Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa
File: 4c78114f-4347-44fe-aef1-32fc688c69b9.roa (raw, json)
Hash identifier: z22jUURsesUjlVSRyrGgdifXYHD7lOLglBwT8oByFQM=
Subject key identifier: F0:43:0E:DE:5B:70:1B:71:6C:78:D1:1A:8D:D2:6A:0B:7B:60:F6:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2558292339364938014889873D53A9799BE8A25D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa
Signing time: Mon 26 Oct 2026 05:10:08 +0000
ROA not before: Mon 26 Oct 2026 05:10:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:58:29:23:39:36:49:38:01:48:89:87:3d:53:a9:79:9b:e8:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=370eec6076a544992dcf2aa2578634290ddf40a05fac00a193110f7844195754, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:9f:4e:85:7f:74:5f:40:66:5a:90:71:9b:
0b:8c:4b:c8:83:b7:49:8e:de:3a:58:9c:dc:8e:2e:
9c:f1:ee:ff:32:d8:2c:13:00:bc:5c:ab:32:b7:0f:
1f:d7:fe:e3:bc:bd:31:53:97:f6:b7:1c:e0:f4:e8:
4b:5f:ab:37:eb:65:8c:49:7a:82:3d:a7:2d:df:5b:
8f:9b:4d:de:d6:9c:a1:12:95:22:be:02:c9:5a:82:
0f:71:24:cf:ba:70:03:19:7a:a2:59:6d:e0:60:bd:
40:45:43:d8:ef:c6:3c:26:93:c4:1c:28:7e:ca:5b:
83:d4:76:23:33:9a:cd:2d:2e:53:ea:b6:73:c3:42:
8b:d3:1a:32:1f:a4:a7:f5:aa:a9:86:1e:5b:e1:dc:
e5:ad:85:f1:23:af:18:a6:75:14:e3:59:b2:3c:72:
ea:08:de:a7:d3:d9:df:61:42:a2:81:c4:7c:55:1d:
05:6b:71:b9:95:46:b8:9c:e7:8b:d3:c4:31:bd:ef:
94:c0:2b:56:6f:a2:28:e6:80:31:07:74:12:e8:25:
61:c2:80:ee:b5:59:00:a1:9e:10:2d:14:0a:18:f1:
f4:a6:ff:fc:84:23:5a:a6:b6:80:86:44:45:45:b1:
0d:0a:e8:1c:93:94:83:70:db:d4:4f:c7:bf:4e:bb:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:0E:DE:5B:70:1B:71:6C:78:D1:1A:8D:D2:6A:0B:7B:60:F6:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8020::/48
Signature Algorithm: sha256WithRSAEncryption
62:cb:df:09:7b:fa:b3:f9:0e:12:bf:7c:c6:0f:d7:42:b3:07:
f6:7f:93:86:d8:71:f0:37:6c:cf:f3:0c:7a:57:31:07:b4:75:
c1:b5:a7:29:54:7b:77:69:7c:91:56:20:fc:bb:c6:87:a6:ff:
b2:10:29:7c:60:df:ef:b2:ac:91:4a:1b:55:b4:a6:60:7d:62:
ae:54:13:d5:a4:2d:2e:01:e6:36:e0:b5:27:86:13:0c:c0:c7:
a9:90:8f:ef:f3:79:a6:da:bd:9e:b8:6b:bd:63:9a:6a:22:10:
72:c9:12:67:6a:c3:97:7a:b6:57:ef:51:02:31:c7:30:7e:25:
b6:db:82:5e:31:1c:a1:4c:d6:7a:ef:76:3d:40:ca:c6:2c:24:
6a:b2:ca:7d:31:2f:39:34:1b:56:a6:57:2b:b6:5f:3e:77:ac:
72:f1:d7:0b:19:25:8c:0a:8c:6b:fa:3e:21:51:d7:98:0f:c1:
d7:38:8d:ac:2a:47:6c:3a:cc:42:f1:13:46:f5:20:e8:70:d8:
1a:d3:00:87:52:35:da:90:ef:ac:e9:46:e8:59:ad:c5:59:62:
86:de:60:6b:99:8e:99:57:40:fe:8e:8c:84:d9:73:b9:91:5c:
0c:4d:a9:e7:dc:5f:1e:2b:64:91:d9:c3:bb:a6:e3:fa:79:25:
14:4c:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:58 2026 by rpki-client