Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: y9fx6sN26kcvG/oCC5qN3/bGRapipaiAhj063NZKHgk=
Subject key identifier: 13:74:66:B0:4E:79:30:49:D1:11:FE:8E:5F:66:FD:6A:C5:77:D3:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C81ED1DD156CE0E330497FB4DC860272C433197
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Tue 27 Oct 2026 00:02:23 +0000
ROA not before: Tue 27 Oct 2026 00:02:23 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:81:ed:1d:d1:56:ce:0e:33:04:97:fb:4d:c8:60:27:2c:43:31:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:23 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=f265c20f2c4506d13f2409ff74f4bd78e54b08d739c6e5f1fcf9025e50dd69ee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:d6:92:d9:df:5a:43:fb:00:00:fa:ca:4d:
a7:0a:f6:c4:f7:c5:72:38:ed:ef:7c:b4:05:1d:60:
5f:e6:3d:80:31:cc:fb:fc:55:2b:8d:50:88:6e:45:
90:6e:8c:7e:07:94:14:ad:55:08:73:dc:55:7c:0c:
ef:ef:10:18:ee:9f:9c:32:f6:1f:41:8e:3c:1d:a2:
5c:2c:af:d4:61:5f:e2:bb:a6:aa:24:9b:33:28:50:
39:13:ae:eb:d4:60:fa:c4:55:8b:4c:57:1f:8c:3c:
11:12:ff:6b:65:30:cc:b9:6d:9a:a3:67:c5:2b:3e:
87:cc:ea:3d:0d:86:6d:12:28:2e:b8:c1:49:6f:0c:
a9:29:7e:c9:62:5f:7f:3c:fd:a7:c1:81:88:bb:18:
c0:40:8b:23:fd:87:69:36:b6:e3:17:4f:59:e0:9f:
4d:ef:ab:ac:c3:fa:f9:12:c1:9d:64:d0:14:70:a3:
dd:d0:47:c3:94:ea:c7:35:f1:63:0f:2f:d3:25:df:
75:2b:15:0f:d1:3f:fa:54:37:10:ef:4d:90:8c:1e:
f6:8e:f5:18:7c:41:8d:e8:2b:d3:01:0c:d1:1d:98:
c1:16:57:a2:12:f4:bf:23:46:97:9c:09:af:fb:a1:
1f:6d:e9:95:13:77:b7:a8:33:b7:26:14:91:6d:05:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:66:B0:4E:79:30:49:D1:11:FE:8E:5F:66:FD:6A:C5:77:D3:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:98:2a:64:c0:6f:aa:4f:aa:2a:6a:70:e6:8c:9d:4f:6b:0e:
d2:b7:5a:f8:d7:9c:83:a6:1a:29:46:15:fb:85:1b:eb:f2:72:
bc:cf:c1:d4:90:50:d8:53:c2:bb:2d:2e:fc:85:13:f9:40:26:
d1:d0:63:05:7a:b2:15:cd:12:a5:da:54:d6:0e:e4:61:c6:fe:
3c:66:ab:fc:23:f0:0d:0c:65:4e:dc:ee:c9:6c:03:3a:69:90:
7f:d9:6a:bf:c3:14:90:9b:95:fe:fe:e5:64:c2:3a:a1:eb:d7:
6b:70:aa:0a:a7:57:bc:d2:7f:ec:e6:b1:e2:81:cd:be:6a:78:
33:54:4e:cb:6c:74:1d:f2:25:43:26:6a:a6:4d:3a:bc:a8:08:
1a:77:66:f7:7e:2c:08:46:07:43:da:3e:96:bb:83:4c:00:c5:
f0:ac:2c:98:ce:cf:bc:52:29:e6:a3:d3:b5:59:91:64:48:c6:
0d:36:3b:ad:93:64:bc:41:32:3a:c4:56:37:5b:52:cf:20:9e:
b2:30:fc:ca:4b:14:5a:ae:b9:cc:ab:ac:a0:4d:75:0f:2d:c0:
58:1d:e3:05:f1:f0:66:02:2a:c8:c7:13:71:ac:6d:ea:28:c8:
17:03:1e:a7:98:27:33:33:61:35:4a:f0:7e:d7:72:d1:bf:b2:
31:5f:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:17:57 2026 by rpki-client