Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
File: acaa599d-041d-4181-81eb-d1fa213089e1.roa (raw, json)
Hash identifier: Tq+FT3zlpKVw/Ex6D3VmfqtZyEFMqs7T+zrNCJxUV38=
Subject key identifier: EC:A2:D8:4F:71:04:5B:ED:FF:81:5F:24:CE:56:3D:E2:08:BF:05:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48CDA2AA6718015AAAE5F2F5292BC9EDC3D071EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
Signing time: Sun 11 Oct 2026 15:08:12 +0000
ROA not before: Sun 11 Oct 2026 15:08:12 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cd:a2:aa:67:18:01:5a:aa:e5:f2:f5:29:2b:c9:ed:c3:d0:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:12 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=fd30477c72cd246bd564faafb5ad09b7e541ad50d6c6e742fb1804da176a9ca4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:93:60:db:30:19:d4:7b:63:61:ea:b1:60:
ec:a5:8b:28:c1:48:dd:3b:c1:6e:48:c8:fe:cb:65:
5b:f0:7a:94:c7:57:17:de:24:0a:c3:1a:99:47:af:
b6:ae:96:53:20:53:3d:03:0d:02:44:46:25:6a:90:
71:e8:18:7e:d9:ff:67:ac:bc:82:9b:bd:e4:38:33:
07:66:c1:0c:ba:aa:6c:dd:70:f3:85:74:e9:1f:f9:
61:df:f8:94:b3:3f:f8:a8:bb:46:13:08:ed:28:6e:
9f:ac:ad:98:82:dd:e3:cf:2c:d1:1f:48:69:e8:6d:
41:14:dc:53:48:d8:d1:fe:3f:40:c1:15:b2:57:df:
0c:1a:b4:dd:75:2f:46:cc:5f:1c:90:ba:33:06:60:
ac:f2:ab:17:8b:e5:f8:40:d5:f2:3c:67:48:27:0a:
fe:39:0a:8b:27:66:62:7f:e7:77:1f:ad:33:ab:67:
ff:b8:6b:4f:08:1f:58:02:19:f8:dc:ab:76:ba:c8:
cf:06:d1:01:d2:7c:25:58:a2:04:93:75:28:0b:e7:
6f:32:a8:05:b0:5b:75:49:89:02:da:91:36:80:64:
2c:f0:54:b3:a7:4c:e1:6a:95:a0:9c:76:a2:70:65:
d3:5d:10:11:cb:c1:c4:cf:d5:2e:5a:86:f8:93:ea:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A2:D8:4F:71:04:5B:ED:FF:81:5F:24:CE:56:3D:E2:08:BF:05:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2080::/46
Signature Algorithm: sha256WithRSAEncryption
ba:75:cb:b2:15:11:1a:e5:29:3f:42:6a:0b:e2:e5:ce:18:40:
51:9f:8b:66:09:87:0c:a8:09:5e:3d:a2:95:46:c0:48:7f:11:
0e:3b:fd:06:70:63:49:0c:c9:8b:2f:21:76:84:cf:53:a2:5c:
20:cb:6f:0d:97:94:e6:9b:e4:e5:61:f9:1d:22:b5:35:60:50:
a7:7e:0f:1b:f4:8b:3b:7e:46:b8:86:d4:43:8f:58:ab:c0:07:
30:15:e3:89:65:5a:91:0d:69:11:8b:13:c8:6d:81:48:80:74:
6a:d1:d0:d3:38:f2:cb:e1:ee:57:15:e6:70:16:00:13:e6:d1:
0c:f9:bb:fc:f0:ff:05:bd:d0:b7:8c:44:66:42:3e:77:56:70:
66:22:e9:34:53:80:84:28:06:3e:1b:3c:60:0f:da:dc:af:13:
8f:92:a3:b1:42:dd:06:33:80:42:81:0f:ec:b0:0a:39:a2:71:
c9:8f:a8:04:ef:51:15:de:45:21:e8:e6:00:be:b2:46:1b:4a:
7e:21:b9:86:41:4e:7f:6b:41:ef:14:73:69:c6:6f:d8:32:35:
6b:60:d1:d4:7a:e3:55:0e:69:4d:25:3c:3c:04:44:6f:30:56:
d8:19:74:1b:4c:e1:f4:97:ba:5a:42:2b:bb:a6:6a:a1:f0:66:
97:e4:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:37 2026 by rpki-client