Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
File: 4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa (raw, json)
Hash identifier: LkJJRepXJsq3BBfLdMN/vWn/iA/W/GXVQ5kLQYR92LA=
Subject key identifier: F1:C5:9C:BF:F5:0B:B9:70:09:82:20:63:89:4D:FD:2B:6B:63:EB:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A0CF36EE9AAF1635546A198EF692E9861D5014D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
Signing time: Fri 07 Aug 2026 04:50:44 +0000
ROA not before: Fri 07 Aug 2026 04:50:44 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0c:f3:6e:e9:aa:f1:63:55:46:a1:98:ef:69:2e:98:61:d5:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:44 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9e72cf34b69c95058c85ffe5aa9a0a8db3be1588dd8271aa54d36b45f5cd0cb0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:72:ba:67:bc:58:7e:d8:8d:3c:d1:4e:ca:
d7:20:b6:7f:c2:4f:56:e7:9f:8a:80:5e:56:b7:66:
5a:27:a9:2e:f6:3c:f3:1a:01:8c:1b:bb:5d:d9:f6:
9f:9c:58:29:96:f7:2e:ed:99:27:9f:93:24:b9:47:
bb:31:34:fd:a9:da:e1:01:95:64:a2:c0:9d:55:70:
fa:cc:78:37:8a:da:be:50:df:2a:15:c4:cb:ba:2f:
ea:35:58:02:f7:90:5b:b3:9f:3a:38:f2:b0:4c:97:
37:b4:da:05:59:99:b6:21:75:2e:27:25:57:e2:63:
60:e5:70:cf:53:b3:56:44:97:61:82:75:2b:32:05:
17:44:19:e3:f0:69:64:d5:98:6f:b0:6e:23:c5:fc:
8f:05:af:9c:a9:c7:00:2f:64:95:4f:f6:39:bd:37:
95:d8:3b:d6:44:46:b4:0d:1a:8d:6f:96:9b:23:01:
77:73:13:f0:d5:cd:fd:6e:c4:ac:2a:56:aa:57:ac:
81:02:d1:6e:16:7a:f3:73:b3:34:6f:10:a4:78:fd:
2c:96:98:2d:4d:25:d7:0f:35:a1:c7:46:ac:d2:78:
34:b6:8a:1a:ca:3c:2c:0c:7d:3c:9c:1f:d5:d7:02:
e9:17:80:78:82:79:a8:81:58:03:dd:83:90:1e:5f:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:9C:BF:F5:0B:B9:70:09:82:20:63:89:4D:FD:2B:6B:63:EB:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:e000::/40
Signature Algorithm: sha256WithRSAEncryption
bf:a3:97:b7:00:dd:12:75:a3:19:bb:60:5f:4b:1b:64:08:f1:
64:72:25:e0:62:ee:7b:e6:33:f1:c3:93:5f:6c:1c:01:76:54:
e3:3e:17:17:15:9d:b8:a1:3d:44:58:de:2f:01:00:77:67:b2:
32:43:8f:63:cc:58:22:36:51:b0:60:2c:76:50:a2:bd:93:84:
ce:c1:31:26:0f:ba:af:82:e4:47:53:06:7b:a8:be:c1:40:90:
82:65:6e:7e:cb:9a:7e:8d:a6:fa:8a:5a:ba:c7:56:7b:d7:49:
1b:4a:04:95:f7:26:ca:21:23:78:fd:16:ed:34:8a:f5:93:6a:
57:bb:3c:8b:a9:af:5f:cc:60:78:a1:71:95:9b:75:0e:10:99:
72:b3:98:67:3b:57:6c:bd:a4:4d:9c:0a:01:02:af:82:66:f1:
8d:0b:a4:17:25:ee:03:2e:f1:58:db:14:b9:fb:d2:bc:6f:b7:
18:05:3d:9a:19:63:0e:e7:84:67:54:da:82:da:3a:95:82:45:
ff:75:ad:40:0c:0c:c2:4c:26:37:5f:0c:55:7d:49:3f:90:62:
7b:3d:ea:cc:25:b8:88:16:d0:8a:ff:da:7f:19:21:ca:61:7e:
9a:47:bd:47:db:d9:ab:45:85:50:ff:e7:af:b5:44:c2:a6:bf:
24:a5:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:11 2026 by rpki-client