Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
File: 5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa (raw, json)
Hash identifier: rGF7CETHqP3u+DIQoxJIfmdEISvXX1C2bp2u/sbOJjQ=
Subject key identifier: 6F:11:F4:19:85:E2:0B:1C:32:27:4C:C1:A6:96:03:49:64:FF:B4:E9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B92B10F2767634D7AA2BD0A5539490C5575E670
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
Signing time: Fri 09 Oct 2026 01:20:05 +0000
ROA not before: Fri 09 Oct 2026 01:20:05 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:92:b1:0f:27:67:63:4d:7a:a2:bd:0a:55:39:49:0c:55:75:e6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:05 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=439bd9d3b55e84f65500281e1a9f8d56f20ffc7aa5e66d79d705197d4067054f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:a8:6f:11:39:06:0d:3c:4c:fe:d1:ef:5e:
40:24:e3:8b:d0:29:f2:41:15:85:8d:4c:9f:9b:26:
8b:c2:aa:0a:1d:0a:8c:f3:f9:80:e5:0b:ca:ad:32:
39:91:11:73:4a:4d:0e:e1:54:bf:fc:7c:57:a4:3b:
0e:bc:99:88:75:ee:cc:ee:c6:22:da:35:58:0f:11:
de:f4:24:e3:0a:1e:c5:fc:7f:70:74:1d:4f:3d:d5:
56:e7:3a:61:1a:96:47:46:f3:47:fc:db:d2:fc:97:
e2:80:83:82:10:8d:85:ee:d1:75:9b:67:99:2f:2c:
e2:90:f8:ea:40:b5:bb:02:eb:42:2f:6d:df:05:61:
63:84:f5:11:c7:4f:37:62:27:77:7a:39:f8:bf:cd:
b2:19:9b:ad:6f:1d:e8:f3:b8:87:01:12:c8:e2:8b:
5f:3a:fe:84:c6:2f:8c:91:5e:b5:27:41:c8:e8:5d:
8a:28:3d:ca:b7:92:e0:45:b4:66:20:b3:6a:d5:ec:
4d:b4:23:18:b1:18:b2:b1:6f:a4:2a:93:81:58:55:
11:5f:4d:43:1a:a4:90:8b:b9:9f:f5:ab:d5:21:4f:
dd:60:81:fc:58:cd:62:6e:eb:cc:d5:10:7c:09:54:
f9:01:ea:b7:4f:69:22:8e:ad:d1:92:0f:1d:7f:42:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:11:F4:19:85:E2:0B:1C:32:27:4C:C1:A6:96:03:49:64:FF:B4:E9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
50:38:ef:4d:e2:db:d1:32:a0:dc:f5:bd:6c:8f:59:42:23:10:
e8:fb:3b:5d:79:04:ef:f3:0f:19:ee:be:53:44:be:ef:99:d5:
69:77:79:54:8a:70:d7:f4:7d:c9:f6:b3:1d:45:7e:54:34:88:
c9:76:d0:a2:65:5f:d4:11:5f:48:1a:64:0e:06:41:8b:10:11:
f1:62:52:67:1e:63:cc:40:22:6f:eb:7b:3c:04:e4:2f:bf:11:
d5:6b:7e:9f:cf:ac:9f:c2:02:b1:b7:47:d0:1b:38:48:3e:4e:
e0:9b:f2:c7:cf:45:c0:9d:d3:33:76:4c:1e:8d:28:f6:01:b6:
7c:12:1b:55:8c:25:f4:f2:29:68:c2:af:32:85:ea:66:2c:fb:
cb:c6:2f:a4:5d:6e:d8:76:61:e7:62:00:17:44:3e:e2:7c:ae:
42:cf:a9:05:a2:b9:c7:44:49:40:db:e6:87:9c:ca:d6:9f:c2:
b2:72:18:08:fe:8f:d4:4a:e5:ff:35:77:da:23:52:08:66:21:
33:ea:86:6e:cc:85:bf:4d:66:c9:e3:81:ee:c4:20:c7:cd:e2:
ae:ae:57:c7:7c:48:01:f8:4f:96:71:da:90:38:97:12:b5:4c:
bf:f2:d1:df:4a:a4:de:6e:06:9e:72:75:67:4a:4a:88:cb:73:
90:ad:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:57 2026 by rpki-client