Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac9f22d6-13da-4167-8281-bb4a9330d8fe.roa
File: ac9f22d6-13da-4167-8281-bb4a9330d8fe.roa (raw, json)
Hash identifier: PW2JDbEZ5rmLLToJqmvP2X+PopeuAqZJTOYo8Z9kgqs=
Subject key identifier: 17:83:3F:34:6D:60:84:CC:1F:C7:E7:79:24:2B:1A:88:EC:42:54:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49BC2B623AE539FF8FD4419AC083B71FE669A1E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac9f22d6-13da-4167-8281-bb4a9330d8fe.roa
Signing time: Thu 08 Oct 2026 17:24:43 +0000
ROA not before: Thu 08 Oct 2026 17:24:43 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:bc:2b:62:3a:e5:39:ff:8f:d4:41:9a:c0:83:b7:1f:e6:69:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:43 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=cf89ba4f745e51a7cc6d9ca99b701f4dea8b17acca608c78b1b20119518566dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:ef:ec:91:fa:80:34:8f:93:e0:e8:8c:7a:
e9:25:fd:4b:50:46:e6:cd:06:e9:05:71:d9:e1:3a:
c2:37:0c:70:17:2c:bb:25:97:63:5f:ba:76:2e:b5:
05:49:b8:b5:9b:c7:42:85:42:34:c4:f3:13:cf:8c:
6d:f1:d3:31:8c:1a:8e:ab:93:2e:2f:4d:7a:5a:43:
e0:5d:cd:fe:51:4e:03:ca:b5:4f:4e:85:15:fc:fa:
f5:03:c1:e5:27:3e:76:a8:12:5c:47:2f:fa:bc:3f:
89:f0:56:6d:3f:6e:57:d2:50:aa:a1:de:4f:3a:95:
b8:2c:cb:40:2a:83:dd:57:46:e9:d5:02:d2:6a:14:
c1:10:d3:59:3a:7b:0f:d5:de:8e:fb:77:5e:8f:19:
d2:34:ad:5b:11:ac:af:93:33:30:2c:f6:6f:00:9e:
e6:7d:4e:4d:ff:e2:8b:d0:8a:4c:0d:c9:15:a5:ae:
d2:0f:0e:1b:72:5d:8e:b5:97:1f:04:bb:3a:fa:4d:
ac:15:9a:d9:93:ff:f7:05:be:fa:24:d9:6a:7b:61:
51:aa:ee:71:73:d0:22:de:77:e1:64:53:8b:29:45:
55:02:78:44:45:11:22:15:e5:f2:ec:43:31:73:99:
9d:ec:58:e9:5c:38:a2:61:48:68:2b:a9:b2:ea:d6:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:3F:34:6D:60:84:CC:1F:C7:E7:79:24:2B:1A:88:EC:42:54:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac9f22d6-13da-4167-8281-bb4a9330d8fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:8000::/40
Signature Algorithm: sha256WithRSAEncryption
51:f8:9c:ec:25:55:ef:29:7f:0f:09:ae:93:6c:8f:6f:29:35:
95:08:57:4f:64:5b:92:70:42:e5:55:e1:5e:a8:3d:1c:d4:fc:
ad:04:8d:6f:11:0e:12:89:cf:19:d7:53:c8:04:50:08:55:a9:
eb:08:51:09:f0:0f:10:1e:ec:f7:f0:b9:32:ba:8f:e5:07:63:
e0:bb:6d:98:99:b2:e1:1f:0f:ff:03:e4:21:7f:6f:06:a2:52:
1e:e8:3f:25:41:aa:49:7a:29:bb:91:c0:1a:94:90:cc:70:1f:
b3:89:ca:9b:6e:d9:2d:7e:f4:13:83:86:e3:72:8c:7a:c6:15:
88:80:95:01:af:22:51:5b:e3:a0:a4:89:be:91:2a:39:f2:c7:
1b:b8:a7:d2:61:d3:3f:4d:d9:e8:90:d3:73:0c:6a:a6:3a:ef:
5d:fe:17:c7:fe:09:e6:2f:fd:4c:81:1a:93:e9:a4:e4:dd:4f:
e7:ce:86:cb:e8:2f:90:30:20:7b:01:e7:80:1c:f1:af:78:d1:
f2:e2:07:94:d8:b0:35:e4:4f:32:d1:ce:ab:3f:30:2e:11:47:
67:a9:1b:14:a6:24:a0:53:df:e8:0d:02:ea:ef:f6:01:3e:0b:
88:f1:64:c2:4a:4f:f5:fc:9a:5a:4b:17:fc:73:30:be:4e:ca:
02:29:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:10:55 2026 by rpki-client