Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41b9e44b-9aef-42a0-8a5c-baf183988ee2.roa
File: 41b9e44b-9aef-42a0-8a5c-baf183988ee2.roa (raw, json)
Hash identifier: UAih+FVhL2rr/MQ4yNwwYLg94+YJdElDwpSTckYJFcI=
Subject key identifier: A9:5D:C0:A1:81:CC:7A:AD:54:44:B6:28:38:BD:25:DF:97:4E:19:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4625C2747124E36EBF301A665B0074A96C1F775D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41b9e44b-9aef-42a0-8a5c-baf183988ee2.roa
Signing time: Thu 08 Oct 2026 17:24:40 +0000
ROA not before: Thu 08 Oct 2026 17:24:40 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:25:c2:74:71:24:e3:6e:bf:30:1a:66:5b:00:74:a9:6c:1f:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:40 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=fddc19e16a65911b620c808001a0ee453bbd67dba074a3f199552fee2effaf1c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:35:64:e5:72:d6:8e:2f:e9:a5:3c:da:04:
0e:82:0b:7c:03:d7:6f:47:48:8f:3e:c9:2e:9b:3d:
bf:26:06:ee:28:1d:04:5b:1a:13:a3:5e:2a:30:40:
16:6c:2a:a0:84:61:01:c0:5d:5d:dc:b7:53:a5:ba:
9d:23:15:26:2d:32:8a:94:a0:cb:71:87:82:18:00:
bc:f8:d0:71:28:4f:40:3c:2f:12:2c:d6:de:ed:81:
6b:0e:4d:66:ce:2a:29:3d:f0:3d:dd:a0:2e:da:71:
89:e7:11:2a:fe:76:fe:d3:9f:b1:f2:0a:b3:cc:0d:
4d:b6:46:f1:4d:cb:1b:ba:6d:a4:41:b9:d8:5d:49:
0a:ea:b3:ff:fb:d0:f1:41:2c:50:82:e0:3e:0a:da:
da:16:b8:85:92:38:9e:98:39:52:53:5a:5f:87:95:
3c:47:7e:a7:87:57:be:9d:a9:a5:18:0f:af:0d:21:
6e:20:9d:87:e4:0d:a0:3f:06:ca:65:dd:37:1e:7c:
9c:49:ea:d9:0b:75:b1:ab:0d:cc:b5:b9:11:3e:4b:
c7:f7:77:51:8c:52:e7:9a:ee:d7:3b:7f:a5:9d:57:
af:a0:85:31:ac:5b:86:cb:ff:23:f5:98:04:c8:d3:
9d:44:16:9e:da:d9:ad:70:94:60:3c:60:1d:45:70:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:C0:A1:81:CC:7A:AD:54:44:B6:28:38:BD:25:DF:97:4E:19:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41b9e44b-9aef-42a0-8a5c-baf183988ee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:2000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:e3:7b:3b:76:90:5f:9c:82:df:71:66:26:24:64:e3:8c:c9:
0f:b7:d1:48:9b:0f:3d:fa:b3:a4:1f:9b:d7:34:42:a9:d2:cf:
51:07:8b:5a:5b:f6:d2:98:8e:0b:13:31:ee:4f:83:57:4b:88:
8b:c7:c7:14:9f:bb:14:01:26:c4:b2:99:83:85:6d:dc:35:77:
5b:33:01:a3:3d:d6:33:d9:f4:82:d3:6c:67:cc:94:3f:74:0d:
f5:f5:f0:25:92:16:ef:3e:80:e7:d3:46:88:6d:88:90:8d:f5:
8f:ae:58:f7:96:c3:4c:14:33:63:3d:f8:af:92:63:10:9e:d9:
6c:10:16:80:f6:6f:1c:bf:2f:d3:da:6a:3d:b0:d8:27:49:81:
7f:97:0f:85:a4:5e:a4:b9:db:d5:0c:86:72:e0:2f:41:cd:70:
18:9a:fa:d9:fc:a3:58:e1:79:cc:ea:80:68:a8:e3:9f:85:a1:
10:5e:aa:81:42:70:cf:14:b1:a4:72:c5:42:3e:1e:00:83:35:
16:5a:67:63:95:9a:7d:21:46:5a:b5:27:03:21:f8:b4:6b:7a:
f4:bb:ed:47:8f:56:d3:45:41:b4:3b:8d:1c:98:8d:17:39:97:
5b:36:14:a9:e9:85:d3:8b:ca:52:e6:8f:89:3f:31:5b:d3:5b:
af:0d:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:28:40 2026 by rpki-client