Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
File: 28181159-5695-4944-b901-f84b836b4d8f.roa (raw, json)
Hash identifier: zrPeWKGMqH8QOP1l5vqBq/wk1ZmxcEZou9ywtSIcCAs=
Subject key identifier: 15:64:31:75:B6:5A:DC:F9:9C:AE:66:EE:FD:8C:15:E4:C6:7A:A5:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C431E222CAD147622567AB44310ABC4EAF049B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
Signing time: Fri 23 Oct 2026 01:50:09 +0000
ROA not before: Fri 23 Oct 2026 01:50:09 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:43:1e:22:2c:ad:14:76:22:56:7a:b4:43:10:ab:c4:ea:f0:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:09 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=c45318a6c57a227d6c4be154462f4038f73273c7a5a8a204da85ccc383e71901, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:9d:f5:19:e0:94:e6:d5:f7:12:63:e8:08:
d9:64:bf:d9:f3:06:8c:b4:63:d8:a6:31:a0:66:a0:
cf:98:eb:08:f1:08:f8:d5:5b:1e:ed:d4:19:3d:2b:
5b:83:0f:b5:06:5f:79:05:3a:7c:07:21:12:fa:db:
bd:de:a1:40:9d:c1:37:d4:f2:12:24:ec:67:c9:a2:
35:bc:42:ad:d5:69:f7:43:43:93:42:9d:2e:3d:83:
82:9d:dd:dc:2d:a2:7e:ce:12:ea:33:02:1c:90:30:
eb:b4:7c:8b:cb:a0:73:e4:9e:83:50:bc:83:44:5e:
29:8c:04:f8:4b:61:b0:e6:bd:21:2a:04:0a:46:32:
61:25:7d:05:86:f7:8c:6d:2d:73:41:d2:0f:94:f8:
8e:2b:89:85:54:66:50:40:ee:25:df:c8:60:0b:a0:
e2:89:35:c2:0e:eb:37:5e:41:4a:74:ab:af:24:33:
cd:ca:25:b4:5e:07:c5:80:90:03:42:0e:6e:21:12:
33:1f:22:87:b0:04:ce:d4:73:a7:fd:12:ce:3b:24:
66:0a:49:36:e7:06:96:6a:1b:44:21:81:51:77:fa:
96:78:fb:40:9d:e4:4c:55:17:4a:d4:63:69:08:b8:
45:0a:93:82:52:2a:89:2e:d0:21:2d:af:8f:03:51:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:31:75:B6:5A:DC:F9:9C:AE:66:EE:FD:8C:15:E4:C6:7A:A5:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/40
Signature Algorithm: sha256WithRSAEncryption
52:b7:2a:5c:da:1c:e0:f4:2c:22:84:75:d7:9d:7e:78:d5:e7:
01:35:b9:08:de:0c:88:b9:5a:e9:5c:be:96:c1:34:4e:53:c7:
97:61:5d:0c:d2:ee:58:ae:a4:af:58:fb:e4:6b:60:ec:54:54:
13:f5:50:9d:82:a2:7d:e6:4b:2f:76:cf:e5:16:3f:ba:6f:69:
50:78:99:7b:f8:16:64:71:b6:ee:c2:79:da:bf:19:db:33:86:
3c:53:24:27:20:4c:ba:e7:21:ce:5f:4b:04:19:ef:c6:04:fe:
e1:1d:44:0a:ec:d7:44:73:72:8a:40:58:85:b1:58:93:6d:99:
8a:0a:c1:60:91:0f:15:b4:f1:e7:7d:5f:7a:aa:ad:eb:aa:1c:
96:a8:2e:98:78:51:c7:4e:29:d7:9b:52:87:f1:38:cb:ba:4e:
34:4d:cd:ce:18:1e:18:bb:81:5d:85:03:10:ba:ab:5d:78:d4:
b6:90:17:b3:86:35:0d:e9:e2:f9:51:8a:96:46:6c:03:3d:32:
a6:59:1a:78:b2:a2:51:46:a0:cd:05:e6:6e:ff:1c:42:ab:b3:
31:cb:7b:4a:53:97:ae:80:c6:28:04:3a:9b:a3:61:62:87:21:
17:d8:2d:58:80:59:4d:b4:e1:66:ae:7d:fc:53:94:e2:92:9b:
12:4f:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:43:48 2026 by rpki-client