Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cf2d254-ab7b-4496-b552-7f078de84e21.roa
File: 5cf2d254-ab7b-4496-b552-7f078de84e21.roa (raw, json)
Hash identifier: a+wX1+KuH9gdxiy9H/Ead0VQ38pbH8NbQ3Ea2buHUgw=
Subject key identifier: 0C:17:17:72:18:0F:B4:6A:35:6E:AB:82:7C:B0:92:69:DC:FF:A4:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 391E7BBB1FFC0B2FFCE717293D2E0F13B6D1EE78
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cf2d254-ab7b-4496-b552-7f078de84e21.roa
Signing time: Sat 07 Nov 2026 01:10:07 +0000
ROA not before: Sat 07 Nov 2026 01:10:07 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1e:7b:bb:1f:fc:0b:2f:fc:e7:17:29:3d:2e:0f:13:b6:d1:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:10:07 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=272659e1ae29c9d79687b606ff76fcc11ad523a78b4f3611929aba81a4400ba1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:ad:6a:12:e1:eb:63:d3:29:f2:43:22:c7:
33:2f:3a:b1:72:7f:c7:ba:d6:7e:4a:a3:7d:f0:b9:
9a:26:1f:54:af:4f:3c:69:c6:37:0a:2c:55:d2:da:
05:91:a5:d1:1f:1b:2d:cd:3c:b1:56:0d:6b:a4:d0:
0f:b5:0d:f7:f0:d6:7f:21:d0:cb:2a:40:8a:bc:77:
f6:2e:a0:3a:3d:5f:f0:9c:f7:ed:92:66:72:f4:43:
4b:02:d2:53:36:48:5d:ee:94:d5:02:9d:78:91:52:
5e:46:2c:c5:74:31:0b:d0:01:0c:50:b1:62:a8:c8:
b1:7e:63:16:4c:c4:6b:db:d2:e0:a0:4a:77:46:23:
0c:90:3e:a0:75:44:b3:3d:d8:65:d6:a1:57:26:f6:
61:87:b9:b9:14:06:85:ec:ef:b6:6f:2d:0b:30:45:
a9:0a:b9:20:e8:6a:fa:61:0b:aa:ea:d1:bf:ea:bc:
fd:60:e7:1c:eb:93:32:b4:40:81:a4:18:b3:8b:a5:
4c:a7:20:fe:62:d2:1a:84:90:db:b7:e3:62:f8:8f:
a0:7a:b2:c4:26:45:c4:e2:dc:07:c3:c2:a7:a2:0f:
20:ab:c7:87:5c:d3:b0:83:72:cd:9c:53:13:fb:bb:
2e:3d:97:a8:97:88:7d:62:d9:46:96:7f:69:bd:1a:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:17:72:18:0F:B4:6A:35:6E:AB:82:7C:B0:92:69:DC:FF:A4:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cf2d254-ab7b-4496-b552-7f078de84e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:9000::/40
Signature Algorithm: sha256WithRSAEncryption
be:7f:19:84:ac:ae:b1:43:a2:bf:9b:94:8d:bc:3c:c8:52:e1:
b3:6f:6a:8e:40:1f:97:54:43:93:95:1f:ca:57:df:1e:d1:f1:
dc:4f:f3:1f:5f:df:83:67:98:8e:f2:47:1f:da:e4:bd:5e:eb:
52:85:19:3e:6e:c2:22:44:b5:a6:9e:d6:1e:df:3e:33:fc:ee:
cf:79:79:6d:ec:da:55:89:a3:b6:36:df:c2:08:18:dd:3f:2a:
95:96:0e:76:01:b9:d0:71:75:be:3d:c5:c8:c7:d3:b9:04:30:
b0:82:3f:2b:c2:7e:d1:ba:6f:df:57:ae:6e:4a:ec:4d:ae:43:
e4:15:47:60:ce:09:d9:25:44:2b:51:86:fc:96:43:8a:22:ad:
c8:69:76:3b:f6:06:a2:75:b0:55:68:fe:b2:f4:54:c8:32:f1:
5b:18:f7:f6:d9:b3:18:d3:9a:4d:06:10:35:3c:d7:1f:62:21:
aa:eb:36:ca:50:df:e8:e9:dc:06:b6:37:95:37:c3:03:02:6f:
24:62:65:c1:f3:fe:17:6f:07:b8:61:0d:bd:27:a9:8b:01:20:
95:21:aa:7e:fd:09:d1:52:99:3f:49:1a:52:cd:b0:97:5e:cd:
61:c0:55:2f:5f:13:77:b8:8c:63:bc:e0:b6:93:76:a1:8b:1b:
f6:8a:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 14:13:11 2026 by rpki-client