Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
File: 4b43f183-cd0a-4862-a7f0-bf7122100edb.roa (raw, json)
Hash identifier: 3ZIGXAwocBzsKU7RDIyPzb4XPjRT51m9xLqisb+l+bg=
Subject key identifier: DA:0F:6F:F2:DB:51:81:E8:A1:FF:16:EE:E8:A6:A0:E9:7B:54:78:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B7E7B3309B596C3CF6A73DE9EC54C3A66500769
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
Signing time: Mon 26 Oct 2026 05:20:24 +0000
ROA not before: Mon 26 Oct 2026 05:20:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7e:7b:33:09:b5:96:c3:cf:6a:73:de:9e:c5:4c:3a:66:50:07:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c6920d244fe21eb4d434c08cbf07f077795f9eec2ca772dfc3a6fde95f0375c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:a6:16:71:42:fe:91:c4:c4:3d:0f:62:06:
a7:ef:ca:48:f5:18:78:b4:8c:f6:2a:16:4b:22:6d:
ad:33:3e:ff:f3:02:c2:01:71:ce:99:67:f2:a5:e9:
f1:be:ed:a2:33:35:6d:9d:a1:b9:3e:61:83:64:7b:
b9:4c:88:3e:22:f6:6e:42:84:1f:13:60:86:31:18:
b4:5f:ea:66:6b:ab:11:a9:a6:72:81:0e:e1:ca:c0:
d4:50:68:77:35:05:fd:ca:6f:c1:b4:c9:be:cc:72:
73:fb:6c:45:fd:8e:9c:80:99:18:cd:cd:05:13:b8:
53:96:d7:f1:f2:74:69:15:88:e6:9d:29:e3:0e:e9:
20:15:e3:da:bd:3f:e3:2f:0a:b4:71:7c:aa:97:14:
35:48:29:9c:09:1c:50:de:6e:e4:39:ee:8b:32:2b:
5a:2e:dc:fd:6d:74:96:6f:13:92:fe:bd:bf:3b:7e:
d2:72:b5:80:17:b1:1f:10:d3:3c:fe:03:a1:a4:c4:
e0:fc:a0:2d:d1:4c:ae:c5:7c:b4:61:a8:bf:f3:01:
4f:e8:36:4d:24:b2:94:a8:ac:22:d4:70:b6:a5:d5:
b9:20:8e:35:57:29:0d:ed:da:00:43:d8:fc:0b:1f:
79:12:75:74:ff:29:72:1a:81:83:29:22:4e:fd:f3:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0F:6F:F2:DB:51:81:E8:A1:FF:16:EE:E8:A6:A0:E9:7B:54:78:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:c00::/38
Signature Algorithm: sha256WithRSAEncryption
17:49:10:32:90:dd:2a:fd:87:a0:78:61:1d:ae:65:49:22:18:
94:e5:30:41:ad:db:cd:57:32:0c:13:7d:34:43:a1:f3:87:d0:
0f:c1:81:49:c3:17:40:4f:5d:36:56:4f:10:e2:d1:86:d0:8f:
d6:dd:93:07:c8:79:47:82:4d:cd:48:08:5b:e3:23:ba:ae:45:
cb:e2:84:70:04:a4:46:60:97:04:3d:cb:e7:d4:c0:73:fb:40:
60:9d:32:20:ff:6d:f8:56:bb:b1:ca:26:75:73:4f:fe:6d:08:
f6:98:82:4f:3a:ba:22:7d:6d:2f:68:3e:f3:1e:fe:e2:e0:ba:
f1:18:31:90:52:82:09:0c:31:bc:f8:cb:35:f4:1d:1b:d4:76:
e1:8e:a8:41:4b:5b:48:cb:e7:99:57:56:6b:29:0b:2d:1f:83:
cd:3f:a7:ee:2d:55:c5:72:ea:ab:6e:2a:17:82:59:7d:2c:f0:
f8:1c:14:d9:eb:37:76:05:03:fc:22:c5:a0:f9:ab:96:84:57:
95:a0:78:1f:16:80:7a:ad:de:d5:bd:9b:f5:da:db:e1:ac:2f:
6a:07:aa:9c:95:df:ae:2e:60:ae:be:da:c1:2d:a4:b4:55:24:
a8:91:62:73:75:de:df:08:72:e3:11:e3:2c:42:09:49:17:d7:
49:53:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:47 2026 by rpki-client