ce:95:4c:a4:11:2b:70:5e:6b:b3:9f:ac:36:4b:54:e8:5e:11:
02:5e:2e:b5:7b:58:d3:24:0c:52:ff:7a:f9:4b:e8:5c:1a:cd:
af:6f:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:19 2026 by rpki-client