Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa
File: f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa (raw, json)
Hash identifier: nrpJ5qgAKM/06n6DIOlzOEGdpVyvKasdpClaO6RHiUI=
Subject key identifier: B9:C5:90:B4:DD:5F:62:62:E3:B3:0A:E8:A7:83:90:9F:B3:A1:37:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C19EA6F22E0B3A2E82B1092798B8FE2E5EDD3F1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa
Signing time: Mon 26 Oct 2026 04:30:32 +0000
ROA not before: Mon 26 Oct 2026 04:30:32 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:19:ea:6f:22:e0:b3:a2:e8:2b:10:92:79:8b:8f:e2:e5:ed:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:32 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=3f26b4ce07f3c38d9b08dde3e48ddc196b928b6760b5f1477183d3dc693f62f0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:69:a5:96:92:0d:9e:7f:47:4c:9f:ab:41:
9b:27:53:9c:34:3e:be:d3:5e:45:c8:1c:77:fd:52:
2f:9b:1e:8f:ea:0c:bd:ee:c4:61:6d:d7:38:54:6b:
d1:b9:50:37:f3:1e:06:0a:5d:7f:4e:54:e9:86:72:
7d:ff:ee:f8:e9:92:7e:d0:9a:ec:dd:e3:f5:2a:97:
0d:e9:23:21:fe:1c:ad:6b:82:bf:1e:c1:e3:d6:0d:
17:c1:17:50:b3:1c:eb:46:0d:6e:3b:cf:45:05:bc:
38:74:f5:0e:a6:6c:07:d7:55:56:fb:e3:f5:b3:d1:
6b:b6:13:7a:bf:82:0e:0c:37:b2:35:1d:15:05:6e:
56:3a:57:93:2a:fc:10:6f:15:a0:c7:82:57:a2:cf:
b2:2e:32:f2:18:21:ab:98:f8:70:11:1e:6e:bc:0e:
e1:dc:4d:6b:38:52:68:46:6d:02:49:00:fb:5f:a4:
48:be:7f:50:20:8e:52:7d:c0:bd:03:24:59:2a:4a:
60:12:e8:e0:1e:9b:54:03:ad:c7:1e:52:58:4e:83:
d0:a9:56:23:d3:0b:ae:41:e0:9e:bb:f0:7b:a5:82:
65:d1:b3:4d:93:89:47:75:c6:87:ed:c8:19:1e:84:
69:5a:ce:00:51:2b:75:fc:df:67:1e:e2:54:28:55:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:90:B4:DD:5F:62:62:E3:B3:0A:E8:A7:83:90:9F:B3:A1:37:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:6040::/48
Signature Algorithm: sha256WithRSAEncryption
bb:f0:84:68:81:56:09:30:3e:c8:dc:cf:3b:b4:b8:f0:06:a1:
16:57:53:c1:0b:d9:7b:dc:6e:e2:96:66:8b:1d:38:ea:77:b7:
c0:38:c7:95:f0:22:96:c8:19:f0:a2:43:f3:78:55:89:58:bf:
13:f5:c6:61:ed:6e:c9:0f:41:24:a4:1c:65:d0:1d:fa:0f:eb:
9d:4f:65:3b:e6:cc:36:1c:f0:38:f2:ce:aa:9b:00:00:cd:07:
b0:2e:ae:79:b2:8a:bf:97:10:d2:6a:ca:da:24:cf:43:0d:02:
9c:98:3a:34:64:d8:43:f2:50:1b:13:fd:5b:61:0c:db:54:66:
cc:db:36:e0:2d:73:ae:0c:b8:62:06:67:16:48:bf:54:63:58:
fb:46:06:14:26:38:62:e9:f2:e6:24:62:11:4f:b4:e4:1c:f8:
68:94:c2:81:c4:85:a3:19:8e:31:cb:37:2c:52:4b:81:f3:96:
43:72:8f:92:e1:10:e7:1d:d1:0b:41:e1:cd:94:d1:1f:fc:47:
3a:af:92:cb:2b:d3:a3:78:df:4f:f4:2e:d1:8f:22:d9:e1:53:
8f:0b:77:b6:07:01:28:32:a9:d9:0d:2e:30:ce:2e:e8:ba:cb:
e9:9a:9a:43:6a:c0:06:72:57:a5:c0:5f:5f:57:15:41:db:1d:
f4:67:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:59:15 2026 by rpki-client