Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
File: fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa (raw, json)
Hash identifier: LJReLNqe/pu2i5u9GpPV7NgRyRMCFy2GPw5Qlo30cJ4=
Subject key identifier: B6:78:DF:AF:54:BB:70:06:D7:4C:06:C2:AA:32:10:C2:93:3F:DD:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E8D157D257F53B606E742D955C93B79D9BAEDA0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
Signing time: Mon 26 Oct 2026 04:30:10 +0000
ROA not before: Mon 26 Oct 2026 04:30:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8d:15:7d:25:7f:53:b6:06:e7:42:d9:55:c9:3b:79:d9:ba:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0aee7d4e28eb96c3edcf18f9ab57f845f6dd91071f2d350609c460d11318d180, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:87:75:ad:a5:2c:0a:74:7f:40:c4:20:ad:
9e:09:5e:96:2d:07:59:3e:dc:ab:ce:6c:34:cd:98:
e1:9b:c2:78:c1:a7:a7:2d:cb:a0:57:36:8d:6a:a2:
2a:b1:37:ba:dd:fa:d0:7b:aa:6a:3b:10:b1:5e:a0:
7f:b1:10:50:12:dc:d0:8a:65:3b:c7:2e:79:63:22:
f4:3d:43:4f:c5:c5:3c:9e:c7:a9:cc:35:5d:5e:c6:
8c:c1:81:65:c5:b4:52:10:a1:b1:98:79:c9:f7:5c:
9b:77:fd:2b:54:4c:33:9a:a3:de:6b:83:b3:b4:90:
50:7a:c7:9b:e7:7f:fc:4c:8b:bc:53:01:fc:fa:e6:
b5:83:62:4b:be:0d:17:e0:5e:c1:62:4e:56:3c:49:
c3:d5:b9:7b:4e:0a:eb:9d:8e:ab:a9:c5:44:ff:8c:
e9:09:7c:20:73:06:67:48:0a:2a:c6:b9:30:7f:d6:
37:74:8f:6a:06:99:fc:3f:87:10:ac:45:9e:2a:12:
3f:e5:6d:40:01:70:6b:ff:c1:85:ad:06:50:7a:45:
0d:0d:ba:0b:74:9e:94:e7:f7:da:d2:79:74:3d:77:
7b:6a:7f:3c:53:d7:4b:b1:29:4e:d6:93:57:fb:d3:
fd:61:99:9e:c7:3c:bf:8b:06:40:d7:a5:8a:a5:a3:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:DF:AF:54:BB:70:06:D7:4C:06:C2:AA:32:10:C2:93:3F:DD:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fd329ab5-ae5c-4b68-a4c6-b82f6ea29dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
52:7d:e7:98:dc:19:7d:b3:20:59:69:35:20:a1:6a:b2:f7:2a:
0a:47:27:c2:54:89:5c:db:5a:f2:cd:8a:3f:eb:0a:d9:f3:b3:
5a:41:e5:e1:41:62:9f:73:2d:de:41:1b:5b:9b:2a:f1:72:e9:
5f:9e:d4:fe:ca:20:53:fc:96:7c:5e:28:43:bb:bc:7e:c6:ed:
09:93:f0:71:c8:c6:b4:34:fe:ed:1a:4d:fe:be:45:8c:43:f9:
7b:52:b5:06:12:a8:43:d4:e1:8a:fb:67:fd:83:16:18:1d:ae:
71:36:0f:6a:93:fd:33:22:85:fd:f1:ad:ff:da:8c:c1:df:4f:
01:54:b5:6d:d1:d8:80:51:9e:ee:13:68:40:d2:be:9e:77:47:
25:dd:ba:4d:40:f6:7f:24:df:ad:f0:9e:39:dc:86:e4:7b:c7:
a3:fc:b9:b7:b8:0c:ba:e9:68:8e:2f:6f:cd:6e:4d:c7:c4:4a:
78:6f:de:12:96:0f:02:52:5c:e2:71:94:a9:71:e3:40:03:e8:
cd:bb:62:62:b3:d1:be:d0:44:ab:0f:13:e3:9a:d4:b6:ab:5c:
09:d6:fb:c9:9b:6c:2b:52:ba:f0:e7:22:d3:97:8c:41:af:3d:
41:c7:68:f9:a1:e8:4d:f8:dd:5f:dc:cc:00:b6:54:a1:42:b0:
cf:4d:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:34:29 2026 by rpki-client