Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
File: 4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa (raw, json)
Hash identifier: vZLmVeCL+fk5pWWGu69DMJJXDkcGdyDanQr9kR3ioRc=
Subject key identifier: AC:F1:5B:EF:5D:3F:32:24:A3:14:B9:5A:3B:83:38:79:D4:BB:95:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 488EC772E50161E470051F6A0A68E2894CA3BC2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
Signing time: Mon 26 Oct 2026 05:02:51 +0000
ROA not before: Mon 26 Oct 2026 05:02:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8e:c7:72:e5:01:61:e4:70:05:1f:6a:0a:68:e2:89:4c:a3:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=943d4bf212a7a4d0b54b25c674c3b50dbd239b5f4537fd04679c33aaf88c508a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:e1:37:87:22:ef:b7:33:19:bf:42:0a:a7:
85:74:4f:53:73:d6:c8:3e:b5:70:0c:23:28:e4:47:
57:4f:8e:54:27:23:7c:8a:52:4b:4d:33:41:1b:97:
8c:4a:d0:0c:93:30:c9:1d:6b:39:bb:b7:9d:0a:8a:
b5:ed:79:40:c0:72:25:ad:20:d3:98:a6:ea:4f:16:
74:25:61:db:6c:28:c7:9f:cd:61:0f:b3:5e:a5:6b:
77:50:3d:b9:9c:15:b2:d7:13:3e:5c:10:06:ce:06:
7d:95:6d:bf:0e:e2:03:ee:fb:71:09:03:bd:be:9a:
de:b8:41:f5:9a:67:6b:d1:79:59:5a:0f:66:c3:63:
0f:82:7c:de:04:f0:40:79:87:5d:8d:61:b9:51:74:
14:94:82:4d:2f:7e:46:dc:f2:88:31:3f:76:a8:2c:
f3:63:6f:55:9d:a1:4b:51:1f:c3:93:d3:5a:6b:0c:
8c:be:dc:8b:ed:ba:71:d8:de:6f:c4:a4:93:34:eb:
3d:69:cc:93:4f:b7:4e:a3:3e:8c:ac:37:34:ee:7e:
e4:c9:b0:96:c4:e1:6d:ba:0d:bc:91:c1:85:d9:10:
e4:67:de:87:67:03:77:40:49:34:de:50:80:ce:21:
81:3c:1f:3d:61:ac:2a:4e:6e:05:13:cf:9c:00:4c:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:5B:EF:5D:3F:32:24:A3:14:B9:5A:3B:83:38:79:D4:BB:95:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:4000::/40
Signature Algorithm: sha256WithRSAEncryption
73:23:90:89:ef:dc:87:1e:d1:2f:17:bc:43:52:99:bf:85:de:
1b:21:2b:a7:a2:97:99:be:6d:a1:7d:b4:b5:37:10:56:8d:28:
d7:b4:6f:d5:1c:3b:9e:ba:77:99:dd:ce:77:db:0e:31:54:e5:
77:c7:27:a5:d1:ed:a0:e5:3f:67:bb:a9:2f:41:ab:e2:0e:4c:
c6:0e:ba:4c:3d:02:26:a7:5f:5a:16:bd:05:09:e0:8e:a5:05:
53:60:38:a4:ed:ad:18:9f:76:a7:c7:7a:e8:f5:81:38:de:13:
94:66:6c:3b:e8:2f:bd:1c:2d:81:87:5d:62:84:08:af:7b:5a:
d4:d9:5f:c2:a3:4a:bc:29:b5:d1:ec:1a:57:b6:45:46:fa:2a:
87:89:ba:73:ac:10:49:1a:10:8a:d4:59:07:e5:da:5e:88:43:
e1:3c:a2:3b:ec:da:25:b3:33:94:3c:3f:9b:a9:ce:2b:0b:e9:
d4:13:f5:1c:3e:b8:e7:58:67:b7:a4:a1:68:a1:c0:4b:18:27:
b3:b1:22:1b:a6:72:c8:26:94:01:62:2b:96:b3:43:aa:31:83:
6d:17:24:7b:c2:d4:e6:32:fb:c5:61:db:e9:a4:06:c1:5a:ce:
57:86:f0:ff:ba:c7:d5:48:ff:db:ad:73:10:ca:ed:91:20:3e:
f5:26:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:42:07 2026 by rpki-client