Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
File: f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa (raw, json)
Hash identifier: nRQuyAQl+Y1F9T6z0GZ+hhNgURZHXxaw923R2caVlJY=
Subject key identifier: BB:4B:82:FD:E2:DC:3C:69:8C:DD:F0:DF:D9:90:73:A9:C8:84:A0:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04625EC8CD9E534CD3728079693A968988124B82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
Signing time: Mon 26 Oct 2026 04:40:36 +0000
ROA not before: Mon 26 Oct 2026 04:40:36 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:62:5e:c8:cd:9e:53:4c:d3:72:80:79:69:3a:96:89:88:12:4b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:36 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=b484136e9e5729a9376cad0f3a9f9a136fbc35bd7a09bd3e3d603b0f904f26a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:ab:13:2e:52:c7:b5:67:b1:cb:90:cf:16:
6d:41:71:c0:55:a0:98:eb:81:f3:e6:92:43:6a:62:
e8:fd:36:e7:60:97:23:33:5a:d9:1d:d8:3f:5a:f5:
81:1f:32:22:c6:ca:42:60:c8:73:81:35:a8:10:7a:
53:fa:60:a9:21:7a:86:e3:2e:7e:d0:2c:1a:38:91:
d8:98:bb:f3:07:83:3a:9f:d2:56:40:3b:54:c5:48:
21:54:15:a1:b5:a7:26:eb:17:00:64:1f:8d:4f:6a:
97:38:9d:e9:4d:8a:82:82:d7:3d:3f:77:31:25:fc:
41:d1:18:b1:f1:e1:05:33:4b:b7:05:ed:24:fd:01:
15:d4:4e:81:0a:1e:37:e5:a5:68:fc:ab:7e:6f:ac:
02:85:9e:76:02:bc:e6:b0:d9:49:37:60:a6:87:7d:
2e:e5:62:04:1d:dc:88:90:8c:37:ab:be:c5:0d:20:
7e:6d:cf:33:19:96:ea:e9:7c:df:cb:8b:66:bb:41:
d8:a8:c0:b5:15:21:41:ed:56:63:7b:c0:dc:4b:df:
00:19:3a:5a:0f:49:f4:16:55:55:4c:d7:7d:c3:3a:
53:d3:a8:5d:bd:5e:08:c2:87:8f:7b:ba:20:47:22:
18:28:77:d9:e1:d6:f6:79:2b:b9:49:b7:cc:93:68:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:82:FD:E2:DC:3C:69:8C:DD:F0:DF:D9:90:73:A9:C8:84:A0:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8000::/38
Signature Algorithm: sha256WithRSAEncryption
54:6b:e4:19:a7:b2:0c:41:90:cc:89:1e:ab:83:13:38:04:b4:
f1:d3:32:d9:29:cf:bf:61:31:22:19:e3:84:a3:80:a9:b6:0b:
84:08:bd:9e:77:20:1e:d4:68:0b:05:e9:e1:60:23:0f:dd:ef:
55:6b:f0:32:11:8f:77:11:5a:bc:d7:75:e8:54:a9:8b:fa:b8:
ee:e3:cf:5b:03:c8:4d:a8:37:d7:24:c5:25:46:48:c1:65:c6:
16:9e:41:8f:8c:36:a9:cb:8f:7b:04:da:11:c3:20:5a:d8:19:
45:d4:a3:ae:7e:8f:8a:05:31:ab:da:f2:c2:75:85:91:59:b1:
3a:f1:28:77:e7:a3:03:3e:44:ef:d0:8f:94:7c:93:5b:92:1d:
d5:6f:2f:6d:1a:a3:3e:b7:5e:7e:2a:28:1b:2b:4e:6f:d1:98:
fc:01:20:54:60:4e:aa:7f:47:fb:04:ad:11:2f:e2:de:d7:4e:
a1:ee:17:6c:2a:ea:ff:f1:62:00:b6:b5:b7:7d:e6:11:52:fc:
a3:c7:bc:14:fe:14:06:8a:67:fa:15:66:46:33:f5:81:48:15:
6d:9f:d1:04:fa:01:77:f6:11:0e:6c:7c:2a:55:80:ea:0a:3f:
63:a3:73:38:60:30:c7:4a:62:e2:39:64:8a:8f:7b:34:2a:db:
31:e0:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:13 2026 by rpki-client