Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9f1c6682-5131-4882-9bfc-aba6bda5af2f.roa
File: 9f1c6682-5131-4882-9bfc-aba6bda5af2f.roa (raw, json)
Hash identifier: kxtr1d4VW5Asc9tPyUGwCv7NAIIy0CdvutNf8wtI000=
Subject key identifier: 0E:84:18:20:B0:57:F8:74:85:62:29:D7:FE:99:CB:72:84:1F:0B:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A4B05C6D84C4CAB491242E2F4105079DCFDAF2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9f1c6682-5131-4882-9bfc-aba6bda5af2f.roa
Signing time: Fri 06 Nov 2026 00:10:25 +0000
ROA not before: Fri 06 Nov 2026 00:10:25 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d033:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4b:05:c6:d8:4c:4c:ab:49:12:42:e2:f4:10:50:79:dc:fd:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 6 00:10:25 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=b2a0dd2ab0b799fee0f734cd47551410d5370d60d5a0224652d86d0206542b1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:8c:40:a2:be:ae:95:6e:eb:5f:8d:d0:0f:
d1:31:2d:68:7d:e9:86:49:76:b4:99:06:4f:1c:a6:
fd:48:a0:bc:3e:b3:3e:a7:56:d5:d0:0b:44:06:9f:
60:ac:7a:24:0a:44:bc:66:5c:66:aa:ff:aa:71:df:
80:cd:8e:ea:6d:e2:21:40:ae:83:77:89:8b:63:2f:
27:28:57:cd:85:d2:c6:b0:80:67:3f:10:b2:5e:21:
d3:ab:5a:39:c0:e5:2a:a7:0b:93:ba:16:17:02:0a:
1b:23:39:25:01:a4:ba:3b:b8:d4:02:bf:d0:bc:b6:
62:17:7e:e8:7a:71:40:85:6b:e6:f8:14:f9:88:a5:
59:00:d6:e5:3f:68:6c:87:74:9c:80:8c:68:13:08:
a4:b9:b7:c0:6e:c8:e2:92:55:f2:93:89:ab:b4:d5:
55:9e:22:d4:40:30:81:b6:b0:b3:f7:ef:f3:c7:09:
b1:26:2b:e3:e1:f4:39:4f:58:05:9d:5b:93:e5:8c:
28:04:4c:40:b1:5e:bc:1e:4b:4e:08:6a:5b:d9:54:
22:da:5f:3b:d4:90:31:17:58:0c:28:ab:8e:b8:14:
7a:c5:0c:f6:78:60:24:c0:5a:5c:53:b9:66:61:d9:
5b:72:4f:dc:5b:fc:9c:3f:cf:9a:65:21:90:fd:43:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:18:20:B0:57:F8:74:85:62:29:D7:FE:99:CB:72:84:1F:0B:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9f1c6682-5131-4882-9bfc-aba6bda5af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:8000::/40
Signature Algorithm: sha256WithRSAEncryption
30:6b:01:94:87:b4:2c:b7:d3:6d:a9:d4:5e:d1:75:fc:60:b7:
53:d2:2d:1f:df:22:96:83:d6:d8:ce:71:14:c5:5e:ed:b2:f3:
f3:f5:76:75:f7:39:2c:9c:4f:77:c9:c0:f4:7f:ea:4a:a9:0e:
22:6c:aa:e2:9c:eb:a6:73:7e:6a:f0:58:2e:fe:25:d7:3c:cc:
21:e4:c3:83:47:90:0e:fa:2d:89:75:f4:65:c1:0f:da:82:d0:
82:d1:9e:b0:7c:8d:6e:8a:78:7d:4b:c0:7a:03:8f:d6:48:c3:
14:77:34:c1:78:a6:a0:6b:d9:33:93:43:31:f4:bc:2a:43:79:
98:8f:1d:55:20:82:45:f0:01:71:46:6a:b2:fc:34:81:f3:98:
d4:e1:c4:ba:2a:cf:c1:56:b0:39:1e:25:f8:13:16:27:67:f2:
74:31:cd:af:41:e1:2b:46:be:85:17:cb:d2:db:d0:87:36:82:
d3:41:49:7f:88:8e:10:1a:ec:0a:f2:ed:4b:75:5d:61:eb:28:
4b:ed:47:91:a1:0d:6f:ce:48:32:fa:f6:06:14:79:21:83:7b:
9a:6c:3d:d6:4c:1a:80:b7:10:14:fe:27:33:28:99:c2:c4:1d:
fe:3c:d5:5e:ae:e8:16:37:ab:4a:0b:6b:85:be:53:95:94:26:
80:10:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:44:52 2026 by rpki-client