Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa
File: f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa (raw, json)
Hash identifier: dtuKZxhUL5XmMihxpmkORSEy/dOqNGcLCDXb4xQwgGQ=
Subject key identifier: 26:D0:3E:AE:A1:7A:7C:70:0A:87:4D:21:E1:02:FE:FB:C6:2D:9E:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03E95106773A117D8C19527D1D9EC4BB550B7C7F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa
Signing time: Mon 26 Oct 2026 04:40:41 +0000
ROA not before: Mon 26 Oct 2026 04:40:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e9:51:06:77:3a:11:7d:8c:19:52:7d:1d:9e:c4:bb:55:0b:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f6b14f4c47aa378f61e3da307722effd89ebee19a442e9be5ba32e180fd8b2bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:c2:1a:97:2a:60:ed:e8:91:4c:e5:a3:f7:
39:fd:55:4a:b9:28:0c:af:36:70:6f:92:31:91:cb:
dd:06:3f:93:6d:ff:17:87:7e:98:2d:3f:8b:10:e7:
1d:64:f2:0e:2a:86:66:14:7c:d7:72:b7:73:02:0a:
b2:a2:55:fd:10:87:07:e2:21:b5:ed:6f:61:ca:31:
b2:33:41:3f:77:3a:bf:52:01:57:3f:69:b3:75:be:
d9:d9:ec:68:1f:de:6a:45:bb:d4:3c:b8:ff:d4:2e:
d4:55:d8:aa:b3:8e:14:28:fc:d0:1f:53:dd:c6:98:
38:01:37:3c:9e:73:09:cf:57:e4:ff:13:d9:e0:a1:
4d:eb:2a:a2:1a:3d:24:9b:80:18:ad:81:18:9e:fa:
d5:85:6f:b3:18:6c:da:19:ec:07:ac:d6:1d:0c:26:
50:ad:83:da:ae:64:a0:cb:08:70:e3:0b:15:01:43:
d7:e8:78:3d:9c:53:1a:a8:25:91:0b:81:13:70:04:
ac:e8:1a:6c:58:79:d0:6c:1f:fa:0f:e0:41:f2:2d:
5f:35:0a:de:e3:9f:d1:09:57:56:0d:dc:7b:25:77:
96:ba:2c:45:51:6e:e7:75:84:cf:17:a6:6d:e3:19:
ba:3e:eb:a8:d8:3f:0d:5b:f4:a6:dd:1e:cf:ec:8a:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:3E:AE:A1:7A:7C:70:0A:87:4D:21:E1:02:FE:FB:C6:2D:9E:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f7fccc2a-aa8a-4cbc-89d7-d6a8ca121ba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019::/36
Signature Algorithm: sha256WithRSAEncryption
8c:aa:c8:00:46:fb:58:ca:ad:94:6e:94:8a:b7:cf:a6:e6:2c:
64:3f:9e:14:a0:25:e0:9c:39:7b:12:0a:56:79:6f:09:e6:d9:
cc:5a:3d:e5:4c:64:2f:eb:5f:50:5c:44:1c:8a:cd:89:27:97:
81:03:56:72:ed:b8:8d:42:b6:1b:b5:5f:fb:14:4b:c2:88:b2:
83:d6:b2:18:ba:86:36:f0:a0:b6:93:32:bc:f3:c7:a5:b3:6a:
f7:b9:cb:59:c1:18:f0:ae:f8:d1:77:31:72:d6:f7:8f:85:4d:
9d:17:e1:15:4c:74:57:cc:4b:ff:27:c7:c2:66:26:65:25:2c:
68:b8:84:a3:0b:03:cd:c8:09:45:d9:ae:c3:18:f7:92:76:29:
66:5f:20:40:49:d6:0c:06:99:e7:58:1e:77:65:ea:a0:83:ff:
94:52:d8:2b:06:fe:2e:b2:55:bd:d9:38:99:ff:86:e3:df:6f:
dc:b1:7e:e6:ac:ac:9d:63:63:0b:24:4c:c6:dc:2f:94:c3:9b:
b2:25:90:da:9c:e0:28:59:b4:a3:87:15:58:50:bd:89:ad:45:
28:a3:10:a6:30:51:90:07:f2:9f:4d:4a:63:87:83:5c:f0:cc:
3c:6c:05:0c:23:6a:27:24:3d:93:d7:3c:db:7a:2f:17:0b:5e:
48:dd:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:26 2026 by rpki-client