Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
File: 4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa (raw, json)
Hash identifier: 3KPT0nQq3zi/GOODM1NIBNVNNsW+WJve70CL4eYbv9k=
Subject key identifier: 68:F6:F3:B7:68:E2:23:48:95:C5:5E:F2:FA:62:7F:B6:9B:08:DB:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 721CFCD64F941C449B1DEDB5474F4D0FFE0EF2ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
Signing time: Mon 26 Oct 2026 04:40:24 +0000
ROA not before: Mon 26 Oct 2026 04:40:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1c:fc:d6:4f:94:1c:44:9b:1d:ed:b5:47:4f:4d:0f:fe:0e:f2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=645ec56a7512503879f716675095cc6eb69aa2cd6f451279fd33c7236482fc1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:bf:28:3b:c1:61:6e:da:02:9d:17:72:70:
ae:54:c0:cc:da:a5:5f:f6:68:e1:4f:43:f3:4a:e6:
cd:32:26:b1:9d:cd:44:72:6f:95:a0:dc:6a:f3:ae:
67:b1:20:bf:1d:46:68:15:c8:0a:2e:49:4b:6e:e4:
1e:e1:1b:b2:eb:9e:6d:d8:fd:89:ec:3c:94:7f:c4:
da:e1:72:7b:45:4e:d9:4f:75:3c:0d:dd:15:97:79:
ef:dd:75:5b:27:d9:8c:8c:67:94:e4:37:0c:5b:fc:
e4:30:ff:93:73:db:fe:67:f6:36:f5:1b:40:05:1e:
db:2f:eb:77:1a:ea:18:c0:3d:d4:e0:e2:58:15:56:
fe:ad:40:b3:70:d5:ee:1d:91:14:69:6d:0c:57:8e:
16:61:e6:59:84:08:f1:98:c7:61:71:cb:47:61:f3:
27:64:48:5e:98:f9:c1:be:26:f4:be:ef:34:13:1b:
b8:04:8a:4f:9d:ab:6b:da:f6:b8:05:98:f4:98:2b:
ea:de:cd:c5:38:46:37:d7:f5:b3:b7:b9:8e:0f:68:
f0:a3:2f:6a:93:33:5c:6f:77:1d:c8:44:31:8d:2f:
40:27:ee:5b:fe:f1:8f:97:f8:18:c8:9a:9e:b2:af:
03:c3:f0:49:82:37:cc:16:87:a6:2a:fb:4e:48:51:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:F3:B7:68:E2:23:48:95:C5:5E:F2:FA:62:7F:B6:9B:08:DB:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:e000::/40
Signature Algorithm: sha256WithRSAEncryption
27:a9:9e:6f:a7:75:54:35:39:72:c8:9d:b9:e8:df:43:8e:51:
9f:25:ba:86:91:96:af:53:3e:23:c1:f2:c8:84:f2:0c:03:f6:
c7:af:99:8c:7d:1c:49:f7:e6:a0:0b:29:b3:d2:b7:8b:fa:c4:
99:95:06:f4:89:02:4a:b9:f9:15:e3:15:24:c4:34:ee:c5:ca:
96:3d:fa:3b:8a:b3:c2:ad:2a:6c:63:11:48:f1:28:54:8a:45:
a3:2c:d7:66:da:af:cd:1f:05:be:c1:51:1f:ce:d9:8f:06:86:
a0:52:0e:f4:09:44:05:0f:6f:e7:37:62:6e:09:c2:a5:4a:4b:
8e:06:3c:1e:4c:23:e5:f1:bc:07:9a:60:dc:20:f5:2d:fd:39:
d7:72:7c:42:88:08:6e:0b:95:74:13:e9:0b:d5:48:b3:80:68:
e5:56:d4:6a:89:7e:8b:69:d6:e9:44:ba:0d:b5:25:0a:d3:39:
cf:67:22:97:c7:b7:e1:81:7d:26:70:d4:41:64:7b:8a:7e:35:
20:33:1e:25:86:82:1d:9f:b6:d3:98:c8:fe:37:76:44:66:d1:
d4:cd:6d:4b:9d:25:cc:75:5d:05:04:4c:ee:7f:f3:c9:16:30:
81:1c:dd:27:27:a4:f8:00:00:73:32:2b:9d:7e:12:68:9f:9e:
5b:44:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:24:07 2026 by rpki-client