Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5326a6e7-9660-4ae8-a80a-996863be862e.roa
File: 5326a6e7-9660-4ae8-a80a-996863be862e.roa (raw, json)
Hash identifier: jPsCbEfKqG+YTNxPm7Si1ScFopEEmk7QX87tCqL05Qw=
Subject key identifier: 39:AD:3D:DF:38:A3:59:82:A1:48:54:4C:75:F4:B5:7C:CE:92:7C:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D411CCC9171EC1CEFAA239D435E7B633C671D9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5326a6e7-9660-4ae8-a80a-996863be862e.roa
Signing time: Tue 27 Oct 2026 00:02:22 +0000
ROA not before: Tue 27 Oct 2026 00:02:22 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:41:1c:cc:91:71:ec:1c:ef:aa:23:9d:43:5e:7b:63:3c:67:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:22 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=928a1fd7f57c05634858e24b4a176c5c90689283814a30b00151268f7b62295a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:a0:c3:22:20:a3:76:41:6b:f7:71:42:58:
82:a4:7c:07:02:5a:79:0e:d4:df:7c:5b:ac:bb:a0:
a2:3e:f5:83:26:d7:4f:ed:49:d6:c8:fc:d5:d9:a0:
e0:c8:d2:40:38:04:44:74:0e:02:52:e7:48:0f:45:
12:ec:48:64:9f:3d:61:37:b6:a7:7b:c8:e1:ea:2e:
83:4c:d5:5d:01:34:23:ee:8c:f0:5e:10:aa:b6:b2:
7d:a8:76:bf:af:08:96:1d:95:29:6a:f9:51:94:38:
cf:71:62:66:f0:00:5a:35:19:25:f6:56:7a:28:b9:
a6:e7:f7:5d:86:ec:6a:be:4a:f5:3a:f4:0c:21:32:
56:66:95:5a:b4:20:2d:77:dd:c5:66:ff:dc:43:de:
e8:f6:b3:15:f6:30:83:87:ef:56:41:be:3c:43:cd:
9d:77:3b:0a:1d:49:24:c8:f8:c9:33:77:3e:9c:43:
2f:f4:11:48:10:00:fd:d6:e8:39:54:48:ed:19:37:
be:12:be:a1:7c:22:15:1d:cf:cc:82:e8:ad:c0:3e:
45:d7:63:8d:35:fc:73:43:0c:e2:de:0a:39:85:70:
fc:42:a4:5f:ac:d4:12:97:f4:b0:5a:01:e2:1d:e7:
b8:bb:2e:fb:46:76:af:42:8e:f1:c5:f1:77:f8:28:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:3D:DF:38:A3:59:82:A1:48:54:4C:75:F4:B5:7C:CE:92:7C:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5326a6e7-9660-4ae8-a80a-996863be862e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:cc:db:50:8c:ed:97:c7:dd:98:a1:29:40:c4:a1:12:34:f7:
26:a8:8c:99:f4:0a:aa:1b:8b:5a:e0:83:9d:38:ad:71:08:0c:
34:05:f6:21:a9:c4:60:2d:f8:e8:6a:13:6f:33:64:6b:20:da:
ec:cc:14:17:32:8c:ce:8a:e9:f3:d4:8f:30:35:fa:fb:83:a1:
1a:40:6e:e8:b5:aa:df:bf:3c:15:fd:82:82:c7:19:43:47:e3:
aa:e3:1f:df:8a:fe:56:e6:38:70:9b:d1:96:47:27:38:e4:34:
fd:fe:33:31:dc:1b:ba:a3:3f:ff:d0:5e:b1:e2:71:a4:72:71:
60:ab:3f:41:73:45:7e:6f:7a:a2:d5:37:79:6f:12:19:88:a5:
f3:fb:82:c1:96:31:ba:e1:16:7e:63:d1:40:d7:f9:5b:ca:da:
fa:e5:48:39:94:09:d3:4c:c2:c8:3f:db:97:87:61:a3:73:14:
b1:43:93:17:87:8c:09:80:3e:2b:a1:dd:3a:b4:2a:e7:85:45:
6e:ab:35:4e:79:5b:be:bf:92:f2:bb:7b:9f:83:25:45:13:03:
6d:0e:2b:18:75:89:47:ef:18:5c:a3:52:94:46:04:f8:8c:63:
c4:56:ec:db:42:c7:6e:e5:67:4e:5c:54:2d:78:0a:78:5b:a3:
04:bd:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:53 2026 by rpki-client