Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa
File: 4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa (raw, json)
Hash identifier: 6SLlBo4ZUIH0Ni9v7FANhfmDz9pAbrCy7k9Aa/0dlyc=
Subject key identifier: E0:D4:72:10:1D:AC:36:6E:92:D5:D7:01:1A:8D:F2:EC:BD:2C:2B:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 170A90B848E5B9447BCCDA1C409ED4EE793487B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa
Signing time: Thu 22 Oct 2026 03:50:08 +0000
ROA not before: Thu 22 Oct 2026 03:50:08 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0a:90:b8:48:e5:b9:44:7b:cc:da:1c:40:9e:d4:ee:79:34:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:08 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=5deaf723a46394ba375317dde9fe04406b070098f486f9c72e1273a34449122b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:f3:26:10:ff:ec:10:49:e9:31:a8:cf:2b:
b1:be:57:30:1a:d9:a5:52:11:fc:04:d3:88:cf:48:
03:3c:d9:92:a6:f8:d9:c6:56:63:e9:bd:42:38:ef:
0b:22:fd:8e:b6:5c:bb:85:bc:0b:6d:73:eb:e1:b3:
c0:e2:3a:0e:5f:30:e2:3b:8f:fd:21:f3:44:0e:f2:
a7:3f:84:ba:49:bf:62:4b:d8:b5:72:e3:9a:a9:45:
79:d8:5b:21:55:24:e5:3e:eb:be:59:25:62:f8:a4:
ff:c6:d1:a9:ad:f2:f4:23:5a:3d:b3:c2:b1:45:37:
30:e8:b3:9d:63:ce:32:09:16:15:2b:4e:69:2d:b7:
d2:11:a9:b3:81:21:21:ff:bf:14:79:a1:92:59:51:
96:03:a3:c3:03:60:cd:3c:ff:6b:70:46:c1:f7:b1:
24:d6:0f:1e:08:d1:a3:26:e0:e1:cc:d0:36:98:9d:
ed:a0:c2:da:1a:ab:b5:34:88:ac:27:27:c2:0a:bc:
1f:a7:f3:e8:0e:9a:63:0b:c8:72:21:6c:e1:da:c5:
08:c7:cc:d9:f4:96:9a:e4:ca:32:60:ed:e1:01:c0:
95:e9:89:5a:11:c6:2f:3f:04:f1:a8:a4:46:6a:eb:
2b:67:cc:01:3f:e1:c2:45:aa:95:5c:08:d2:fb:e4:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D4:72:10:1D:AC:36:6E:92:D5:D7:01:1A:8D:F2:EC:BD:2C:2B:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:9000::/48
Signature Algorithm: sha256WithRSAEncryption
84:51:45:9c:9d:3e:c9:ce:f5:91:b6:e3:7c:e5:bd:8b:81:0a:
d1:49:8a:5f:d3:7a:b1:47:16:96:90:29:fe:63:47:e5:fb:ac:
b4:79:1a:35:c3:14:f1:47:72:5a:16:65:2e:ca:8e:8d:fd:ed:
19:d7:2b:28:82:b8:01:2a:9d:31:9f:c0:08:f6:ea:f7:7d:fc:
91:cc:0a:5d:b0:51:f4:ef:e8:18:51:28:0e:3b:30:cc:17:98:
51:4b:32:21:90:9c:14:33:63:aa:fd:83:09:4f:af:1f:50:f3:
4f:cb:81:a8:fd:4b:3e:8b:ac:54:57:93:6d:37:0a:8f:1c:79:
7e:22:9a:51:fd:74:cf:0c:a3:f3:29:e1:c6:54:8c:23:e8:c5:
86:cd:c1:12:f0:25:20:c6:3a:00:73:ab:2c:b3:ea:e0:62:78:
aa:c9:fa:8b:26:99:03:57:e7:26:97:c7:86:1c:fb:6c:2b:71:
65:9b:2e:01:cf:17:59:41:70:e6:6c:1f:e5:26:35:b4:a2:e1:
10:33:6a:60:4b:5e:42:74:2c:c7:45:8c:7a:2d:92:c3:b9:4f:
ff:55:12:67:6d:ff:dc:85:46:57:bb:49:22:00:ff:b0:69:b2:
37:2f:3a:c7:3b:eb:d4:09:8d:9a:b7:50:ed:ed:3e:3b:be:5e:
39:e3:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:36:01 2026 by rpki-client