Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa
File: 4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa (raw, json)
Hash identifier: r9Pnwzvqo/t4t9ihNVp3aYem+iKDVaSQOV3rpwSZrn0=
Subject key identifier: 44:C9:5F:89:C3:7C:13:29:2E:EF:38:10:26:9D:71:35:B8:AB:63:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A1748D13A139908EE174AE3F71E8B337083E4E2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa
Signing time: Thu 22 Oct 2026 03:50:07 +0000
ROA not before: Thu 22 Oct 2026 03:50:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:17:48:d1:3a:13:99:08:ee:17:4a:e3:f7:1e:8b:33:70:83:e4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=edbca947ee8db24df8872d72b33a5b3ce91c1c3d989d1f94f27f6035d73e96de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f6:87:f5:b5:ef:11:80:a0:26:45:ce:b6:34:
7d:9f:64:3f:ea:fa:50:6b:99:8f:1d:7c:48:3c:7d:
cd:0b:4e:dd:89:ef:a6:d2:f7:a4:e2:09:35:8b:77:
7a:f8:58:45:22:b3:9c:65:76:f4:e0:ff:cd:bc:6d:
87:d1:11:f9:13:00:55:01:db:2b:f3:d3:71:d1:85:
1c:8c:07:d3:19:42:52:b9:54:90:59:14:3c:a3:ee:
f5:81:a5:5c:93:da:9c:9c:dd:40:3e:c0:23:04:31:
14:92:7a:df:45:28:8f:e6:70:f7:05:87:71:f6:1d:
d6:88:c2:2c:c7:e1:22:5d:80:8b:a0:25:e4:8d:91:
8e:97:d8:fa:a4:77:29:6b:b1:85:26:0e:ec:28:d7:
9f:a6:e9:52:1f:6e:ce:5c:87:d9:a9:af:e1:71:36:
00:53:76:b7:74:bd:b5:2d:31:95:13:74:f2:59:16:
17:f5:fa:25:fe:66:b5:1a:7b:f4:69:f4:f2:79:e0:
85:59:c0:c4:7a:9b:d1:e6:7b:84:f3:4d:80:16:1f:
d4:7d:a1:e8:82:d1:02:81:ed:a4:52:b0:0f:cb:fe:
60:75:bc:0b:e1:89:39:06:22:76:1c:5b:05:e0:ac:
a3:c4:f4:65:da:ee:70:d1:3b:48:62:46:a5:42:3f:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C9:5F:89:C3:7C:13:29:2E:EF:38:10:26:9D:71:35:B8:AB:63:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:800::/40
Signature Algorithm: sha256WithRSAEncryption
55:56:42:05:eb:dd:f4:30:93:1a:9a:b7:58:68:83:0e:d3:e2:
12:ee:9c:c3:90:7e:70:7a:b4:43:23:bb:83:17:df:75:1a:59:
8a:c1:f3:eb:83:da:a5:61:60:2d:8e:79:5a:a6:51:2b:e0:aa:
dc:e1:99:ed:a2:ba:3e:a2:0c:8f:b9:32:a2:a6:38:e7:ef:8c:
e0:97:bb:a5:5f:23:ac:bf:d1:64:bd:7d:19:aa:0b:48:32:ff:
5d:b9:19:67:0b:21:da:a2:fc:77:69:f0:17:42:c4:85:e8:8c:
3b:94:eb:84:84:10:f5:1a:87:1a:4e:46:d3:0f:d7:7a:5d:95:
4e:15:fa:f5:39:83:43:e0:df:7b:75:b4:f5:3f:9b:15:6c:07:
55:d7:9e:ee:02:18:e9:30:cc:fa:ec:76:42:56:96:95:ee:53:
7a:9a:d7:f7:fa:3e:fd:1b:e6:8b:94:78:34:cb:a0:ab:00:21:
a8:e2:97:63:c9:29:1a:47:ac:45:fd:3c:22:04:a3:d2:fe:2b:
8a:6e:bc:cf:0f:c4:92:1a:85:c0:5b:00:3a:68:7f:b2:cc:11:
73:c7:15:e3:d1:f7:96:83:b2:7c:15:3e:2e:4d:48:56:73:8d:
a9:41:df:3a:0e:d0:94:56:4a:3e:37:ba:3b:5b:07:54:e8:82:
93:70:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:34:04 2026 by rpki-client