Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa
File: 94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa (raw, json)
Hash identifier: iihPGVk4ht47feIRH7ps6+q8+15fd1LNnY6ezSdaFD0=
Subject key identifier: AC:9B:0C:6D:48:23:25:66:57:55:50:86:A2:76:CB:71:04:E8:1B:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AF8A9A9D81AEF5EEE83F8A9B6B638B09666BA80
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa
Signing time: Fri 06 Nov 2026 00:10:21 +0000
ROA not before: Fri 06 Nov 2026 00:10:21 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f8:a9:a9:d8:1a:ef:5e:ee:83:f8:a9:b6:b6:38:b0:96:66:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 6 00:10:21 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=51a299b137d24176cd478027898407039e80707bf6224e5eb185c9096609b92b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:00:b9:03:21:06:04:d6:a5:3c:0f:00:ad:
7f:f2:18:e9:a6:d7:7f:65:7d:3c:39:54:8a:de:4d:
d9:b4:9f:70:64:6a:aa:0f:b9:a6:09:f8:33:50:3d:
f6:e6:fd:7e:7b:f3:60:d9:ac:d5:bc:96:79:fb:e5:
b3:5c:b7:4b:96:04:cd:19:99:06:f9:0b:f7:c1:85:
0a:f1:5a:aa:19:99:ba:e6:d1:f7:fa:0b:dc:6f:94:
97:f0:8d:c0:7e:9c:4d:d4:77:39:75:6d:ee:6f:4a:
3a:05:39:fa:2f:d5:d3:9b:f9:93:8a:5c:a5:79:d4:
ec:26:be:c5:21:de:fa:72:d9:7d:e2:60:cb:54:6f:
63:7d:67:80:09:cf:f1:b2:fe:aa:da:4d:57:59:5f:
39:8e:34:84:11:f2:e1:72:b9:3a:15:47:26:22:fb:
cd:15:49:a6:79:dc:68:d4:4a:15:7d:09:62:e1:82:
be:9e:f1:44:c3:18:33:81:e4:76:49:ec:7f:b6:2f:
23:55:d3:45:11:f6:55:ce:d4:61:cc:f2:a3:70:dd:
b2:64:13:34:6f:60:70:05:a5:4f:7d:4f:4e:48:c1:
ea:06:37:54:cb:2e:6a:e6:ac:b4:7f:05:06:92:30:
98:80:bf:da:08:68:9b:3d:7a:db:8e:97:5d:ed:52:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:0C:6D:48:23:25:66:57:55:50:86:A2:76:CB:71:04:E8:1B:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94ae6ee6-8294-4c53-b39c-ffe80da13f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:e000::/40
Signature Algorithm: sha256WithRSAEncryption
44:7d:66:f0:5e:b5:56:6f:09:f0:62:e8:e8:4a:69:dd:94:da:
6e:a1:d1:85:78:4c:0d:30:ed:3d:c4:f5:fc:d3:72:42:e8:a2:
97:3b:15:25:3b:a5:13:b0:01:39:74:89:21:3e:8d:e3:b6:e0:
1e:b7:44:57:76:81:17:5a:b5:2e:8a:58:1a:af:7c:5e:45:6a:
3b:14:a2:e5:a9:43:6a:3f:58:17:12:3f:27:4b:b9:c4:6f:96:
b4:6b:96:03:67:53:c4:06:3b:5e:91:04:ea:30:c0:0e:d3:ab:
90:f1:e3:89:7f:9d:dd:11:8a:5a:c1:58:de:03:07:f4:42:67:
6c:d4:62:da:92:41:7c:e4:22:7b:93:cd:d8:2c:1f:0e:ee:a1:
f8:49:2b:fe:03:2f:e9:81:ac:17:08:f8:eb:ff:39:53:f8:c0:
e7:2d:17:38:b2:10:f4:c1:15:c6:f6:09:58:4e:9f:7c:42:80:
73:97:0c:85:40:ba:1b:e0:f4:0e:d8:eb:e0:63:ac:57:aa:5c:
dc:eb:af:7d:a0:3d:77:4d:fa:17:c2:8a:6f:36:d5:a3:ad:79:
2f:b5:7f:3b:e8:e1:2c:4d:12:04:a2:f3:db:8d:3a:f5:a9:72:
8c:54:ff:b2:e8:a0:a0:ac:58:9d:78:a4:e3:9a:34:e7:b0:56:
61:be:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:43:10 2026 by rpki-client