Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json)
Hash identifier: DQJjUjt054anqvxs4O2xxvpE51wtkf3niTtmgpBoNzk=
Subject key identifier: EF:36:C7:AC:ED:42:6C:43:58:8E:41:BB:C6:5C:4C:72:9F:E1:14:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3321673EFDED51A990781F736F3D88B734CD1A02
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
Signing time: Mon 26 Oct 2026 04:30:44 +0000
ROA not before: Mon 26 Oct 2026 04:30:44 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:21:67:3e:fd:ed:51:a9:90:78:1f:73:6f:3d:88:b7:34:cd:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:44 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=bfb6fa041845483bcc03a2435c1df245ad065e09e9672d869547256314d3253e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:14:bd:aa:f5:3a:7f:04:fc:ab:37:e9:8b:
38:49:30:85:8e:c1:13:ae:5c:a7:24:20:af:63:b8:
fb:3c:9f:e6:0b:71:3d:5d:b7:6a:fb:04:32:60:98:
47:a2:56:a5:b4:5b:de:f5:0a:18:b2:6f:ad:4c:bc:
99:61:27:5e:7b:b8:78:9a:a3:8c:01:d5:ba:61:59:
44:b4:c3:9c:a8:10:b5:b3:ad:8c:b5:e5:bc:a7:30:
f0:20:f8:2d:50:71:59:19:54:28:9a:12:5e:b6:9c:
46:be:23:2e:7d:76:e8:a2:be:42:08:f6:24:d5:25:
66:c7:0c:c4:fc:dd:a5:86:ae:c8:cb:53:ee:9f:b0:
4d:54:40:5d:0e:e5:14:d4:3c:7e:05:1a:eb:67:76:
51:30:31:c5:43:e0:66:97:16:56:13:16:51:ce:63:
11:4e:a0:a8:f5:99:bd:28:28:28:1f:d2:7e:cd:b5:
c4:dc:87:5c:76:2c:60:69:bc:48:a4:22:1f:b9:6d:
84:50:f2:eb:c6:aa:91:ab:cd:13:d0:af:38:e8:d7:
d2:c3:ba:fb:1f:5e:da:20:42:a2:ae:f2:58:56:e3:
a7:9e:38:ef:b6:7d:11:0c:cf:d3:6c:97:42:ad:d9:
6f:55:26:48:c3:b4:1f:2e:6c:f9:09:cc:43:ff:4f:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:C7:AC:ED:42:6C:43:58:8E:41:BB:C6:5C:4C:72:9F:E1:14:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:72:a5:09:d4:2b:08:61:55:5f:17:ef:84:86:16:1c:30:e3:
00:fe:51:7e:59:e2:2c:8a:fc:39:95:50:36:4d:33:98:3d:9e:
de:29:c0:c9:9c:a3:4e:a1:33:e9:aa:69:49:8a:5d:95:a1:79:
b6:99:ab:b5:05:f8:9b:0e:d5:bb:4e:fa:e3:85:ae:c5:10:50:
b6:ac:14:c6:84:ce:df:2a:1c:7d:8a:0c:5c:0f:c9:e0:1f:72:
b5:4e:7c:b2:64:68:7d:26:dd:26:d3:0e:e4:af:bc:1a:ce:00:
72:c5:0b:c4:8b:18:a1:04:22:43:22:8e:8a:6e:0a:c1:fb:16:
5f:7e:81:e9:3c:68:cf:8c:0c:fc:fd:dd:83:40:e0:aa:0a:3f:
41:ec:64:7f:7b:6d:3c:ad:e6:dc:ed:7f:01:6d:23:58:33:5c:
4a:95:d2:58:cd:ab:b1:a4:42:67:c0:34:6c:6c:57:7e:13:31:
90:c6:78:01:60:b3:4b:3c:b0:0c:76:b7:42:1e:ea:a5:17:3d:
f3:c7:c2:0e:ea:e8:8d:da:f7:a4:22:48:d1:c8:1c:c0:6d:ec:
59:2c:05:03:11:4a:13:c0:a7:c2:b5:15:31:d3:b2:11:dc:26:
78:ea:85:56:4b:04:8f:fc:93:eb:08:df:da:db:78:40:e6:42:
20:af:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:51 2026 by rpki-client