Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
File: 546828d4-9f43-44c2-bff8-aafeddca4e25.roa (raw, json)
Hash identifier: 5xRJ2dcVp8J27KplbPJudigK2fHF7zJU6QFtnzvZBg4=
Subject key identifier: 8C:C7:44:27:2C:00:40:08:7C:69:8A:C4:3D:12:F8:61:79:44:C9:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45A09F5FC784BAB9724C43727F4469248BB6135C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
Signing time: Mon 26 Oct 2026 05:30:45 +0000
ROA not before: Mon 26 Oct 2026 05:30:45 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a0:9f:5f:c7:84:ba:b9:72:4c:43:72:7f:44:69:24:8b:b6:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:45 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=737e92dd08f96a77c308616b7071741aaf599abc3c0d379a826c98815196b859, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0f:7d:a7:08:bb:55:53:86:2c:46:fa:30:3b:
25:4e:d6:a3:0b:73:16:f4:1a:a5:d1:38:5c:69:c9:
74:2d:63:ed:16:79:23:02:78:7a:4a:88:68:9a:64:
53:46:d7:de:a2:d7:39:83:c4:2a:62:3d:c8:93:67:
e3:b3:9a:7f:2c:cf:a8:5f:03:09:fc:4c:f7:67:5d:
6e:92:1d:a7:eb:00:9f:36:ab:8b:f7:42:60:f1:23:
f6:0c:e4:1f:bc:9a:b4:c1:a0:5b:47:91:7c:71:a6:
3c:e4:54:bd:b3:ad:16:a8:c1:01:7a:c1:bb:1e:cc:
7e:4e:d7:87:66:2c:18:96:60:23:6c:ed:8c:34:9f:
29:49:81:0e:2e:ad:81:d9:a8:4d:a1:ea:fb:00:de:
b0:6b:37:61:81:e6:15:c8:88:d0:3b:72:b9:a7:e1:
6e:e3:bf:f3:1a:d1:16:1c:e3:c3:7d:e8:ae:c1:8f:
15:c5:2e:06:11:96:41:2c:1f:29:d6:01:a0:ad:91:
d7:51:28:b4:43:62:2e:fa:f0:ba:57:4b:0d:a6:8b:
54:60:64:17:1a:cf:94:42:ec:39:36:9f:67:79:65:
09:95:ae:cb:1b:db:fb:14:31:64:44:80:c3:55:c0:
2d:4d:ed:80:83:f1:a7:c3:4c:97:b2:0a:93:e3:5b:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:44:27:2C:00:40:08:7C:69:8A:C4:3D:12:F8:61:79:44:C9:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e040::/48
Signature Algorithm: sha256WithRSAEncryption
90:9b:40:3d:9a:90:32:01:c3:12:23:10:69:bf:1d:c3:92:83:
f6:ef:1c:97:58:4d:63:67:ca:18:c3:c0:b2:d3:19:b7:4a:f1:
c2:1c:f0:c1:d2:79:a5:39:6b:e3:33:0b:1a:0b:ea:bc:6d:da:
c1:d2:d0:a2:d4:ee:e3:3c:22:fb:92:26:68:fa:32:0c:53:25:
ab:e7:48:51:03:b9:c1:6b:7c:69:d3:1f:ce:dc:97:e7:ca:5b:
35:c7:5d:2f:30:3e:7b:23:33:f6:77:04:a7:fa:86:0b:17:51:
cd:f3:5e:88:84:a5:6f:70:73:51:24:a4:24:26:e5:e4:06:bf:
08:5c:d9:b5:7b:17:7e:91:70:ed:19:fc:74:0e:63:30:69:5b:
c8:ab:86:da:80:95:e1:b7:f7:85:d7:71:65:76:6e:75:04:21:
c3:c4:72:e1:43:6b:bd:cc:b5:38:3c:45:69:ee:e9:2d:e6:44:
e1:64:a8:4f:8f:45:9f:aa:0c:cd:17:1e:f0:2c:ac:ee:a8:e4:
ee:81:3d:2d:b7:60:93:3a:d1:76:5c:c3:40:2d:0f:e0:38:c4:
c2:09:95:32:fd:d2:6d:6b:f3:73:7d:75:c9:84:32:41:7b:e2:
96:f7:29:e3:2a:cf:60:d3:9c:fc:74:70:4a:65:f1:b7:83:0f:
5d:5e:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:42:11 2026 by rpki-client