Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
File: 4aa20760-fb28-4393-bec8-9ffb467f03e4.roa (raw, json)
Hash identifier: D21DRCs3xQy3sIq5aA3S0v1RaNAks0m3w40byT8GPQQ=
Subject key identifier: 33:CE:0A:A3:30:84:15:71:A3:92:DE:99:3C:C7:E0:AC:00:BA:16:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D4E7778F8AA9035AFA0FE08B217C6AFFC729D65
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
Signing time: Mon 26 Oct 2026 04:50:51 +0000
ROA not before: Mon 26 Oct 2026 04:50:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4e:77:78:f8:aa:90:35:af:a0:fe:08:b2:17:c6:af:fc:72:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1af944819442b566791e23c7a2cc5611d1a510f47a6f788fdf3f4db93481279e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:a2:ba:78:20:1a:a7:65:32:61:a9:1a:15:
ea:69:fa:99:43:3e:96:5a:73:56:be:e4:72:cb:3e:
f7:e8:5c:b1:ff:ef:6b:ae:04:f1:71:ec:c9:cf:cd:
08:ed:8d:7b:0b:8b:f0:5f:99:66:18:6d:15:67:5c:
79:64:35:c0:44:17:e4:37:76:e3:87:27:58:5a:74:
a3:aa:44:08:e6:09:67:e3:d2:92:37:1a:3b:87:5b:
b3:9d:24:9a:23:67:ca:53:7b:10:a6:36:ef:4e:9b:
48:99:dc:83:1e:27:30:c8:18:88:7a:7e:72:30:ed:
7c:6c:39:95:26:72:3a:3b:4b:b1:ae:06:67:85:25:
73:2f:e1:75:ee:01:db:9b:1f:e6:4b:b6:e5:da:3b:
95:9f:f3:3a:05:a8:0c:95:5a:a9:72:18:f5:68:76:
8e:bf:74:0b:2f:62:d2:ac:58:e2:b4:69:1a:68:83:
0a:57:d1:6d:31:89:ba:1f:0f:6c:48:62:6b:05:25:
50:02:9e:04:ab:c2:dd:07:0e:0a:e6:9b:40:fd:33:
1d:61:48:40:bf:4e:64:77:d9:93:c1:a2:fb:f5:a9:
67:1d:bc:fd:e0:ca:d1:c3:5a:83:59:00:f9:11:ff:
2f:b1:0b:76:15:6f:e4:b5:53:6b:6c:d1:e2:2b:9e:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:0A:A3:30:84:15:71:A3:92:DE:99:3C:C7:E0:AC:00:BA:16:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
48:81:d5:4b:84:26:68:1f:c0:99:ac:08:3f:fd:bd:e4:4a:ee:
57:1c:27:bd:58:74:1f:44:42:4a:ba:e4:4d:03:12:e0:65:b9:
d0:1c:28:13:81:d1:b8:8d:ba:ce:be:17:b9:4c:d3:2c:65:4a:
48:c2:99:0b:33:f4:94:55:53:fa:0f:71:f7:fc:74:ee:eb:47:
c5:73:45:66:8a:72:10:a4:45:13:a7:ff:20:33:48:72:cf:22:
76:91:7f:ef:23:03:e3:23:32:d5:b9:08:1f:42:ce:b0:97:62:
ba:fd:9e:45:fe:96:d3:47:ca:91:45:ad:7e:c6:ad:81:7c:37:
a1:d1:bc:db:7f:9c:88:f5:bc:ff:34:09:7a:43:4c:e3:9d:d2:
54:be:c1:7f:24:e2:58:4a:fc:89:fc:1a:68:64:7d:ae:56:9d:
7c:b8:28:da:9f:11:53:bc:86:50:a7:03:f7:09:e9:d9:d1:a7:
37:c8:c1:f3:65:e8:b6:e9:e2:d3:ac:e0:8c:7b:80:c5:28:b4:
57:8b:6b:6f:32:95:2b:6f:79:e2:3c:bf:a9:73:f8:97:ec:97:
0e:76:d0:d4:7b:e6:6d:d6:af:35:7d:25:42:0c:c6:45:7d:97:
77:1d:e7:44:a2:55:dc:e3:58:51:ba:fe:c5:9e:0e:e2:bd:39:
b0:de:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:16 2026 by rpki-client