Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
File: fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa (raw, json)
Hash identifier: 3KVJ/RHFITShkaKJ++wS6BAL5KYhKP6KfUUOJ6YMhsM=
Subject key identifier: A5:92:2E:67:AE:0F:70:1F:F2:D5:71:09:51:22:D3:F3:8F:29:B9:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AC293008034514E5F986D9D723B8156FF7934DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
Signing time: Sun 11 Oct 2026 15:20:07 +0000
ROA not before: Sun 11 Oct 2026 15:20:07 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c2:93:00:80:34:51:4e:5f:98:6d:9d:72:3b:81:56:ff:79:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:07 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=8b9f7c097bacf755d15cbb8d93564622b52c42c4000c21610042ce0e7d6a1e3f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:1d:8b:fe:b5:da:9d:4f:db:1a:b9:92:ec:
38:75:55:49:1f:8b:d8:78:d0:41:95:f7:93:f0:9d:
9f:e4:37:00:2d:73:29:02:03:fd:ee:12:be:17:36:
54:62:d7:53:08:35:fe:cd:9b:0d:65:00:01:cd:f3:
74:55:a0:04:d8:8f:7d:75:ce:20:a1:81:2a:d8:82:
ec:a1:31:7e:2f:e9:7f:88:97:20:ba:9b:63:87:13:
c6:08:f7:02:d6:6f:ed:ce:46:2a:d2:2a:ff:e4:92:
2d:f3:8d:7c:c5:66:fc:97:3f:d8:e9:65:a8:7f:1e:
48:f1:a7:10:69:b4:59:6a:56:f2:cc:93:5a:7a:2d:
07:ae:66:78:14:85:4a:7c:01:79:b5:e0:a1:86:0c:
ea:e3:7a:3c:5c:45:bf:b3:ec:53:af:83:b8:16:d3:
67:81:bf:f8:15:4b:7d:3e:a3:f6:85:38:11:38:ad:
a0:ec:e2:1e:a7:4d:30:b4:00:6d:4a:26:ea:05:7d:
59:81:db:25:4e:41:93:d5:a7:5e:da:2e:f7:7b:58:
41:f9:08:0f:a8:78:a1:93:81:d7:04:e2:31:15:fc:
53:61:c4:74:b6:65:c1:7a:6e:01:12:29:44:84:a7:
8c:85:b9:0c:1e:97:c7:f9:4f:9a:c6:fe:06:a9:d0:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:2E:67:AE:0F:70:1F:F2:D5:71:09:51:22:D3:F3:8F:29:B9:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e040::/46
Signature Algorithm: sha256WithRSAEncryption
0e:59:df:d9:04:03:92:01:17:93:54:84:e5:01:21:27:d9:87:
d3:ef:c4:53:57:95:04:81:22:d2:9f:ef:0e:9d:97:35:55:a5:
ab:64:0d:60:fe:64:07:9a:31:62:ee:c0:f6:8b:5e:31:74:d5:
dd:47:ea:f5:13:1c:42:4d:3d:af:6d:c5:8a:27:9e:cb:af:5b:
f6:28:2f:0b:43:34:fc:7d:6b:aa:c3:93:46:fe:77:47:f3:bf:
7c:db:92:f3:7a:f9:73:42:0c:35:ec:d9:8d:01:74:84:f4:20:
68:54:0c:7f:da:0c:dd:66:54:2a:c3:6c:76:8b:d3:44:b1:a8:
10:e2:a0:ce:8b:8e:3b:17:38:b6:0a:11:1e:2a:82:65:98:50:
c1:b1:3c:80:83:2e:4d:34:0c:cb:a0:77:93:40:a3:f8:53:eb:
d5:56:e6:1b:8b:fd:6a:10:02:29:8a:73:59:2a:13:54:6e:74:
a4:79:4b:3a:20:d4:58:7e:2e:51:6d:f0:49:9c:bf:61:ee:4b:
8b:09:a7:2e:75:19:74:2a:5e:e5:76:e6:13:29:da:3b:8b:a4:
b4:59:ba:c6:6d:28:90:c8:50:97:39:59:d7:de:9c:f7:ad:66:
d2:d9:de:4e:5e:86:d1:2f:33:1a:89:66:cb:d7:f6:d1:0f:dd:
23:f8:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:28 2026 by rpki-client