Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1d03194-ccbe-4f42-86ad-223ce18146d3.roa
File: a1d03194-ccbe-4f42-86ad-223ce18146d3.roa (raw, json)
Hash identifier: irx0smOt/gHGS1/Z0/rYvGuRSd24hgL7DFLnpZgs6HY=
Subject key identifier: E4:35:A1:A9:A9:CD:64:F0:19:2C:BF:9B:4A:62:92:79:33:4D:A8:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48AC52EDAB620F0A626E84A9148D4116C5B0BCD4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1d03194-ccbe-4f42-86ad-223ce18146d3.roa
Signing time: Fri 09 Oct 2026 01:30:20 +0000
ROA not before: Fri 09 Oct 2026 01:30:20 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ac:52:ed:ab:62:0f:0a:62:6e:84:a9:14:8d:41:16:c5:b0:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:20 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=2541a02cb31e68916fc91a546aa0b887aa34cc342c632ff425d1f000f19ad2a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:b4:7a:a0:d2:1d:3e:78:7f:ec:b8:9c:aa:
e0:8c:0f:71:1a:cc:21:51:25:33:cc:2d:1c:43:aa:
ad:2c:24:fa:1b:56:af:7e:a8:a2:93:ef:a6:ec:a9:
47:79:c4:1d:03:b9:d5:db:b1:ef:0e:71:8a:77:78:
e8:32:15:0f:56:68:6e:16:df:7f:da:02:7d:3d:c5:
92:38:1b:24:70:e6:ee:f9:36:c9:fa:d8:9d:9f:ed:
28:c9:bf:e3:5b:de:a4:65:33:02:e9:e7:a1:07:bb:
e2:1a:41:f2:73:e5:40:65:a8:f5:db:5c:44:81:8f:
ef:be:8d:2b:dd:ea:9d:a7:d9:89:42:81:a3:07:70:
6d:63:7b:c5:f2:ff:37:82:6d:90:72:6d:e6:f6:58:
e2:fb:86:ea:9f:41:72:28:3a:9b:76:9d:23:15:b7:
f3:2f:2c:13:01:cd:f0:1a:54:ac:51:6e:66:ea:f4:
47:8c:24:52:a5:59:91:f6:96:fa:9b:d4:d7:f6:38:
f4:dd:ab:3c:15:11:d8:3f:b5:64:02:a3:01:96:de:
33:da:df:79:c0:e1:08:c6:21:48:10:c0:c0:e4:34:
1a:f1:7b:6a:2c:e7:b4:eb:78:87:39:a1:d5:3d:53:
a7:0f:f5:50:3d:5e:67:23:7a:c5:45:a3:b2:a1:47:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:A1:A9:A9:CD:64:F0:19:2C:BF:9B:4A:62:92:79:33:4D:A8:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1d03194-ccbe-4f42-86ad-223ce18146d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
6c:6a:a5:c3:7c:b8:c0:57:f6:12:38:8e:a0:58:4b:8e:b7:ee:
3f:1a:04:f2:9e:fd:c7:61:68:0b:56:dd:76:98:10:90:04:21:
bc:35:9b:f0:92:b8:80:d0:c4:26:13:8f:e3:7f:a4:b1:84:ec:
aa:ee:91:4c:1f:13:b4:a0:bb:a7:94:5d:d8:aa:b2:dc:8a:76:
d2:6d:3b:44:6d:40:a8:4d:d3:93:ec:e8:71:78:09:a6:bb:7e:
8e:68:eb:fa:b5:97:ed:ad:d4:32:d3:f0:5b:94:0b:d5:b9:31:
72:86:cb:5a:6a:0c:69:b6:6f:77:0b:05:d9:c8:4a:af:42:5c:
1f:39:c5:ee:ac:31:fc:96:2a:54:d5:f2:53:e5:59:92:dc:1c:
a1:3a:78:44:dd:90:b9:54:d5:1c:c4:68:8a:49:2d:7a:75:eb:
12:66:99:33:4b:52:e1:16:c0:07:29:d7:67:0b:33:2c:15:ff:
0b:7e:48:b7:50:2e:ec:b5:dd:f6:ab:81:df:30:0e:b3:c4:f7:
e4:b0:7e:76:fe:24:bf:29:f8:16:ca:c7:1f:2e:8a:52:46:9d:
4a:45:20:97:b5:de:3e:65:22:7e:73:1e:b9:19:90:ac:94:89:
3f:c0:3f:b2:9c:62:7a:19:4b:2f:a9:c1:9c:06:fa:05:e6:3a:
86:78:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:27 2026 by rpki-client