Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
File: fbd3a3af-f307-4148-9e34-70199540a838.roa (raw, json)
Hash identifier: DdM9n8wKPduHQOT0vA3XbjxRHFhT9TbrqegbZgQi8bc=
Subject key identifier: D2:F6:ED:EC:12:4B:79:8B:93:FF:16:92:72:1B:A2:46:38:6A:E0:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6510114C48E4287E2873200DCA6E7CF42D164F61
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
Signing time: Mon 26 Oct 2026 05:30:14 +0000
ROA not before: Mon 26 Oct 2026 05:30:14 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:10:11:4c:48:e4:28:7e:28:73:20:0d:ca:6e:7c:f4:2d:16:4f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:14 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=cc8c7fe7246c6bb12ec26e51c55ab34e05294ed72ef45b75c5c496cb0add6b5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:7b:b1:f5:e3:1d:6a:f8:a2:cc:bf:1a:7f:
ab:37:de:5f:08:0b:72:c8:32:0e:a2:f9:79:c7:72:
16:5b:67:cd:92:f2:5d:26:4e:9a:72:4f:0f:22:05:
36:6d:99:5b:61:52:94:51:ea:e8:93:bc:cc:3e:a8:
2b:48:42:51:47:d4:9d:53:22:42:48:6c:cf:b4:6d:
25:c9:83:f3:15:87:39:f2:ee:b0:94:7b:32:eb:38:
6b:4f:65:d4:75:43:7d:38:e5:38:e7:fa:82:4b:58:
34:e3:9f:7d:a7:37:46:0d:f7:cb:2a:8d:96:c7:9f:
34:f6:f6:28:e1:7f:ba:cd:f0:39:b6:a9:f4:9d:0a:
2d:66:00:38:6c:c5:9b:11:db:57:78:1a:ae:66:42:
77:ff:1b:c7:e6:c9:a5:07:97:b7:6b:ee:04:60:d3:
b9:4f:19:00:cc:f7:d4:37:1a:5b:7c:5c:38:e1:c6:
c6:d4:f0:03:ed:5e:26:0f:11:a9:99:21:30:04:81:
97:66:46:ed:aa:58:04:bb:b5:25:06:2d:24:42:96:
4c:39:9c:72:a0:0a:38:b4:29:8e:fa:f3:76:50:e3:
7d:d9:46:ce:72:31:f2:91:d9:14:8c:ae:c5:5c:1a:
4a:08:92:76:64:1c:b2:6a:d5:d6:4d:ee:e4:c8:1f:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:ED:EC:12:4B:79:8B:93:FF:16:92:72:1B:A2:46:38:6A:E0:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:b000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:be:57:7e:2a:11:39:78:51:8a:8c:e2:45:20:92:bd:78:25:
ee:48:05:01:3c:25:9a:9f:e4:43:51:90:0f:b4:d9:54:c3:3b:
04:32:90:e9:af:96:20:eb:a0:34:2a:d1:9d:16:87:f3:7e:97:
13:8e:f1:30:29:2b:89:b8:85:b9:e9:d4:43:44:73:ea:77:ab:
a0:ca:9b:ff:2b:cd:91:63:38:8d:10:f9:28:88:5e:73:5c:ae:
a1:23:76:37:fe:7d:6b:eb:01:60:d2:95:47:b5:af:5f:54:f7:
7b:15:9f:bd:15:d5:fc:6b:58:07:a4:d3:13:95:2d:6b:1e:fb:
a3:23:41:19:e2:84:f3:e1:5c:ff:bf:8d:1d:3f:7c:ab:70:b0:
48:18:25:37:c4:06:4f:63:f4:dd:90:5a:2e:9b:16:83:41:b8:
df:dc:8b:ff:aa:65:39:15:e2:85:f1:84:92:e4:1c:34:f6:df:
80:51:0d:07:d2:b1:f8:7a:e3:d2:e9:b8:14:bc:dc:70:19:d9:
bd:c6:48:01:1e:ca:4e:16:bc:6a:44:ef:c3:7d:82:ba:51:f7:
1c:34:da:a2:b3:b7:f1:9f:ad:fc:3a:a2:77:e7:a9:59:ee:43:
15:92:5b:78:1b:ee:f1:13:ec:eb:83:17:23:c6:e1:35:79:d8:
b1:5d:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:23 2026 by rpki-client