Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
File: 4a799a36-6e8c-4ca7-be23-5388518d8f95.roa (raw, json)
Hash identifier: r6P92P2MHfx1r0o+DV69hOJPzejko2Ekhq/ZfXq0yKQ=
Subject key identifier: 5F:AC:96:93:8D:B1:75:3C:A4:B1:C8:59:4E:D8:87:B3:54:74:37:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25ACB33226A73DE624E928544B99CE13FF66B7EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
Signing time: Sun 04 Oct 2026 00:30:38 +0000
ROA not before: Sun 04 Oct 2026 00:30:38 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ac:b3:32:26:a7:3d:e6:24:e9:28:54:4b:99:ce:13:ff:66:b7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:38 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=7069f5d5935d17c68ee39e953bc6fd002b5c9e29d1b19ac5d6509f7688284d75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:aa:8d:26:21:de:5b:9e:db:fa:13:6e:71:
6a:1d:2b:7e:0d:1c:9a:4b:1e:69:39:57:d2:79:4e:
f3:ea:44:5d:08:44:a1:db:97:61:0d:d8:73:60:31:
3a:9c:b2:8b:3a:4b:54:d3:fb:95:6c:3b:5b:2b:7e:
c9:3b:89:3c:88:5b:4a:91:ff:9a:9f:f4:bd:df:67:
0b:eb:6e:3f:6c:71:ac:cc:2c:70:6d:cb:b5:06:14:
7a:57:d6:77:2d:c8:91:bf:67:08:eb:66:49:63:60:
95:bc:41:2d:c4:b8:70:88:6a:2a:d7:c6:6a:f4:1c:
f7:6e:fe:b3:7e:c0:12:28:e5:e9:09:63:b9:8f:b4:
62:0e:5d:29:33:ce:b3:c9:ef:49:0f:b4:4e:01:65:
e8:e7:ba:cd:70:62:a2:db:4f:77:d2:22:69:63:6a:
4b:28:cc:dd:ff:50:9e:45:42:7c:c6:07:4a:90:f1:
82:72:d3:c6:34:77:08:64:64:0b:88:ca:42:a1:36:
8b:ee:42:d7:c5:7c:00:1a:ec:12:a3:94:f7:57:cf:
3a:be:ed:e2:88:68:31:6e:b1:34:34:f0:8f:be:9d:
ab:d7:e6:b8:0f:c5:2e:f3:89:90:0b:ff:a5:b8:41:
c9:3c:e5:d1:b3:2c:c8:e8:e2:09:1a:41:bc:68:21:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:96:93:8D:B1:75:3C:A4:B1:C8:59:4E:D8:87:B3:54:74:37:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f::/36
Signature Algorithm: sha256WithRSAEncryption
21:bb:5f:67:fc:8d:0f:6a:2c:fb:c7:9d:da:63:98:e2:62:fd:
d4:65:5e:97:6a:3c:79:a9:2e:af:35:33:60:2e:f1:5b:06:d4:
7b:34:24:86:1d:1e:07:44:fb:6d:f8:ad:3d:76:56:80:dc:7e:
16:69:6d:d5:2d:fc:fb:3e:e0:fb:3f:d9:ed:e9:64:4f:3e:d9:
81:8d:c5:88:c6:98:a8:f2:98:d1:95:68:1b:2d:6d:59:4c:15:
42:7c:25:3f:e0:bf:53:4a:40:85:a4:e7:11:10:0c:9e:49:6f:
fc:ae:4f:ed:5c:37:58:6d:6d:ba:83:da:0f:a2:a2:c1:5b:38:
90:48:7c:d4:ba:59:e3:92:57:47:17:b4:ab:10:4f:0d:14:34:
02:e0:37:1d:dd:30:59:1e:10:d4:c7:65:b2:f9:cc:31:07:49:
ad:ec:71:30:96:77:1b:c8:a4:c4:15:bd:b2:fb:3b:77:42:85:
32:3a:08:f0:1c:d3:61:8e:5e:95:0d:15:bd:99:76:e3:25:f9:
64:05:68:86:10:1b:6c:54:5d:1c:d7:60:c6:d8:33:ec:2f:52:
3f:9d:6a:57:ec:3a:06:9c:96:8a:ad:26:4e:c9:43:dd:ee:c5:
64:73:9c:d5:da:6b:ee:19:59:bf:8f:1f:7d:ef:5a:25:b8:31:
5a:73:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:47:48 2026 by rpki-client