Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
File: b41919f2-4e07-4adf-8fc6-43f8940080d4.roa (raw, json)
Hash identifier: SA0h2Q2f7vLmM/jbVe1Sd87g96v7T83mmXJ3zAtF4Zs=
Subject key identifier: 52:2B:A7:BD:4C:33:29:70:A4:E6:F1:2C:21:BE:91:F2:3F:F5:FA:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48866379CCBA3797385B4367D4D829830FC7B379
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
Signing time: Sun 18 Oct 2026 01:20:21 +0000
ROA not before: Sun 18 Oct 2026 01:20:21 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:86:63:79:cc:ba:37:97:38:5b:43:67:d4:d8:29:83:0f:c7:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:21 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=cac9b5b4e6db2d239bd969f52bae65c6e6f500cd5e072c4f6a457caaa6133a97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:f1:fc:3d:06:c5:59:3f:ef:8a:5c:22:56:
20:68:73:02:31:57:49:1a:06:99:dc:31:7c:5e:8e:
ae:19:9a:93:98:71:12:24:b1:57:cb:9f:ad:10:51:
a7:b7:bb:cc:37:dd:c6:bf:f0:38:d5:88:14:3d:08:
8b:0e:72:36:46:3a:f4:57:0c:65:dc:67:93:1e:90:
4a:70:d2:60:47:58:fe:e4:1b:be:07:60:15:d4:d0:
3c:e2:46:e2:f6:f8:8e:27:69:4e:80:68:a7:27:02:
d8:e8:bb:7e:16:8d:24:3b:89:74:6b:c4:4a:c1:21:
7f:2e:c3:cf:9c:af:ba:a2:14:c3:8c:51:16:9c:d4:
fb:80:cc:55:60:10:ab:74:6f:1b:06:79:ec:4e:43:
c6:0c:bb:81:8f:18:9e:e0:19:ba:09:18:3b:cd:4c:
17:4c:3f:ca:21:51:e8:13:dd:c6:ba:7f:b9:60:b7:
bb:ba:69:07:94:2b:f4:5a:f8:5a:02:68:dc:2a:f5:
46:09:85:ba:29:8d:5c:e1:71:67:e8:a2:29:55:0e:
78:60:08:ae:c6:a9:16:e0:7d:b9:83:69:59:8e:d6:
94:55:0e:89:47:32:0d:16:c0:0e:aa:b1:83:d1:62:
4a:62:1a:13:70:77:b8:91:90:29:83:06:cf:83:e9:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:A7:BD:4C:33:29:70:A4:E6:F1:2C:21:BE:91:F2:3F:F5:FA:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9000::/40
Signature Algorithm: sha256WithRSAEncryption
aa:b1:15:f5:03:dd:2b:68:28:e9:4a:5f:72:3d:8e:08:4c:6e:
4c:22:03:26:cb:05:dd:dd:2d:f9:ea:5a:a9:c6:01:a5:30:d2:
a6:44:64:b9:bc:70:c1:a1:49:8e:fe:26:59:dd:af:e6:05:ee:
f4:ac:5a:39:cc:d9:f1:3e:2f:77:5d:c5:b7:89:f1:b3:ac:34:
60:b4:2e:86:c2:99:01:8d:94:7a:d7:c3:d8:00:86:bb:60:e5:
5a:df:33:24:88:5f:38:d4:f0:c2:bb:22:f2:a6:91:17:65:2c:
37:60:7d:cf:4c:3a:63:bf:ce:08:30:9f:40:c4:da:99:26:4b:
7b:ed:34:94:9c:b2:ce:9a:76:e6:f5:89:d0:31:f8:f7:09:ae:
6c:d5:a9:60:8d:66:8b:0b:8d:c4:df:54:ca:8e:dd:dc:b9:c0:
9c:10:0f:83:c0:2c:e3:d8:c1:85:ed:36:1a:51:2b:76:4f:1f:
8e:40:93:91:bf:ee:8e:fd:5c:15:7e:72:7d:0a:5a:ae:38:68:
52:18:0b:15:af:ca:5a:64:7a:eb:a4:d6:cb:fd:c3:96:85:73:
92:e3:2d:e5:f7:bc:2e:13:4d:98:44:68:76:eb:42:43:a2:f8:
46:8f:e5:98:34:ff:55:70:5b:64:5e:70:6d:6c:70:5e:de:84:
92:9f:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:42 2026 by rpki-client