Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
File: df2565df-3632-4ab6-afc7-e11564fe17f9.roa (raw, json)
Hash identifier: on89lmKD3r+tCaN3Lewww7d4XhQUyGlynlbY/0smDo4=
Subject key identifier: 18:52:AB:94:3D:84:7A:42:CC:96:3E:C8:71:ED:6E:3A:4E:83:81:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C69468C0C927084A98EEA50EC5204A798B02580
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
Signing time: Sat 07 Nov 2026 00:30:12 +0000
ROA not before: Sat 07 Nov 2026 00:30:12 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:69:46:8c:0c:92:70:84:a9:8e:ea:50:ec:52:04:a7:98:b0:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 00:30:12 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=bfad7c502df36f1025df2227e509cf379ed8efa2e213c92bb3a727a73b3fa455, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:f4:6f:17:62:1f:4d:36:1e:9a:8f:68:16:
47:54:6a:11:09:cf:4f:ee:4f:81:e2:11:31:1b:35:
67:dd:6d:23:7c:c0:07:52:17:29:23:31:28:7e:5e:
67:ef:3b:ab:c5:c2:dd:02:ed:a3:27:fa:b3:fe:72:
9c:e6:7f:3a:5e:a7:d5:ef:a0:04:0a:b2:06:db:2e:
c0:ad:6d:9b:fd:30:3c:c9:21:84:20:d5:d8:20:92:
f7:ff:b8:91:43:99:2c:71:1d:e9:7a:45:ea:ef:e3:
da:20:0a:61:dc:f1:71:36:98:52:98:83:61:79:3a:
8f:94:f8:56:e0:84:37:6f:6b:1d:e1:ca:9c:5a:05:
14:e5:c2:3c:d1:3a:34:5a:a4:a6:fb:df:a0:0a:53:
2e:90:55:92:50:da:7a:af:06:71:2f:16:ce:ee:ea:
26:49:6d:dc:78:57:8a:39:5d:28:be:58:ce:11:a4:
6c:ad:93:de:01:92:b1:c6:73:24:a1:e2:6d:32:f4:
8f:dc:ba:9d:51:05:48:88:cc:fe:60:d4:f4:e0:6a:
9c:d0:32:eb:6e:da:31:e8:2f:ea:bc:4e:0c:da:4b:
f2:7d:1a:d4:58:8b:0b:e7:a1:a9:72:86:2f:40:75:
0e:64:c7:26:a2:8b:56:cf:3e:b6:df:af:a5:e3:93:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:AB:94:3D:84:7A:42:CC:96:3E:C8:71:ED:6E:3A:4E:83:81:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df2565df-3632-4ab6-afc7-e11564fe17f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5040::/48
Signature Algorithm: sha256WithRSAEncryption
0a:42:8c:26:83:69:7a:64:27:19:e7:e0:2c:71:cf:1f:41:38:
93:d8:1d:1a:37:8a:3e:f8:83:0b:a6:57:2e:7c:2c:c2:f1:dd:
06:2f:63:4b:54:45:ad:6c:b1:7b:c5:ef:13:a5:f9:a8:c0:ef:
3e:35:74:46:b4:81:58:a9:a7:e0:b6:e7:60:f8:cd:ea:70:4e:
1c:aa:31:d8:92:11:c4:b4:a4:c2:9f:18:a2:89:c9:8f:73:6b:
10:ce:2c:e6:6e:c9:42:41:8f:50:1b:49:ee:f5:3a:be:10:d9:
a5:25:b9:95:52:dc:66:a4:79:34:66:05:44:c6:95:91:15:bd:
c6:99:97:9a:f5:ee:b6:0b:65:89:af:d1:1a:db:e9:7d:8c:27:
52:36:69:10:5b:2e:19:97:ff:72:6b:cc:36:aa:76:d3:ef:33:
4e:47:4c:60:0d:67:3a:51:5d:7c:39:6b:00:33:72:6f:81:07:
73:35:5b:04:04:a8:ae:b6:8f:31:db:64:62:27:83:b9:d7:91:
44:51:9c:d3:99:88:ea:af:9b:e0:da:85:63:88:d3:7a:fc:a9:
55:0b:2b:6b:30:ef:78:15:5f:fd:f7:96:83:68:4d:9d:91:2b:
75:ff:83:49:61:f2:95:60:aa:81:51:5a:3a:05:ae:57:6f:6d:
ce:e7:30:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:03:41 2026 by rpki-client