Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa
File: e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa (raw, json)
Hash identifier: 8HVxw6PCyQEitw/MtagEXG+MltfcaRosiG+qFbiekrY=
Subject key identifier: 50:4B:3B:F2:8A:65:B0:C5:F2:BA:E5:F3:36:56:B7:FB:C1:4B:D0:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B6A2CE48838DE18E833EE867EEF310099B47F8A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa
Signing time: Sat 07 Nov 2026 01:02:24 +0000
ROA not before: Sat 07 Nov 2026 01:02:24 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6a:2c:e4:88:38:de:18:e8:33:ee:86:7e:ef:31:00:99:b4:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:02:24 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=e011eabf2982b9a124d967c7df862190f06ba160d8c1d6710c4ab7c761ad5762, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:0a:a1:dd:e9:4c:e9:2a:9a:4f:47:6a:5e:
87:ea:6d:1f:fd:da:17:4e:ed:3a:6c:d5:94:db:5a:
a5:a4:e5:ac:eb:39:a2:ce:c9:19:94:e6:5d:f7:70:
42:8e:4b:40:6f:8f:30:a2:a2:b1:53:bb:4c:b9:54:
c6:31:fa:56:d9:7e:1c:ef:7c:cc:0a:a0:0e:7f:c6:
65:22:39:ca:90:8c:95:07:ed:74:d5:b1:13:4e:7e:
6d:d2:d7:ba:68:fe:5d:61:db:62:2f:38:84:8b:d1:
84:04:39:62:45:bc:0c:75:75:e9:af:2f:f1:8b:4c:
c4:ba:39:64:52:1f:36:3a:ac:20:94:22:78:d4:af:
65:66:37:65:82:21:86:e2:04:f4:e8:a2:1e:f2:4d:
77:b1:8f:14:e7:c7:28:83:79:a4:83:df:a6:7d:de:
9d:39:51:47:08:b6:4d:88:39:61:b6:23:2c:84:fd:
9d:be:1b:0f:da:59:c2:43:b4:cb:c8:f1:20:3b:7d:
f7:05:d2:96:84:7b:8e:b8:25:89:50:3f:ab:30:5b:
30:be:5a:a8:09:6c:4a:03:0c:cf:aa:3c:d4:42:26:
a0:d9:5a:13:85:be:e8:44:bf:51:67:d5:84:07:a5:
9e:7c:e9:c3:c1:3a:70:af:83:3d:c5:b6:94:1c:8a:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4B:3B:F2:8A:65:B0:C5:F2:BA:E5:F3:36:56:B7:FB:C1:4B:D0:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e15fa0a2-08ef-450a-bcc6-d556e4fd19b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
43:28:cc:ec:0b:9d:f2:ef:2f:a7:6f:bb:42:aa:eb:f1:4f:75:
68:b4:dd:cf:14:c0:e5:f4:7c:fd:82:8d:c9:69:b9:32:21:be:
32:36:85:66:07:82:6f:9e:d4:f4:00:11:ac:3a:1b:fd:72:a6:
58:bc:04:4a:b5:17:78:ce:32:39:a0:1f:ba:fd:d4:b5:97:a8:
97:25:67:c6:0b:b6:67:d7:54:8f:47:03:a0:a4:02:fe:b4:3e:
c0:74:8b:7f:a7:38:31:48:5b:4e:c1:eb:95:47:8f:3d:03:b9:
62:71:55:cc:91:8e:4e:11:b9:36:05:ef:4c:c7:0b:bf:6e:26:
8a:41:e3:6e:8e:e9:d9:1b:e1:1c:36:db:db:f2:99:5f:86:e3:
d1:4c:b8:f1:49:a7:8d:32:93:fd:f6:19:89:18:f1:a2:d7:de:
7f:fc:14:7d:5a:26:c0:f3:69:76:b3:e9:d2:65:0b:05:5a:10:
34:52:da:ac:89:c4:8b:c2:a1:54:60:c6:9b:cb:46:3b:1c:59:
5f:dc:4e:f2:ef:8f:c0:9c:a7:dd:84:f9:89:a3:ba:19:cf:0f:
43:02:5a:20:e9:53:c4:96:ee:91:ac:02:8e:bc:f5:c2:fb:2a:
56:e7:6d:20:86:4f:57:28:22:4b:51:60:60:6a:98:e4:70:48:
5f:66:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:49:04 2026 by rpki-client