Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
File: 48202432-610c-42b2-9763-e895c6cbe70d.roa (raw, json)
Hash identifier: n/fX7pRRsaxONUBscZFAH4qJItaUO93vM9Zy6s20bMQ=
Subject key identifier: 1E:7E:D4:CC:CB:18:C7:83:C6:10:F9:68:94:A5:84:7B:40:36:4B:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40A38BC7414775F20B8A10D4AB6ECAD1E1B99DB1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
Signing time: Tue 04 Aug 2026 01:10:10 +0000
ROA not before: Tue 04 Aug 2026 01:10:10 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a3:8b:c7:41:47:75:f2:0b:8a:10:d4:ab:6e:ca:d1:e1:b9:9d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:10 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=6403d36004307ac297a0b41c8bdd1539422529df761fe8d01bbd6d4d2631e2b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:d1:31:1f:14:c8:43:9f:7e:82:5a:5e:dd:
fd:7e:17:89:5b:27:fd:33:b7:82:e1:a8:93:73:8a:
6c:ee:ff:c2:62:f8:a3:fd:86:e2:eb:79:bb:22:bc:
79:00:f4:8e:ff:71:b4:b2:79:e5:7e:97:2d:ab:14:
22:ba:3d:7a:9c:2e:8b:26:bf:4e:85:00:7a:8b:67:
9d:d1:56:66:9c:86:b8:ff:e3:d9:c8:38:f7:ee:e8:
9d:74:db:72:7b:61:f4:52:3d:97:33:db:c2:24:87:
85:e4:25:f3:4e:0a:49:61:c1:bb:5f:0b:a5:8b:5f:
e5:ce:51:27:89:4e:27:a0:95:2e:e8:31:ba:42:d3:
8f:15:f7:47:02:ac:c6:70:36:35:d5:d0:85:96:8c:
c3:76:00:bd:cd:be:28:11:15:cc:a1:db:ad:90:d7:
d6:b9:16:7e:1f:59:de:57:d7:12:1d:d4:e3:07:14:
75:46:af:ca:12:82:18:78:11:41:70:d6:57:3e:54:
bf:1b:41:19:03:b3:d2:22:8d:5d:1a:e5:02:79:8e:
55:d4:85:6e:97:04:78:47:0e:e1:d3:e4:eb:f1:95:
ba:93:08:a7:3f:f7:64:56:65:63:06:2a:a6:0d:44:
e4:29:42:f6:ef:d2:13:fa:04:8c:20:5c:cd:72:0d:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:D4:CC:CB:18:C7:83:C6:10:F9:68:94:A5:84:7B:40:36:4B:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:1000::/48
Signature Algorithm: sha256WithRSAEncryption
b9:89:ab:d3:f2:7f:b6:ff:5b:d9:b4:d0:76:1f:90:12:71:b1:
9a:8f:f8:a3:04:c9:21:48:af:9d:46:88:ed:d3:1d:0f:16:0b:
49:9a:03:c6:26:05:e7:44:c7:fc:99:b6:53:c8:b2:97:a0:8c:
0b:47:f5:67:5f:7e:c0:f6:8e:da:db:1b:dd:24:52:05:a9:26:
23:fc:38:15:47:a2:c0:d3:62:ff:f7:55:23:6c:2d:a8:1d:f9:
14:1b:93:89:d1:bd:71:8a:ed:d6:59:fb:c5:91:dd:ff:c4:e8:
6a:86:de:31:42:ef:d5:3e:80:49:8b:87:1a:d4:c3:d7:99:30:
96:ab:30:dc:84:1d:78:d1:b3:c6:01:3a:fc:32:16:cb:d4:0a:
27:87:b4:fd:7f:e2:e5:c7:f9:22:9f:37:e3:58:96:41:dd:0c:
d3:ae:9e:21:b6:35:0e:ac:15:a9:26:18:3c:25:ab:7d:a8:28:
24:b4:dc:8c:be:dc:fb:5f:6f:0c:67:23:12:cc:68:a1:37:3a:
cf:d3:55:00:60:95:5b:24:2d:52:2b:7c:c1:ec:e2:74:76:61:
03:d4:d8:03:55:51:92:d3:73:1b:9d:59:05:1d:ad:fb:f9:aa:
29:f2:a0:6c:18:8d:18:d1:f4:bd:c6:d7:ad:01:12:b6:c5:1e:
8d:0f:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:57 2026 by rpki-client