Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
File: 48202432-610c-42b2-9763-e895c6cbe70d.roa (raw, json)
Hash identifier: jhdqRY/SY1byd/EGVAxVpML92luv3sqN4fDqABZPmSU=
Subject key identifier: 47:4F:F1:58:F7:9C:0C:C1:1B:9F:1A:9F:DE:17:C6:12:41:45:3F:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 019EB3F193A776D7AF88454B2C43158E3BD841ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
Signing time: Fri 23 Oct 2026 01:50:10 +0000
ROA not before: Fri 23 Oct 2026 01:50:10 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:f1:93:a7:76:d7:af:88:45:4b:2c:43:15:8e:3b:d8:41:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:10 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=24912b0a8cd8c9d7b04f3a2e4a40bb1a7151e9658756046da670365454f84514, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:ca:56:7f:08:16:9c:21:17:e1:75:81:a4:
92:d6:39:59:69:02:79:43:82:5a:14:77:74:6b:77:
d0:38:02:28:3d:ca:cb:1e:f3:bb:be:04:3c:52:cf:
90:bd:c9:b3:27:71:84:86:e2:ff:ea:48:93:a4:ec:
06:cb:35:cd:f3:a4:ff:b5:3b:eb:03:fd:73:7a:50:
d6:2a:a1:ba:96:df:a7:53:b5:20:b5:98:00:cc:cf:
a5:dc:bf:46:5a:4e:09:83:5b:cd:2b:cf:5a:89:69:
c5:a1:51:86:1b:ad:b7:70:cc:2c:1d:a3:07:7f:42:
42:23:e2:ec:5a:7d:ca:75:07:72:c0:21:61:43:8a:
61:68:fc:b2:fb:35:52:07:ba:24:98:d0:6d:03:69:
11:0b:f7:b9:fc:dc:0c:e0:af:7b:66:51:e4:3f:a7:
b1:c9:70:77:3d:c2:37:d0:cb:6a:7f:38:88:dc:4c:
13:9a:ae:f2:f5:04:1a:d4:2f:1d:d8:39:c7:d5:d8:
fb:37:38:a3:f0:5a:06:aa:0d:ba:00:04:44:d0:84:
1d:d1:46:fa:0f:a6:9f:dc:11:7f:c8:97:0d:05:7e:
12:d8:e9:7b:a1:63:db:8c:30:df:7e:e0:8e:1c:2f:
a2:a8:2f:e4:f9:64:90:37:b5:e8:ee:35:d2:84:31:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:F1:58:F7:9C:0C:C1:1B:9F:1A:9F:DE:17:C6:12:41:45:3F:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:1000::/48
Signature Algorithm: sha256WithRSAEncryption
61:a1:a2:15:76:b1:75:6f:49:25:c3:ad:76:7d:a3:c0:2c:a0:
97:73:91:80:d0:29:e7:c2:1b:b2:e1:a9:f6:49:17:bf:28:10:
74:10:4c:52:f9:dc:14:92:73:7a:d3:2e:1f:31:67:ec:ab:dc:
bb:0f:e0:3b:57:da:e5:22:e3:c0:3d:6a:3c:20:eb:e9:1e:da:
35:4e:c4:f3:cd:7e:98:97:14:0c:b1:aa:2a:c0:9e:f0:61:89:
f8:a0:a3:1f:ed:47:4a:f4:df:3c:ba:de:60:70:3b:f3:8c:3c:
8d:34:58:bd:26:44:e6:35:a7:db:e3:8a:59:f3:d1:fa:40:c3:
42:d5:41:2e:1f:6c:b3:5f:be:a0:33:37:a3:4d:64:2e:8f:c6:
a8:cf:99:40:82:9d:4f:88:93:e5:89:2f:61:84:42:13:6d:ab:
1d:8f:73:1f:7b:d9:f2:76:dc:98:e0:8f:c7:72:48:64:c6:26:
91:ef:bf:f9:33:20:52:07:7d:ec:ee:5c:c1:cb:bc:f0:23:dc:
13:0d:da:ac:29:21:4b:17:6d:9d:0b:d8:f5:d2:a6:13:d0:09:
22:ad:cb:2f:69:3b:be:72:0a:8f:d1:a4:36:5d:fb:2c:70:65:
24:3c:02:14:12:1e:82:22:50:ee:b3:26:02:11:a7:cc:08:69:
02:6c:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:39 2026 by rpki-client