Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
File: fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa (raw, json)
Hash identifier: f94MEBue+zuu9Q9M7sBI91kWeNEAVFmllE9cl10rFTI=
Subject key identifier: BC:71:D4:37:E8:E9:4D:CC:6A:9C:67:DC:11:CA:7F:91:75:F9:DF:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05EEE1CA6EDC07CC98CCF6126C213EAAA2117762
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
Signing time: Mon 26 Oct 2026 04:50:14 +0000
ROA not before: Mon 26 Oct 2026 04:50:14 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ee:e1:ca:6e:dc:07:cc:98:cc:f6:12:6c:21:3e:aa:a2:11:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:14 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0b27a6e3ce06937af468d80bc9e1fd0831630a9e5b79357d4b9391e79e898dcf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:80:27:39:ab:9b:a2:e5:7f:18:a8:70:17:
49:d7:02:30:d3:3e:9a:2e:f3:e3:db:d5:82:dc:32:
05:b7:38:59:21:f9:5b:59:7e:85:24:50:83:93:8f:
15:0c:63:75:74:af:f8:ba:88:f6:02:a4:ae:a2:7f:
85:3c:db:45:bc:3b:bd:d8:9b:c8:3f:4c:4d:d5:27:
18:37:a4:1a:34:41:b8:f0:a3:5d:1c:e7:3a:a5:88:
de:d5:0e:9a:c2:5d:53:3c:14:1c:71:be:09:04:96:
c3:75:2b:51:b8:d2:da:7c:1d:76:49:eb:c1:05:93:
e6:a6:2a:f6:86:fa:2e:89:fa:58:e6:af:99:ab:6c:
e9:ec:b5:8e:0f:85:69:3d:50:50:dd:70:28:ca:c9:
6c:1f:ca:9f:01:a7:fb:7e:ae:55:ad:ce:5b:cc:89:
06:a5:3f:8c:61:6a:95:b2:a8:04:6f:80:e2:9b:0a:
db:48:9d:2e:cd:3d:ac:1f:d2:20:75:d1:d2:72:4e:
ec:e3:a8:19:fb:b9:20:49:55:14:1a:49:63:46:cd:
a9:45:ba:57:25:8f:8e:b2:5d:70:77:08:19:7f:95:
86:d6:ef:f7:14:f3:3d:5a:46:d2:02:b7:c1:a7:0b:
33:87:ad:aa:ac:05:82:ca:0c:45:d9:96:23:f4:cd:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:D4:37:E8:E9:4D:CC:6A:9C:67:DC:11:CA:7F:91:75:F9:DF:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
41:ab:5b:31:c6:fc:ed:9e:76:2b:75:c1:45:62:d0:e1:1e:82:
e4:d8:46:8c:63:d3:26:ea:9b:52:3b:c4:67:9e:22:ca:7b:68:
e3:44:d2:e0:04:b3:1a:00:e0:4d:77:1d:46:1c:71:02:b7:16:
e0:8f:2d:70:b0:e0:80:b7:f6:dd:e9:d7:1a:6c:06:12:e2:36:
86:69:00:96:68:32:4d:d9:27:40:39:af:1d:0a:5a:9a:85:25:
20:ee:12:ea:bd:72:f9:9d:fd:1e:82:03:14:4c:c1:3a:ab:a6:
62:92:54:cb:6b:bd:1a:92:69:d1:51:6f:cd:1c:37:d5:04:af:
8d:d5:22:c7:44:a1:8d:57:81:82:93:6c:2a:84:39:87:f5:7f:
40:cc:20:b9:83:af:0c:25:66:22:a9:41:7b:41:28:69:3c:42:
40:e4:79:91:2e:eb:93:d9:ad:58:6e:b1:3a:da:b3:fd:2e:17:
80:66:d8:dc:66:99:9e:3b:03:2c:db:08:4a:2b:45:91:51:fb:
7f:01:6f:44:9a:ce:7e:b4:4c:6b:31:8e:35:6f:b4:cb:f7:2d:
01:80:a0:cd:98:7c:ee:00:11:b8:aa:24:9a:0f:b2:19:30:09:
ad:d1:4d:9b:01:64:e9:8f:b1:50:d5:7a:4c:a8:e4:7d:e3:4f:
8b:48:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:39 2026 by rpki-client