Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa
File: 486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa (raw, json)
Hash identifier: GfdVZSaSvfsKQrROK4DVxcB3JOrPjInFlXMMAmtk+ts=
Subject key identifier: 27:C3:57:FB:0A:26:75:2B:69:03:DC:2E:87:C7:DB:1E:7A:07:9B:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 743451EB736050DCE0422C05E23E49BD7057E925
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa
Signing time: Sun 11 Oct 2026 15:20:10 +0000
ROA not before: Sun 11 Oct 2026 15:20:10 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:34:51:eb:73:60:50:dc:e0:42:2c:05:e2:3e:49:bd:70:57:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:10 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=1a018388349c5b5f9a680c3718a81af188f93d6e1f6462c18742073637eb8c1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:4c:c3:11:2e:82:f8:64:68:9a:79:af:55:
ea:5d:d9:c6:b2:fe:68:ba:52:75:94:cb:79:9d:0a:
d4:48:74:ae:85:38:21:84:da:2f:8b:4f:fb:5d:7d:
8b:39:d1:b9:c5:64:47:92:4d:84:73:52:9d:50:b2:
92:f9:d0:59:67:2b:8f:5c:07:ca:75:a6:f7:ef:a7:
01:97:5d:37:0c:05:28:ff:2d:68:e8:67:77:88:87:
aa:0b:27:90:ff:b5:6f:b2:14:d0:d2:18:69:32:a4:
37:cc:a1:3b:23:d8:62:b2:0c:02:cf:95:ef:71:d0:
ae:7d:e7:e0:b9:6d:79:a8:07:b8:8d:e2:e9:1a:bd:
4e:aa:96:4c:1c:d9:2b:41:02:54:07:b5:ff:3c:7d:
ac:3f:0a:6b:9f:26:34:fb:23:95:8a:c2:57:f0:e2:
bd:4a:2f:5f:e7:a1:59:67:fb:a6:20:66:34:e1:19:
59:2a:8c:ae:a1:71:93:08:8b:4b:d6:5a:db:29:18:
3b:04:d6:fc:b5:1e:51:96:26:78:3f:41:14:9e:67:
fe:fa:80:51:5c:48:64:f8:e6:6e:36:90:8e:0b:05:
ab:a8:4f:42:bb:57:1e:3a:a3:7a:a3:2c:3b:ad:eb:
30:8f:4f:cd:3b:7a:60:07:12:23:5d:0b:9e:5d:79:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:57:FB:0A:26:75:2B:69:03:DC:2E:87:C7:DB:1E:7A:07:9B:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:6080::/46
Signature Algorithm: sha256WithRSAEncryption
ad:c1:b8:96:d5:2c:46:d5:e3:aa:b3:14:ee:5b:ae:49:8b:29:
e8:6e:08:a5:b1:72:87:c9:77:f2:04:ce:e5:f6:64:de:cd:e6:
aa:5b:43:ba:83:3c:60:61:f2:f2:e6:04:2e:50:76:7e:f8:60:
43:ad:74:c1:ce:30:b0:b4:d4:fa:fc:eb:16:76:8c:00:7d:22:
46:b3:73:07:73:c4:6a:26:0f:a5:5a:34:d2:28:d6:b0:25:f9:
ec:bd:f9:90:36:21:83:78:b3:55:4e:c0:8c:67:b4:0f:2e:7d:
92:94:29:85:fa:f0:e5:a4:3c:de:15:38:98:49:92:d0:9a:d1:
0f:be:4c:1f:fb:04:bf:f5:ca:ac:44:f5:6c:a4:77:51:31:21:
13:fd:2a:f8:da:65:e5:ea:c3:75:3a:3a:d8:4a:ca:42:b1:2c:
a3:8d:fd:e2:14:db:36:81:eb:f6:32:68:44:5b:0e:f1:92:1a:
fa:3d:5c:b3:13:46:13:d0:23:ec:57:31:58:a9:77:4b:23:31:
0d:07:fa:65:7b:2f:9e:1d:f3:29:c5:80:c5:06:7a:93:74:2e:
fd:ea:3e:d6:7f:d7:08:b0:09:5a:53:a3:ea:71:1a:70:16:fb:
1d:d2:ec:65:11:8c:d2:ac:28:e4:92:dd:fc:38:04:b6:a9:fe:
19:8b:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:44 2026 by rpki-client