Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f37316f-6860-4fa1-a7a8-65525e5bc6a6.roa
File: 4f37316f-6860-4fa1-a7a8-65525e5bc6a6.roa (raw, json)
Hash identifier: FEybIxW5OsonlIr92a0+lWq3LmxWGuAwDe8uRuMpxQ8=
Subject key identifier: EB:35:1C:AC:F4:A2:C9:E7:86:C4:DB:18:BC:CF:FE:F8:5E:00:D3:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 174E2804DDC5CEF8A12DB9D5D0D27757B85A4396
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f37316f-6860-4fa1-a7a8-65525e5bc6a6.roa
Signing time: Fri 09 Oct 2026 01:20:07 +0000
ROA not before: Fri 09 Oct 2026 01:20:07 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4e:28:04:dd:c5:ce:f8:a1:2d:b9:d5:d0:d2:77:57:b8:5a:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:07 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=4c109916bc0417a45b047c78fbc4221214df30842c2e587096bd7344f1bdd8e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:2a:eb:3d:bc:8d:55:b1:ed:6e:7e:de:a1:
61:08:f3:5d:f0:1e:e2:d7:d7:11:47:fe:2e:da:31:
d7:21:08:93:04:47:1d:68:c2:4e:62:53:ec:52:01:
70:4a:16:49:60:50:1d:2e:e0:be:a8:28:50:4f:33:
b2:f4:aa:21:ee:13:02:63:08:2f:6a:e9:77:8f:94:
86:0c:6f:61:f8:cb:05:58:57:5b:b3:c7:66:1f:31:
e5:57:7d:8d:63:61:ed:4d:0e:43:68:e5:89:c7:24:
f7:3f:50:04:97:69:87:b5:11:0d:65:f8:8a:00:d2:
58:ee:99:6e:8a:0c:2f:f1:2b:78:fe:08:a4:dd:c7:
bb:2f:45:d0:35:4b:b1:a3:4b:4d:07:bf:60:2e:ae:
0a:53:59:fb:6f:d2:c4:e5:1f:d2:5b:f8:2f:14:a3:
d8:8f:25:d8:c1:4c:8c:f8:69:d8:79:6f:05:25:26:
66:ee:f7:3d:ba:37:73:0a:76:64:e7:88:89:ed:91:
f5:38:4d:1f:fe:d9:7c:b5:e4:b4:b5:22:2b:04:65:
ae:31:6e:63:49:47:c8:12:06:90:d3:18:74:90:bd:
d5:eb:24:92:e6:2d:d0:35:e0:6a:7a:79:5f:1d:4b:
ad:29:f5:31:54:cb:c5:d4:85:51:3f:5c:66:2f:5a:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:1C:AC:F4:A2:C9:E7:86:C4:DB:18:BC:CF:FE:F8:5E:00:D3:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f37316f-6860-4fa1-a7a8-65525e5bc6a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a040::/48
Signature Algorithm: sha256WithRSAEncryption
68:b4:0d:e3:2c:fd:b9:da:a4:59:59:77:67:8e:13:ec:36:14:
35:79:d7:16:37:f1:28:b7:3f:db:fc:76:82:ef:80:78:c9:b0:
51:1d:32:d8:5d:70:dc:ad:af:cb:38:81:7b:c3:f5:a4:25:7a:
33:04:50:58:b0:f1:32:80:aa:d2:57:c1:11:55:f1:e7:6c:de:
83:72:fd:11:f9:5e:2e:01:b2:d2:42:09:4e:1f:4f:d7:a0:d8:
78:c4:68:ed:c3:ac:43:1c:54:49:3f:65:3b:17:96:3a:fc:ff:
a3:7f:7b:ab:6d:50:75:e2:d6:de:e0:e3:1c:87:52:30:3b:39:
78:c2:f9:19:2e:21:f7:b2:fe:e1:76:9f:98:cd:5d:12:26:ae:
ed:40:eb:70:8b:42:76:c0:61:56:e6:23:f6:5a:a7:e0:ba:01:
19:70:43:73:ce:4c:06:b9:3d:3c:37:34:fa:9a:09:0b:e1:34:
8d:b3:df:70:7d:ee:6f:8b:e9:84:91:f8:07:89:6c:af:ad:70:
88:cf:97:78:89:20:08:f7:9d:04:d0:6e:f4:f1:02:41:06:42:
0b:29:78:e1:3e:67:a5:fb:b1:05:ed:30:b7:e9:ed:52:89:22:
c5:3b:05:6f:d4:7e:be:1c:45:d4:54:65:f1:90:0d:ee:ff:ad:
92:41:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:36 2026 by rpki-client