Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec4786d-f73f-4e64-99a3-0377bdf5c566.roa
File: fec4786d-f73f-4e64-99a3-0377bdf5c566.roa (raw, json)
Hash identifier: RlHbbqAsmUUN6dangrzkVWMTQ8T5HVUPdCzd5VS5c2E=
Subject key identifier: EA:09:B1:9F:A7:4D:99:C1:BC:FF:8F:FC:F0:3F:8E:DC:E2:F6:91:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77831229EBA975B98FBDF9789299818012D5E4D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec4786d-f73f-4e64-99a3-0377bdf5c566.roa
Signing time: Mon 26 Oct 2026 04:40:20 +0000
ROA not before: Mon 26 Oct 2026 04:40:20 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02e::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:12:29:eb:a9:75:b9:8f:bd:f9:78:92:99:81:80:12:d5:e4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:20 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=285560c949c3aa6e46182679a9630480ebd5223cae2d45ff80126d7032e7a683, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:ed:d3:a2:82:ae:f8:5e:81:62:59:ca:d8:
ff:35:09:ce:0a:4d:d3:6c:29:f8:16:a0:b6:ce:74:
95:bd:6a:38:99:c1:90:c7:b4:7a:89:8e:89:20:27:
25:82:fc:7b:eb:95:c2:05:ad:03:88:ef:86:45:ae:
13:5b:a6:44:3d:07:99:9e:d6:88:d7:35:2a:ea:2c:
a2:7f:d0:fc:f7:07:f6:6d:67:39:21:3f:61:f9:f6:
03:2c:81:21:45:ac:ed:69:2d:91:e8:7c:75:ad:d1:
5f:d9:75:70:ef:d1:a7:3c:26:d0:aa:3c:e5:67:de:
50:1f:0c:d2:8d:1c:fc:e2:73:46:38:ac:d2:cd:3c:
dc:14:a1:4e:70:2b:05:35:9f:a6:79:0b:1e:96:40:
1b:a9:23:e1:84:69:d2:a9:9b:bf:35:87:22:23:88:
31:db:5a:3a:fc:d8:27:3d:8b:9f:80:c6:e6:6a:9a:
be:ac:d6:e2:a7:f0:04:79:63:54:a3:9b:b5:d9:03:
e6:d1:e8:e3:ba:0e:0d:5b:a2:37:0f:3d:ee:fe:31:
7f:c6:f4:0e:37:d7:84:d7:f7:a1:ad:cd:c5:40:db:
cd:f2:65:4f:f0:57:5b:80:02:d3:7c:5d:64:f7:ab:
bc:f1:b2:ef:37:85:fa:1f:58:0a:ac:11:59:dd:07:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:B1:9F:A7:4D:99:C1:BC:FF:8F:FC:F0:3F:8E:DC:E2:F6:91:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec4786d-f73f-4e64-99a3-0377bdf5c566.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02e::/36
Signature Algorithm: sha256WithRSAEncryption
0e:7d:22:7b:bb:52:57:d5:34:69:fc:7d:e4:6c:c1:3a:30:7f:
01:1a:45:6b:ed:d0:5d:13:db:21:33:94:94:87:ae:3f:12:b1:
6e:f5:2f:29:d5:d1:5d:ed:ca:dd:14:cc:5d:a0:95:ab:76:8f:
bb:95:16:23:bf:c2:68:88:06:d7:97:16:73:5f:25:8f:b6:be:
b9:ce:aa:3a:be:69:29:0a:c9:a7:7d:d1:2f:ee:17:78:9b:cf:
79:6a:62:f0:e1:c7:76:22:47:0a:74:ad:7b:8e:17:ff:0f:77:
32:c5:4b:af:0a:8d:5d:cb:47:6e:45:cc:21:66:da:d8:70:44:
51:79:71:e6:67:83:7e:56:f8:2f:05:f7:2e:a1:69:91:64:e3:
71:f2:79:a5:7d:5e:8f:e2:c8:79:ea:e1:76:33:6a:b2:d3:c5:
ef:1a:ce:75:2c:fc:6b:5f:9f:60:76:73:90:bd:54:16:9d:41:
90:ca:f4:ec:75:c5:f4:ef:29:49:74:81:f0:09:2a:73:e0:35:
b0:af:05:8a:ba:31:0a:bc:c0:dd:f9:c3:59:9a:89:cf:94:fa:
ec:39:be:82:35:7b:a2:28:d6:c4:4e:9b:88:e0:00:b7:25:dd:
dc:d6:78:e5:a9:e0:55:d1:d7:5c:36:5d:5b:bd:05:cb:5d:ce:
12:0f:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:40:20 2026 by rpki-client