Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
File: 4aa6172c-f263-4645-8d7a-40a15aee233f.roa (raw, json)
Hash identifier: ZFjFuNzUsNptVgH9FGBK5tTLCy8AGi+e2KF8BPWM0VU=
Subject key identifier: 2B:FD:40:87:03:C1:6F:9A:C8:E8:D7:7F:81:19:37:EF:6C:50:D5:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6100EDFDA65E8307403DC634A245D14A6EB2DD08
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
Signing time: Mon 26 Oct 2026 04:50:37 +0000
ROA not before: Mon 26 Oct 2026 04:50:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:00:ed:fd:a6:5e:83:07:40:3d:c6:34:a2:45:d1:4a:6e:b2:dd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=91c50eb1f6b657530a266e3801b648d2b88ac3c3c9fd74175f92f3fc4cf2fd92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:2b:98:00:1d:7e:ec:6d:ba:fa:c5:fe:da:
97:44:9e:2d:2c:c0:da:0e:ab:1e:95:43:33:06:05:
30:3e:f0:c5:5c:21:95:98:22:d2:4a:10:4f:39:5d:
b3:03:4e:97:71:7f:a1:66:d8:5d:46:5c:6c:e8:a4:
6b:15:6a:9d:7e:65:23:31:bf:c5:a8:ab:79:43:df:
4f:6b:a6:37:bb:2a:ac:2e:ae:40:4c:67:49:4e:cb:
7f:8e:90:93:c1:3d:c6:96:e3:0c:67:70:89:19:94:
0b:ed:2e:8a:42:f5:8d:71:f9:20:ce:85:2f:68:ad:
e3:fe:45:5f:dc:8e:08:94:61:34:7c:d1:63:04:98:
4f:b5:09:0f:36:e8:6f:49:e8:72:82:2c:da:36:a4:
6b:66:0d:75:b4:04:2a:66:4a:03:f2:0e:a5:e5:7f:
e2:22:a6:86:bf:e1:d8:4f:db:76:69:57:80:de:d5:
36:39:cd:26:77:3c:26:e6:70:c7:39:ab:0d:8d:4a:
8d:d6:9f:2b:b1:28:c6:a6:db:b2:d2:ea:9c:04:f0:
09:38:e4:66:78:de:57:7e:5b:53:e0:43:95:fe:39:
93:cb:18:41:8f:b6:62:26:3d:af:06:73:8d:2c:b5:
09:50:f4:b4:21:8c:a3:76:57:ae:20:61:4d:63:1d:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:40:87:03:C1:6F:9A:C8:E8:D7:7F:81:19:37:EF:6C:50:D5:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5b:55:a7:1e:3e:7d:05:20:e3:8d:49:59:4a:75:8e:04:eb:0e:
fe:a9:72:38:ee:22:07:56:4f:bd:0f:12:76:f4:54:46:c7:28:
14:7c:b6:dc:e3:81:ec:02:a4:83:13:ce:c6:2f:c2:37:5c:d9:
5f:f0:45:65:5d:eb:0b:b9:dc:b8:12:30:44:3f:5c:80:5e:9e:
84:27:e3:92:7d:31:f3:bb:d8:1a:9e:0e:71:18:69:4e:83:dc:
66:09:32:c4:82:47:ea:e8:a2:cd:7d:9c:d7:b3:32:a1:99:05:
5e:5b:d5:6e:30:73:f2:e1:dd:21:80:5f:b4:32:7a:c8:5d:67:
f5:8b:16:62:99:ea:da:aa:d9:51:37:57:81:ac:4a:21:77:80:
ec:d7:d7:50:0a:f0:ba:9d:89:1a:03:27:a3:84:c8:64:a9:0b:
2b:03:45:8d:9e:6c:05:2c:9e:ac:a1:b0:05:40:7f:4c:b5:b8:
d4:8f:d3:7a:ee:29:b7:2a:9e:09:fc:6d:8f:71:9c:e9:8d:3f:
d6:65:f0:4d:0a:4d:41:00:48:60:b5:c4:3c:64:bc:c8:a7:b9:
73:a7:24:41:48:4a:f5:62:63:02:46:b7:0b:dd:eb:4a:4f:5e:
70:10:06:b1:5c:a4:5e:c3:47:cc:0f:70:7a:09:bf:4a:60:24:
39:5a:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:38:14 2026 by rpki-client