Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa
File: 0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa (raw, json)
Hash identifier: 1I1jf1xOdD+qfBF5lfYxYiJFEocK7hvLgJu4Njd/beU=
Subject key identifier: 84:54:F2:67:8E:41:2C:DB:F7:B9:B3:5C:3E:8F:8F:CB:7F:86:29:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FEF5622D98466DCE16205EC33C85ED299E5A579
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa
Signing time: Sat 07 Nov 2026 01:02:35 +0000
ROA not before: Sat 07 Nov 2026 01:02:35 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ef:56:22:d9:84:66:dc:e1:62:05:ec:33:c8:5e:d2:99:e5:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:02:35 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=50555bce7725793519c312c544ab164d667b5ab403e72a4baabeeff270865984, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:ab:2c:68:0e:a2:50:9f:32:2b:10:d7:f1:
4b:8e:dc:e5:6b:53:fa:38:41:72:1e:62:0a:16:18:
e3:d4:4d:bd:8d:bd:58:90:df:95:b7:1f:55:f5:22:
51:c0:0b:4d:0c:ac:ca:61:f5:a1:15:e7:1b:9d:27:
62:f7:55:6d:12:60:de:a2:6d:94:8c:50:f3:f8:ba:
21:57:03:fc:e1:57:eb:44:d8:7f:6b:cc:a3:7f:df:
1a:77:1e:10:fc:0b:ba:73:4f:5c:5b:4d:1a:44:2c:
22:0a:76:41:4a:d1:c5:85:84:b1:98:86:ed:b6:08:
c9:08:3e:bc:cb:26:67:14:8e:f7:7a:62:68:cf:03:
b0:d2:3f:67:3c:f5:67:46:90:16:ba:24:f4:6a:b7:
71:be:0e:a9:1f:e9:95:be:7b:de:ae:d5:e5:bb:1e:
36:9a:cc:d0:56:39:f0:cb:5e:35:ac:0e:03:63:3b:
b3:19:08:62:d2:f3:7f:7d:0f:26:ae:2a:17:f3:d8:
fd:03:bc:f4:eb:8c:bf:ce:ca:54:09:42:88:e1:08:
6a:58:ae:2b:d2:55:61:c8:17:fe:c2:b4:63:c6:31:
4c:5c:a1:b4:fd:9b:35:3a:88:2c:ec:09:60:8a:10:
26:56:99:4f:9b:af:35:4e:4d:5d:55:c3:8c:9c:7e:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:54:F2:67:8E:41:2C:DB:F7:B9:B3:5C:3E:8F:8F:CB:7F:86:29:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ca1da90-bafd-4544-a54d-3c1cf08ef9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:800::/40
Signature Algorithm: sha256WithRSAEncryption
9d:f9:68:84:a5:6e:d2:21:b0:c5:ba:4b:21:fa:ee:e9:2b:e7:
6e:51:d5:4c:77:91:aa:14:5c:53:9f:93:ee:63:3e:d8:4a:73:
ed:2a:4a:ab:3b:4f:9f:77:0c:cd:d2:96:d8:81:ed:93:f5:15:
46:41:55:7d:a0:20:9b:79:5d:36:13:41:fe:cf:2c:0c:9f:e7:
f9:93:77:5b:08:47:89:9b:44:16:26:3a:e1:bf:76:9d:a4:c1:
dd:74:79:7d:93:34:9d:30:0a:c3:25:9a:26:3f:39:0e:3e:b3:
71:63:78:2e:d9:90:57:6a:7f:18:1a:f6:91:a7:85:08:00:a5:
10:8b:36:74:c2:55:de:c0:d7:29:fd:34:1e:fb:1d:73:3f:11:
c7:d6:25:0d:87:4b:93:48:e1:4c:d5:43:d0:4c:9e:30:a2:a6:
45:a2:f0:cb:74:3e:c8:cb:d1:6f:fe:08:9c:7d:08:46:44:b9:
d0:1b:ff:55:f2:8f:3d:c2:e2:70:d7:72:d4:58:61:6d:dc:71:
c4:5a:e3:7c:71:00:8c:57:8c:5e:b3:43:7c:5a:7d:ec:c8:16:
67:e4:dd:ea:a3:2e:4a:45:3b:0e:95:06:15:68:15:26:a3:f9:
59:97:e5:05:01:8f:a2:d9:40:4e:29:ff:bf:85:05:cd:2d:1c:
bc:59:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:49:13 2026 by rpki-client