Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
File: b176a187-5863-4413-a001-74ccc0321be5.roa (raw, json)
Hash identifier: wZixdHMysnB1/5SuWl3b+h3xqxadHJma2ldLXBhX0ZM=
Subject key identifier: C5:1C:64:0F:93:47:DD:3E:69:C1:A6:D4:56:A8:4B:BB:A5:4A:39:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13984E9AA63CA973D3916F28816D03183936CF35
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
Signing time: Mon 26 Oct 2026 04:31:07 +0000
ROA not before: Mon 26 Oct 2026 04:31:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02c::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:98:4e:9a:a6:3c:a9:73:d3:91:6f:28:81:6d:03:18:39:36:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9faad80d61a331ff52d734e722d58a87d4646304c3cb790dffd55229a97cee1c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:64:16:cb:52:b8:7a:17:4c:62:51:53:25:
50:e6:2c:d8:7d:0a:e8:c3:e3:5d:0a:32:45:f7:dd:
80:78:09:69:a7:f6:96:4d:0e:b2:79:13:d2:17:66:
6b:1e:f5:9a:6d:98:e6:72:0b:61:bc:30:0f:99:57:
14:83:3a:32:b9:ae:35:6c:a0:25:f2:93:09:30:a1:
4d:ac:2b:c0:d1:fe:73:17:86:b4:7e:13:f8:ed:ee:
1f:bb:c5:11:7d:25:af:9c:bd:8d:6d:b2:61:1d:53:
c7:f4:74:70:37:fd:48:4c:2d:05:9f:ee:a5:44:54:
6b:83:7f:8f:56:34:ce:9b:8d:73:38:4a:d4:2f:06:
65:d8:0c:c2:b8:ed:15:36:73:b6:d1:8e:60:ed:24:
86:87:44:f9:04:3d:b1:f4:2e:ab:65:1d:82:db:66:
dc:63:99:e4:72:8f:24:21:18:54:58:60:8b:94:54:
e2:95:10:3d:e6:8b:c7:1b:e8:11:86:fa:6f:ad:11:
3a:6d:a3:6d:3d:22:5e:0f:f9:05:81:92:76:4c:21:
89:2b:b2:41:24:4a:9b:db:dc:e3:42:c9:2e:02:73:
5b:fb:50:9e:19:e0:83:03:9b:fd:e0:d0:c4:9d:8b:
51:1a:ff:3f:01:fe:c3:38:b8:54:59:ac:85:60:00:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:64:0F:93:47:DD:3E:69:C1:A6:D4:56:A8:4B:BB:A5:4A:39:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02c::/36
Signature Algorithm: sha256WithRSAEncryption
3e:8a:28:78:e0:35:c1:b5:fa:e2:7b:a2:c4:55:b6:f2:3c:92:
87:1b:85:b8:bf:04:ee:68:62:40:2d:5c:1c:b6:81:53:e2:b8:
78:85:ed:e1:be:06:03:32:ba:f3:4e:28:52:ef:9b:f8:86:d5:
58:b8:ed:a0:44:63:d9:b0:2c:1e:79:de:6a:f1:ef:d4:be:51:
e6:56:ce:84:51:ad:01:f4:78:81:13:00:3c:ee:af:74:c8:df:
54:b0:70:64:2b:f2:2c:2a:65:24:70:76:b6:b0:33:71:db:44:
70:80:4e:93:6f:65:eb:44:ef:cc:40:74:18:7e:76:5a:a1:e7:
6a:b3:02:ef:2f:e3:a8:91:10:25:9b:49:1f:cd:b0:4e:a3:7a:
bd:f4:a3:17:22:62:86:51:f8:45:21:89:7a:45:d3:8f:49:87:
2c:7c:11:74:b6:1d:04:dc:09:fd:8d:07:07:d9:ff:cb:68:6e:
71:1c:fa:74:8e:3e:33:b4:1f:78:2a:70:2c:f1:82:39:90:af:
78:51:7c:9f:61:06:66:bf:a3:10:1b:bc:b8:44:15:6d:4d:fe:
39:80:1e:95:8e:d7:41:19:48:e3:00:ff:b5:e7:27:66:a3:ad:
43:e8:52:a8:69:eb:64:ed:8d:76:95:98:b3:16:4c:df:07:ad:
8e:0b:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:43:37 2026 by rpki-client