Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
File: 4e84f0a8-9d20-4219-b641-9a6905a033d9.roa (raw, json)
Hash identifier: v2Sx/AUPL9195S2abEI+RqLgAR4zKLiYn0kDwG3d7MA=
Subject key identifier: B0:CC:E0:DE:F6:DA:39:94:CA:6F:F4:F8:A5:F4:8F:7B:E9:AD:13:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 502E383A64C0C7FCA60DAFCC06043E15D352403A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
Signing time: Mon 26 Oct 2026 04:40:54 +0000
ROA not before: Mon 26 Oct 2026 04:40:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2e:38:3a:64:c0:c7:fc:a6:0d:af:cc:06:04:3e:15:d3:52:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=42966b1e07fc320703bc9ed61547cc6ffd3d0d6a2227961f27ec0bb12b38d9cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:ee:7c:8e:68:25:1a:3c:ee:fc:4a:6d:48:
4f:d2:f1:4f:2b:37:e2:83:b0:d2:f2:8f:cc:7b:cf:
94:f4:f3:5f:81:63:1b:ee:19:fe:2e:8f:b4:91:2b:
ad:d9:bd:42:db:a3:0a:54:fb:e4:f1:10:d4:46:38:
49:3e:75:dc:a5:8c:4a:37:0e:f1:21:9e:8b:86:d3:
a2:1f:a6:80:9e:8f:23:2f:b4:b3:d4:bc:23:2d:40:
8d:5e:8b:68:05:9a:2e:20:6d:26:ab:f5:c9:85:f4:
85:9d:dc:05:52:96:00:53:a4:3e:e1:6a:bb:a9:b3:
72:13:1d:b7:8e:e3:29:72:ea:08:ec:12:90:6d:55:
97:8a:c5:b5:f1:73:da:19:5f:d4:23:c5:42:23:21:
52:42:8c:19:48:4f:78:dd:86:9d:1c:ae:b4:49:a0:
e5:97:83:68:17:1e:c5:16:89:a7:35:f1:86:e9:0d:
b9:f2:b2:5e:08:91:b6:c0:e0:66:ba:d5:83:3e:da:
3f:f5:fa:99:9a:45:1b:fb:f2:d6:ed:4d:ec:55:05:
62:43:41:21:fd:79:c8:59:8c:63:da:f7:27:93:ff:
f0:d6:c3:fc:e5:34:17:17:17:b7:a5:e4:c4:8c:37:
57:6a:a7:77:ed:54:0b:bd:05:30:97:21:a9:d8:6a:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CC:E0:DE:F6:DA:39:94:CA:6F:F4:F8:A5:F4:8F:7B:E9:AD:13:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a040::/48
Signature Algorithm: sha256WithRSAEncryption
26:e2:86:99:dc:1a:a6:3d:ae:cd:24:67:ce:fb:7b:3e:50:f8:
fe:cf:bb:ba:18:40:c3:82:4e:3b:9e:b9:e4:3d:52:1c:2a:10:
b4:96:85:b8:e9:17:cb:61:6b:7d:4a:f4:e1:36:39:2c:d8:4f:
66:c4:5e:fd:8a:73:d3:0d:df:86:11:1f:59:1c:5b:eb:4c:17:
13:00:58:b7:b5:18:7e:46:67:c5:72:40:b5:33:25:00:fa:f6:
05:48:64:6c:83:a1:38:ac:a7:cb:57:6f:5c:c2:bb:d4:e4:39:
7b:d0:b6:21:d7:44:46:41:c4:9d:6f:1e:7a:61:86:b8:a5:3d:
c7:da:17:a7:6f:56:32:86:a6:63:f3:dd:89:30:c4:d1:f2:4b:
3c:59:e0:78:d5:44:e1:11:72:87:85:0a:a1:c1:23:5d:d9:36:
f3:19:ce:de:64:a9:7b:14:e5:a6:f9:0d:8f:55:8a:8a:ee:a0:
73:a4:87:c7:0e:20:f1:1a:28:17:8b:01:1b:df:c1:06:f2:31:
d0:2c:74:8f:f4:9a:16:45:45:c2:37:81:e6:94:a1:b5:05:65:
46:f2:49:44:4b:57:6a:33:af:bd:0c:79:06:36:b2:98:df:ed:
ba:5e:c4:60:24:2a:06:25:f5:11:49:7b:d7:97:c4:00:af:fb:
33:42:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 07:39:49 2026 by rpki-client