Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File: 87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier: r5cWH1dZfs+bWk+6vJk3HaVKOx1OkybuNr/uk9wrZZk=
Subject key identifier: CD:3D:D4:D5:B2:B4:4F:51:13:10:0F:00:D7:6E:2F:A5:3D:88:6A:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47A8C7ECCCA1A8F800828B4B0EA4BCE1ABB762F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time: Mon 26 Oct 2026 05:10:52 +0000
ROA not before: Mon 26 Oct 2026 05:10:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a8:c7:ec:cc:a1:a8:f8:00:82:8b:4b:0e:a4:bc:e1:ab:b7:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0990c9c0c642937dd1867fb4ddbc42ee415420aa976b8cc9f50eb0c16fed1c76, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:d9:87:be:cd:0a:0e:1f:8c:9f:f4:c4:91:
58:36:68:28:c3:a6:3c:71:cb:14:99:89:b1:1e:4c:
2d:cb:3a:70:b7:a4:c4:5e:b2:ab:27:f5:e7:58:4d:
6a:1c:3e:36:4c:c5:f1:41:64:b2:06:44:cc:61:9a:
86:5b:f4:6a:bb:8e:e2:bb:64:94:d0:d0:cc:1a:6a:
89:36:02:ff:52:56:e7:85:03:4b:33:cc:ae:90:7f:
da:c3:7a:4f:2d:35:97:fa:97:95:a0:5d:44:3f:83:
85:72:3a:6f:3b:80:e9:b2:83:c9:fe:2c:7e:02:67:
55:31:8e:af:e9:e2:2e:d3:af:bd:39:bd:36:91:7b:
6a:7a:d6:73:d9:db:e1:4f:55:09:f7:58:21:39:e1:
c5:a8:93:0a:a7:10:48:de:73:67:c3:e9:95:e7:e2:
6a:77:b5:39:75:df:98:3d:f4:10:70:91:72:c6:3d:
1b:ac:e6:6d:42:f5:09:a1:7a:bb:0c:05:f5:51:62:
5d:73:eb:69:5a:8a:7a:b3:78:38:3c:b0:8c:fb:87:
db:e3:8b:a6:2e:2f:ca:19:51:a5:91:42:1e:5e:53:
a6:1b:06:ab:39:55:53:9e:4b:9c:2e:cc:f2:41:cc:
bb:46:0c:b0:39:09:ec:64:61:c4:f0:13:f9:f8:d1:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:D4:D5:B2:B4:4F:51:13:10:0F:00:D7:6E:2F:A5:3D:88:6A:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:8000::/40
Signature Algorithm: sha256WithRSAEncryption
88:7a:be:c6:7b:ca:74:b3:55:fd:d7:c2:fd:b4:06:c5:bb:56:
b6:3b:3f:0d:56:f8:fb:85:ba:eb:36:e2:ca:61:a1:4c:64:24:
80:e4:53:89:63:55:c5:5e:9b:d6:dd:c1:21:b4:80:4c:3f:a2:
8f:6a:6e:76:a0:80:39:2e:d1:d4:e4:bd:cf:2e:6e:3d:78:e7:
cf:c7:47:af:34:b1:80:ce:23:e3:f0:5c:18:a0:19:d9:17:a0:
40:01:80:d2:84:85:92:48:97:11:7b:12:1c:66:4e:e4:07:66:
39:6c:db:75:ee:c9:cc:56:13:f6:86:a2:a7:53:20:40:d5:4d:
b1:97:ad:27:ce:2e:47:3c:35:b5:62:84:47:4e:75:a8:9d:07:
94:b9:63:3f:7b:80:72:b3:55:19:3c:f8:25:9d:78:4e:9c:1d:
aa:9a:d0:d0:64:88:15:0e:fa:d2:e1:3b:01:dd:f3:36:12:99:
08:68:b8:8a:4e:2d:90:31:f4:c3:f5:ac:98:a7:3e:b2:db:40:
a5:55:44:27:89:ac:6a:cf:77:83:6a:57:e3:cf:a3:85:25:95:
4f:7c:b1:95:f1:08:3f:e8:d8:31:24:52:96:d2:23:ed:14:8b:
fd:62:ae:f9:e5:22:a7:f9:f2:8e:e7:ca:b6:08:07:d7:d3:77:
de:93:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:15:19 2026 by rpki-client