Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa
File: 4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa (raw, json)
Hash identifier: knW7osPGeWIlkjdOn3efohG+s/8DHb5EgxVTYqxc91U=
Subject key identifier: 43:14:8F:7A:26:7B:B3:E2:48:81:9C:0C:03:B2:C1:1D:7A:45:32:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79F90AA1D64D45E6985239171EE2D588A2439B68
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa
Signing time: Fri 07 Aug 2026 05:30:28 +0000
ROA not before: Fri 07 Aug 2026 05:30:28 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f9:0a:a1:d6:4d:45:e6:98:52:39:17:1e:e2:d5:88:a2:43:9b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:28 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=38504cc1ce6cab0d59b0ad5ce5b67933b98f75f3ce90cb5abf9dcec5debd9ef5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:56:4f:64:e3:fd:72:ba:eb:e0:51:10:73:
32:ba:4f:be:d7:f7:2c:1d:59:cf:cf:e3:6f:3f:c2:
a5:ea:b6:29:c0:96:d7:48:6f:3e:71:6c:66:6d:77:
ed:29:fa:9b:f8:fe:a4:f3:d2:16:54:fd:9a:c3:1b:
2b:51:2c:62:e0:42:d6:8e:06:35:66:05:78:5f:94:
7c:ee:42:25:7e:6c:d6:ee:36:90:ef:7a:04:a7:9c:
e2:d9:57:7d:99:d9:4f:5f:89:b6:b8:bd:e0:2f:79:
4a:00:41:f4:d4:b7:6c:86:e8:5f:cf:ae:39:b3:75:
cd:2d:f5:9b:89:d4:f5:a5:62:1f:53:e8:8b:79:1e:
cf:f1:49:0d:86:55:04:64:a0:78:37:ef:71:e8:ba:
67:d6:75:eb:ee:2b:c6:00:ea:3a:a8:ab:68:a2:2e:
85:d6:d4:18:38:6e:11:ad:96:d3:bf:62:f6:71:3a:
dc:fd:74:a8:b4:37:e3:a0:d8:c4:2c:26:c2:a7:df:
75:01:6e:75:cd:9e:10:d3:f9:1e:c0:f4:be:ba:f4:
dc:4b:ef:89:8a:c6:26:a7:cb:2c:d0:f0:06:34:02:
bd:30:16:58:4a:dd:2f:e9:c7:b2:cf:d6:e4:4a:32:
9e:07:e9:67:1c:ee:33:73:94:31:36:ce:bc:ec:60:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:8F:7A:26:7B:B3:E2:48:81:9C:0C:03:B2:C1:1D:7A:45:32:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:c000::/40
Signature Algorithm: sha256WithRSAEncryption
08:34:fc:f6:14:89:37:9d:e7:53:b8:35:29:5b:f6:f5:55:64:
79:ac:da:06:87:af:cc:a7:ac:ff:08:e0:55:67:e5:e4:5a:36:
09:f0:56:46:65:1c:24:9d:67:03:bb:87:42:33:1f:01:d1:10:
fa:29:a1:74:49:a5:24:84:d4:4b:ab:e5:a7:27:9c:d4:52:4c:
a8:64:a1:49:74:b3:63:77:49:14:51:f8:d5:df:9a:08:0c:bc:
aa:07:b7:c8:5f:e8:37:19:fd:d2:f1:a5:b1:e9:15:d0:11:db:
df:ef:5e:90:6b:4c:51:74:a6:41:34:1a:09:79:dd:db:15:3d:
74:88:db:09:44:dc:a3:c6:8e:c3:71:9f:70:3e:76:9b:b5:4c:
0d:cc:9a:1b:e6:51:ae:27:5b:42:a7:65:f8:7c:4f:e6:53:19:
61:9a:eb:d8:f1:94:ef:55:88:17:a7:bd:eb:0f:5f:79:8b:5f:
80:d8:cc:49:19:97:af:c4:f2:90:7b:c7:8c:c0:59:84:e6:f8:
c4:48:1d:d9:6c:8b:d0:66:16:2d:99:59:52:9c:59:3b:f9:81:
fc:39:ec:c2:e6:2f:7f:6c:f6:29:a0:36:d6:c5:7a:86:01:aa:
d3:d6:2e:b5:bd:d0:4b:70:dd:ff:54:e3:7d:df:c6:e4:12:a0:
ca:30:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:55 2026 by rpki-client