Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1cb26a7c-ca37-4023-ae19-381c800f12df.roa
File: 1cb26a7c-ca37-4023-ae19-381c800f12df.roa (raw, json)
Hash identifier: ssRWlZD/EpLByUetd4UCQJSnFY89rWucl/y2AYLz9xI=
Subject key identifier: 02:A5:6A:1F:AC:F7:03:DF:F1:DD:4A:C2:85:31:AB:E5:36:4D:1D:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CFC775CB0AB847B1984A956B7DD2C08254BD178
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1cb26a7c-ca37-4023-ae19-381c800f12df.roa
Signing time: Thu 08 Oct 2026 17:24:41 +0000
ROA not before: Thu 08 Oct 2026 17:24:41 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fc:77:5c:b0:ab:84:7b:19:84:a9:56:b7:dd:2c:08:25:4b:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:41 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=0482a1feff6006c05c9668c26f179180fe3f803a59247487ced668ff7c96df5d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:08:a4:d5:f4:34:e1:12:25:ab:60:4c:45:
58:af:24:4c:44:3f:21:28:89:43:cf:31:13:2f:7f:
14:37:80:70:0b:4c:99:37:85:8c:c9:e6:e6:dd:55:
e9:25:a7:56:44:d5:fe:fe:21:fd:0d:56:e4:af:3b:
a5:eb:e3:a9:ff:8d:a6:5b:4b:c2:7e:fe:d3:6c:c4:
4f:c1:5e:4b:d5:f0:d7:98:f8:cc:66:fd:cc:d4:85:
a8:70:ae:5a:aa:cd:dd:61:55:ab:4d:21:6c:0e:da:
60:dd:8d:77:1d:df:96:5a:27:08:54:f9:b0:b0:6b:
28:7b:d7:31:63:09:13:f2:2b:fe:72:b8:1c:ea:24:
70:71:38:d3:92:8d:22:44:32:92:5a:73:3d:98:74:
d8:b6:da:a3:d1:18:41:45:f0:e8:86:77:12:41:67:
b2:75:a4:e3:17:fc:17:1d:85:cb:7c:a8:2d:8e:22:
15:c9:67:dc:0c:72:07:c2:d6:1f:65:92:49:5f:9a:
35:f3:da:1f:58:1b:83:ad:3f:4d:62:34:c2:c3:8f:
da:eb:55:cc:c6:24:68:85:85:a0:e0:fa:7e:41:f4:
df:52:19:3b:0f:33:c5:8c:5e:70:23:d1:ed:af:b0:
6b:56:66:cd:74:82:66:52:5a:83:c6:4d:9b:e7:4b:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:6A:1F:AC:F7:03:DF:F1:DD:4A:C2:85:31:AB:E5:36:4D:1D:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1cb26a7c-ca37-4023-ae19-381c800f12df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:5000::/40
Signature Algorithm: sha256WithRSAEncryption
92:86:20:1a:ca:b4:04:fc:ea:86:e4:ee:25:1f:5d:67:2e:16:
ca:9c:70:05:08:22:ba:7e:64:db:fb:4a:b5:cb:17:a1:5d:85:
84:00:f1:a7:71:f9:36:92:00:3d:ee:0f:3f:be:e0:c0:21:ab:
f7:61:f8:61:92:c9:64:be:97:91:62:76:19:6d:56:fa:59:75:
3f:24:a1:55:32:a8:08:c4:8f:09:e7:48:fb:32:61:b7:c5:4e:
41:99:27:fa:7a:f9:6b:07:b5:ee:42:23:8d:79:b2:05:22:b5:
00:9b:f3:78:2f:48:f4:45:38:71:ec:22:f2:b1:35:fd:2c:6a:
30:51:64:a7:b5:86:07:a6:68:8a:4f:d6:6d:7c:83:f3:8c:be:
ce:d0:3a:2d:b8:5e:36:79:7c:3d:0a:ec:eb:99:68:78:4a:ec:
73:e4:ca:33:cc:f0:41:7d:21:88:fe:f2:c5:1c:49:dc:23:3d:
ea:f1:03:46:a1:3a:33:a9:b9:00:79:79:d8:5f:4f:2b:eb:0b:
22:95:53:9c:66:47:0e:20:e4:4c:43:c4:9c:b7:b9:23:ca:bd:
90:e6:00:9c:25:3f:41:ac:1f:08:c0:0f:e3:ff:98:e1:7d:d5:
21:12:c7:a4:72:fd:91:04:2d:41:38:8e:97:f4:4c:28:0d:29:
ac:56:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:33:18 2026 by rpki-client