Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
File: 4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa (raw, json)
Hash identifier: gg0O7GyyAd3Hepmstzd0ma2OfQkyeQO/y+bL5ucOmrg=
Subject key identifier: F2:54:46:10:D5:72:19:6F:5E:DE:E5:0C:BC:17:1C:CE:83:CB:9A:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E0C5AAB8B73F50DF603A89B58713AF44D42A2D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
Signing time: Sun 04 Oct 2026 00:30:14 +0000
ROA not before: Sun 04 Oct 2026 00:30:14 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0c:5a:ab:8b:73:f5:0d:f6:03:a8:9b:58:71:3a:f4:4d:42:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:14 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=7fd189b06bf21771131a74fc2d2bafc600acb6399094dc415ecc2101ef9e292b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:5c:6c:0b:2b:8c:74:6d:66:53:58:79:9c:
00:b2:bf:97:b6:b3:ac:ea:bc:cd:76:21:6a:8d:dc:
f7:e5:9a:e0:4d:0a:5d:e4:88:3c:04:d3:bf:52:07:
22:46:82:56:34:ab:e6:b6:fc:2b:02:26:9a:8e:99:
06:1d:9d:19:a4:be:5a:42:e6:d8:b5:b4:4e:dd:0f:
2a:71:27:9e:a5:75:ae:2d:b7:9e:4b:c7:9a:27:d1:
42:af:30:32:64:fd:ef:d7:c0:dd:39:1e:a4:37:4e:
9e:eb:ce:e2:95:46:7f:bf:ef:33:48:a9:5a:fb:03:
a2:e3:24:3d:9a:8f:d2:84:55:7b:5a:c5:b4:65:9f:
09:32:16:76:f1:f0:92:75:c5:85:29:1a:ed:74:7d:
bf:96:6e:d6:fe:96:8c:4b:b4:21:a1:bb:a0:29:68:
03:25:ce:d2:f3:26:31:e3:7d:2b:8e:4f:38:15:b0:
76:8a:79:23:be:fc:fb:67:2c:b4:49:c9:60:85:56:
9c:a0:95:5b:d1:18:a5:3b:e6:87:e2:94:82:31:7b:
b9:e3:d2:a8:8a:8c:54:a5:19:cb:07:9c:75:69:c9:
0b:3d:d8:df:86:a8:3f:b8:12:ee:70:ad:82:3f:b0:
eb:b0:d8:fd:87:d8:16:e0:ad:29:aa:61:e4:41:1d:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:46:10:D5:72:19:6F:5E:DE:E5:0C:BC:17:1C:CE:83:CB:9A:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
32:3e:21:d8:0c:5b:ca:c9:4e:94:7b:42:35:0a:7a:24:d3:aa:
63:c8:ec:16:b7:51:e7:4d:53:56:dc:b7:b3:41:c4:71:a4:27:
b2:32:0f:78:8a:5b:3f:7e:a2:a6:47:49:be:6a:4f:53:4f:9d:
bc:6a:43:0b:e9:fa:1e:31:83:18:84:2a:2f:89:54:7a:b2:9d:
e2:e6:f0:70:c6:37:8b:8b:d9:3e:fd:dc:f4:92:ce:62:cb:95:
f3:4d:55:d7:b8:12:f9:5a:fb:ce:8b:16:8a:19:71:d6:11:93:
ac:b9:bc:40:00:98:6a:2b:99:fd:18:c2:89:a1:e8:72:f7:b7:
3b:74:52:3b:8e:95:7a:38:84:d3:0a:06:8b:92:e5:06:91:19:
53:4d:33:a6:a3:7d:62:2f:a4:9d:b6:3c:b5:8c:c9:1e:41:c8:
91:7f:2e:c1:97:7f:56:fa:7d:5d:f7:62:a2:b3:b9:d7:9c:fb:
1a:f2:28:21:ff:dd:96:65:32:33:fa:55:ac:3b:74:67:24:a7:
d7:76:82:e5:bf:1d:9f:65:18:30:a8:cf:59:30:03:05:71:a9:
eb:1c:a2:4e:59:a7:33:d9:3c:03:61:f4:b4:f1:c3:d9:66:98:
2f:10:7e:6b:4d:c0:ad:03:ff:d1:75:9c:5a:6f:c3:cb:11:66:
f1:09:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:04 2026 by rpki-client