Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6aec084-593c-47be-8e46-9024b5572011.roa
File: f6aec084-593c-47be-8e46-9024b5572011.roa (raw, json)
Hash identifier: vU7kOR7hnxjH2Ziw98+Pu+VdbG6JqDhQwF04x4W0b8I=
Subject key identifier: 42:E6:FF:72:84:71:33:83:8D:17:EA:6E:B6:31:28:7C:1A:F4:07:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62B41490333475D778178240C24178A6FFD525D1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6aec084-593c-47be-8e46-9024b5572011.roa
Signing time: Sun 18 Oct 2026 01:30:11 +0000
ROA not before: Sun 18 Oct 2026 01:30:11 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b4:14:90:33:34:75:d7:78:17:82:40:c2:41:78:a6:ff:d5:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:11 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=ec814220ff6da91facb24b94b8aad667490dd693531513b8b3cf96e11c4422a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:81:e6:e3:c3:a1:39:bf:fb:84:65:3f:a6:
64:8e:90:aa:4d:ee:34:de:3f:0c:10:bd:a4:10:d8:
fa:a2:36:26:fa:af:19:da:a3:3a:9d:b7:e9:2b:b6:
dd:1f:bd:3a:55:9a:14:f0:4a:d4:36:39:7f:a8:07:
d1:8f:39:1c:0b:19:43:94:df:aa:9a:c7:e4:52:7e:
f7:29:ba:9d:c9:60:43:57:89:99:1d:50:e1:13:8d:
d3:6d:3e:79:fc:69:b0:92:ee:75:7a:8d:c7:16:e1:
39:03:39:2a:71:9d:98:cd:54:46:72:e3:d4:fd:db:
5f:b2:64:77:58:35:e5:c3:66:15:a7:10:de:2d:22:
db:ac:a6:a4:43:6b:d7:d7:6b:75:69:0d:f4:e5:3a:
37:4c:17:d3:08:6c:46:3e:16:ee:5d:10:f6:c4:48:
a8:7f:a9:34:9a:3f:05:25:39:48:af:39:31:04:b8:
87:69:10:f4:a6:98:09:af:67:fc:40:c8:19:6f:8b:
58:a1:a9:60:2c:17:47:36:30:3b:c6:4e:95:35:03:
4e:07:29:2a:d5:9b:8b:05:0d:76:4b:69:da:a5:5c:
50:7e:c4:76:2e:95:3e:15:e3:17:ef:cd:25:4b:b4:
32:1b:a6:50:9f:b9:4d:97:42:5d:b0:26:c2:c5:de:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:FF:72:84:71:33:83:8D:17:EA:6E:B6:31:28:7C:1A:F4:07:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6aec084-593c-47be-8e46-9024b5572011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:23:7a:aa:76:46:91:74:18:c2:70:2d:fa:33:7c:ed:49:27:
e5:6e:79:ec:cf:93:d9:3f:b1:1c:02:e0:e2:6f:cc:f2:2e:cd:
93:41:55:8f:4d:cd:b5:bd:a3:46:f3:d6:8c:95:2c:b7:ad:96:
ff:3b:69:db:0f:97:cd:c1:0c:b2:62:8a:44:dc:4b:cb:98:88:
dd:37:49:29:78:35:f8:3f:e1:1d:b0:22:7b:ef:7c:8a:98:f1:
be:a1:ff:06:70:20:0c:3e:1d:cc:bb:df:77:0a:05:bf:da:22:
2b:7a:2b:22:cc:a8:1c:35:1d:0f:18:ea:7d:96:49:8a:da:0b:
4d:d7:6e:48:cf:46:c5:96:14:4d:39:58:c6:4a:96:3a:00:fb:
16:21:25:6f:22:7c:f8:f8:fb:66:aa:c5:6a:b1:52:c9:35:e4:
5f:c7:37:6f:03:bb:62:88:b7:ea:bc:ff:d3:da:b9:d0:8d:b5:
0a:e0:3d:2f:7f:3f:cc:46:c7:33:e2:3d:4a:98:54:9b:cf:8f:
54:03:98:c2:15:a8:b7:81:d6:7f:fc:f5:08:2c:68:ce:d4:57:
e9:cd:3e:a7:7f:7b:0b:bb:bb:d1:1d:19:84:2f:bd:55:12:b8:
b9:e5:0e:94:cb:06:11:a6:a6:f9:7b:95:af:9c:c4:6a:0a:43:
74:65:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:33:08 2026 by rpki-client