Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
File: 4498c2d2-5806-4a94-bd91-8de10249561d.roa (raw, json)
Hash identifier: 6lJYR0hnWdRAdywCdk7Fil3v2rSFjPihPuX8PROgANA=
Subject key identifier: BD:1A:90:BE:A8:4D:9E:CD:2E:CF:69:BD:BE:8D:B6:1A:52:A0:3F:37
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BF5AF55623983DA757B0449B187DF2C2130DBD8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
Signing time: Mon 26 Oct 2026 04:30:28 +0000
ROA not before: Mon 26 Oct 2026 04:30:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f5:af:55:62:39:83:da:75:7b:04:49:b1:87:df:2c:21:30:db:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=54b6345b3a9ca5fc0f5da81d30343d9f6b5251c116c07fcdab11c9ed58831914, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:57:b7:70:a6:75:f3:7d:5d:63:a8:05:75:
81:d1:b6:34:42:38:ce:71:fc:05:2c:e4:b1:96:6d:
07:62:c0:f4:bb:66:b3:fd:40:99:76:73:67:3c:2f:
70:69:a0:f5:c4:a4:76:fd:df:ec:86:39:00:2f:45:
c0:21:50:93:6d:e4:77:a1:81:d1:ea:3e:91:6f:76:
53:e5:26:77:a8:93:e1:bb:53:0b:20:f1:28:2e:f6:
97:b7:6d:6b:22:0c:85:b2:30:a4:bb:fe:34:d9:91:
73:92:ea:7b:31:b6:22:2e:25:52:7a:da:0e:6b:e5:
aa:0b:57:f6:12:d4:01:07:d4:44:33:0f:49:49:b8:
11:7e:e1:fc:48:52:99:94:99:5a:fc:34:cd:a7:7f:
48:05:37:bf:ab:d7:75:03:a9:41:0c:a7:d5:7e:70:
de:18:02:b2:a0:ad:e7:54:bf:8c:d8:a3:0d:da:12:
28:78:db:c2:ba:41:aa:1a:4a:f4:b7:cb:ac:2b:e5:
82:7b:f6:30:30:ee:50:6b:5c:ed:19:c8:34:e4:1d:
c6:df:3e:c8:98:64:80:ef:38:f9:0c:07:98:05:71:
a9:bd:1e:0f:88:d1:f7:8e:ca:4d:3d:81:c7:83:a4:
f7:67:91:44:90:10:28:0f:ef:cc:73:fc:bf:fc:fc:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:90:BE:A8:4D:9E:CD:2E:CF:69:BD:BE:8D:B6:1A:52:A0:3F:37
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:e000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:9c:e1:1d:fd:03:a0:21:5d:47:76:d7:bc:73:90:ab:2c:b7:
84:bf:f2:a2:a7:d5:0d:8c:cb:c5:a9:c5:e4:4b:83:44:2c:55:
5c:82:c1:f6:30:0f:19:a3:06:88:a2:d0:90:a1:a3:85:0a:6e:
cd:fb:8d:21:64:5a:03:66:ef:2b:c4:13:df:76:9d:69:3c:56:
17:73:4d:46:46:f8:56:d7:00:fb:f6:fa:09:b4:67:cc:07:ec:
a4:dc:7c:13:42:58:24:eb:ef:3c:79:d3:c4:3d:58:0c:bc:e0:
2b:45:25:36:1f:4b:93:7b:ab:24:91:42:4c:02:99:0a:28:c5:
8c:a7:70:60:e5:5e:29:3b:e3:aa:3f:9a:8b:b4:cf:e8:12:bc:
44:a3:fe:eb:82:ea:21:dc:a2:c5:c8:e1:ec:af:88:21:a8:4a:
55:d6:da:a8:e1:07:fa:b3:06:97:79:99:42:04:50:a0:10:e4:
f7:a8:52:d9:ab:7a:a2:44:09:04:85:8e:d2:82:a8:04:95:f2:
e4:01:63:c5:14:68:e2:fb:b9:9e:7f:d6:97:2c:b8:c7:60:46:
8b:59:ce:ab:94:91:55:d7:0a:c7:67:f3:35:c2:2f:0f:4e:6d:
f6:5e:a1:67:1b:f1:3d:2c:76:7d:46:4e:fb:28:58:83:67:71:
4b:93:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:51:30 2026 by rpki-client