Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa
File: a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa (raw, json)
Hash identifier: JCJ4HPI2OF1FTGaxWF1CeoCiL904NkXidUpX1FJDnxo=
Subject key identifier: 77:5A:2F:9E:4F:1F:A3:3F:E8:C7:D1:B3:DE:4E:C5:89:9C:27:45:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C8AA33B21255309C8E27A4F65A2CD05186F8E78
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa
Signing time: Thu 22 Oct 2026 01:40:07 +0000
ROA not before: Thu 22 Oct 2026 01:40:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8a:a3:3b:21:25:53:09:c8:e2:7a:4f:65:a2:cd:05:18:6f:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=29763b0c4340f41d76fa2d62a24b58e40100765b207907f103fdb92e59a3a37f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:16:7f:52:de:09:cf:d9:c0:fc:fb:4f:81:
49:99:70:7e:d2:2a:77:a3:97:4e:f2:8c:55:cf:a2:
9b:19:a2:77:69:34:08:59:78:08:0f:22:c8:38:f1:
b3:75:4a:41:92:c8:d8:e7:85:ad:9a:fe:b7:22:e0:
be:bd:14:de:49:15:57:fd:18:db:59:be:3b:a4:c8:
dd:6c:93:31:44:5c:24:bc:8e:91:8e:3f:6a:12:06:
08:2d:eb:0a:14:e6:52:82:6b:7d:ec:43:80:45:46:
8e:86:27:f1:95:9f:8f:6f:bb:e9:85:e2:ad:05:cf:
8a:66:2a:e4:f6:9c:8f:05:d6:6a:e5:b8:25:5c:09:
bc:49:f4:16:d1:06:ac:35:ff:9a:5c:d3:d4:b9:a3:
af:5f:af:25:81:a4:08:1f:b0:5c:2a:6a:e5:0a:86:
d6:72:e6:4e:f1:1a:16:ed:7c:6b:fe:af:71:7a:52:
86:67:19:d2:66:5f:e3:6d:68:b2:5f:50:bf:a1:2e:
24:aa:1f:2b:5b:9c:e3:81:d6:40:c6:b0:60:12:b1:
ce:e0:77:c6:ef:8f:f2:a7:89:d6:fc:35:7f:fc:d2:
c5:4b:f9:ec:ae:cd:a3:83:7e:82:90:7a:40:25:eb:
3e:36:4f:65:3d:97:ca:66:ea:e3:df:1f:46:bb:d7:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:2F:9E:4F:1F:A3:3F:E8:C7:D1:B3:DE:4E:C5:89:9C:27:45:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e000::/40
Signature Algorithm: sha256WithRSAEncryption
8d:b8:40:99:68:42:64:86:bd:ef:62:60:49:11:4b:5f:95:43:
e4:ff:22:86:78:21:ec:da:19:64:d7:1b:4e:16:4e:81:ca:3b:
79:98:16:48:8c:c7:eb:6a:2b:99:e3:a7:b2:62:30:70:b7:5e:
c4:84:4d:44:c7:ae:3c:35:5f:f4:06:03:9f:fc:ee:9f:d0:24:
83:b5:24:3e:44:b3:9f:f0:ef:1c:3c:5b:29:cf:3a:a5:87:2b:
23:a9:69:c9:b4:9e:74:f4:47:18:da:d1:d6:3e:68:0c:52:65:
26:28:57:03:1c:98:65:06:24:45:b7:2d:ff:b0:77:4f:e1:a4:
7b:24:fd:61:3f:c3:2c:a5:e4:d4:12:05:1b:6a:fe:88:ea:4e:
d4:ea:7c:f0:fa:6a:69:5e:29:8b:b8:f6:1a:38:07:18:f3:0e:
a9:df:dc:38:b9:02:b3:86:26:33:96:06:35:85:a5:50:bb:ab:
27:f5:88:28:16:4f:f8:af:eb:7e:63:3a:50:b7:ea:33:43:58:
72:68:6c:73:65:75:af:2e:e1:71:57:bb:7f:4f:47:62:5f:8b:
e4:69:87:89:eb:02:f5:fc:f2:8d:ab:54:ef:6f:0e:ba:e5:0e:
13:72:40:fc:ee:2e:44:5b:f0:6d:dc:0a:1b:fb:ad:ae:f4:51:
db:7f:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:37:25 2026 by rpki-client