Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: rFJ5wccqGaXIgjUyvMMuUjDlUr4nlCX0gh5zIzV8Tp0=
Subject key identifier: 32:27:55:4D:73:13:44:15:36:74:D3:9D:A6:57:73:C5:CC:C9:7B:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DA60EABFC512D67779E0827FC04E3E44EF6ECF5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Thu 15 Oct 2026 03:20:20 +0000
ROA not before: Thu 15 Oct 2026 03:20:20 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a6:0e:ab:fc:51:2d:67:77:9e:08:27:fc:04:e3:e4:4e:f6:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:20 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=7a58f41e375565f46aa1ad5b64ff20b0ff5aec47a4f11a45e5020dc6ffc56ce5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:69:bd:d8:69:aa:45:c2:c1:4b:04:da:ed:
0b:15:4a:8e:ac:8e:b9:7b:4e:8b:9e:34:a0:61:b0:
b0:bd:89:82:c1:d5:75:cd:c0:01:52:ef:c9:02:75:
7e:4b:93:2e:8c:74:b4:f9:e3:dc:ee:28:56:cb:cf:
b0:3c:7f:15:d0:70:df:48:0f:bf:1e:10:94:86:84:
7a:44:41:f6:d3:c0:d3:50:07:ce:b5:b9:7b:78:24:
85:cd:de:00:27:59:9a:d5:c1:5e:18:37:23:6a:93:
c5:dd:4a:fe:f1:ca:a9:a7:f3:81:6a:63:0c:01:ba:
e3:4f:ec:9c:ee:fb:67:e6:21:6c:5f:fc:0a:ae:22:
29:b5:24:65:e2:60:8a:29:35:21:b2:87:16:29:fe:
df:a5:ee:86:a4:8f:63:14:81:d3:5d:0e:ed:17:c3:
0f:15:bc:bb:95:16:31:87:b0:20:c0:d5:2d:5c:4d:
f1:3c:0d:36:c3:9e:04:13:e7:8f:4f:af:18:93:c0:
3b:50:92:fc:eb:0f:c7:3a:41:74:6b:17:d1:99:9c:
41:17:f7:ed:f9:79:9f:11:14:5f:c8:c3:83:18:c7:
47:63:a7:39:2e:cb:e4:94:22:ca:65:5d:90:63:4d:
45:c8:77:c7:37:eb:fc:88:81:b9:6d:4d:d8:29:8d:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:55:4D:73:13:44:15:36:74:D3:9D:A6:57:73:C5:CC:C9:7B:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a2:29:fe:d8:7e:00:40:74:f3:42:cc:ab:b6:5c:e2:8b:b1:89:
f1:f4:19:93:19:89:36:72:99:16:47:eb:a1:09:17:6d:e1:4f:
d1:27:cf:4d:a5:b2:28:7c:49:55:67:bd:aa:ca:56:53:50:45:
f0:cf:8f:9f:99:0b:3d:e0:61:a8:fc:9b:c5:43:ba:b1:54:54:
3b:e7:69:8f:bd:6d:95:9e:2f:df:81:de:25:f5:a6:73:9f:c2:
26:dd:c1:28:93:46:34:f2:b4:30:b3:70:e8:67:68:44:aa:63:
13:ec:d1:63:4b:5f:c9:cd:29:7d:b5:05:23:ad:33:d9:91:d4:
d4:48:5c:b7:1b:13:59:73:c3:47:5d:19:06:ce:79:1a:03:0e:
b0:37:8d:be:76:17:5b:a2:29:80:30:f3:3b:fd:ea:f4:04:cc:
6e:4a:0b:f8:fb:0a:60:d7:46:97:8f:f7:62:2a:66:f9:42:7e:
cd:38:55:fa:25:7f:cf:b7:8e:a5:2b:63:62:7b:1f:ca:69:9a:
bd:0c:aa:9c:64:ea:09:12:ea:30:06:77:43:42:d8:8d:21:f9:
24:aa:29:68:2b:82:54:52:ee:3e:fe:eb:1d:06:11:75:2a:f6:
f1:3a:ce:2c:69:01:d5:c5:e5:af:a0:2e:9d:1e:9b:1a:de:7e:
e5:d0:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:41:58 2026 by rpki-client