Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
File: c46a0827-1052-46e2-ad52-4a27d9a65f24.roa (raw, json)
Hash identifier: LR+zVNRAav2CTKWGSzaKy2aANY7q8YRlFh6tjQzpaS8=
Subject key identifier: 74:CE:F4:23:26:D0:A2:F5:78:09:A1:03:7D:BB:03:17:DF:15:6D:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A2E29615CE73634A429CF91D6DB12DFCA09ED9D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
Signing time: Mon 26 Oct 2026 04:50:40 +0000
ROA not before: Mon 26 Oct 2026 04:50:40 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2e:29:61:5c:e7:36:34:a4:29:cf:91:d6:db:12:df:ca:09:ed:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:40 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5781d62579495de5ee94bcccb14824a96974d6c88ba111cde0156b1e7da9349e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:b3:85:7f:de:e6:1f:0a:89:94:df:8a:f0:
9b:85:aa:88:cd:9e:6d:e1:fc:53:83:aa:b8:3b:d6:
67:1e:1a:13:a6:0a:f5:98:51:94:73:b5:16:05:7e:
4d:6b:9a:71:6e:cb:d1:60:ab:34:5e:0e:64:be:83:
76:04:b2:45:de:2e:8f:d0:77:98:f4:c8:7f:08:d4:
3e:2c:4d:bc:79:02:f6:1c:5e:de:33:df:f3:59:ac:
51:db:fc:de:5a:8b:01:6c:44:7f:00:37:9f:d4:6a:
28:f9:2f:32:e4:eb:c6:5d:1c:49:9f:21:91:d7:32:
1b:31:fb:a6:cc:13:6b:86:4b:57:22:18:e3:df:67:
1a:eb:ee:54:36:d8:da:b7:09:e2:54:92:fa:7e:5b:
1a:69:1c:f5:ff:d1:dc:19:3c:ff:76:41:81:20:cc:
33:bf:ad:86:87:d8:36:72:c6:9d:66:ad:84:18:d4:
5b:f1:e1:a5:15:f4:a2:bf:06:e5:e8:cc:51:6b:4e:
e0:8f:4d:4e:38:95:5b:73:6e:47:b4:60:10:8f:77:
56:7c:75:be:ea:e6:47:8f:08:cd:f7:75:6c:75:8a:
5a:e5:97:33:f3:cc:0b:e6:1c:7f:cb:76:7b:42:2e:
9d:dd:c0:f0:9c:e4:ba:f0:a2:7c:a8:43:85:3a:5b:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CE:F4:23:26:D0:A2:F5:78:09:A1:03:7D:BB:03:17:DF:15:6D:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/36
Signature Algorithm: sha256WithRSAEncryption
28:e0:ed:71:e5:8b:70:80:cd:ee:dc:62:f4:a7:1f:a9:cd:d1:
a8:3d:6c:ee:f0:f7:1b:ea:e7:0d:5a:62:a2:62:01:16:21:b3:
0d:8a:f5:fb:68:d1:50:38:6a:0e:b7:24:dc:0f:d4:4a:fb:74:
dc:86:f4:e6:c7:d8:36:72:2c:4e:a8:e2:e1:72:21:ba:c8:fc:
4b:f1:5f:ea:98:21:81:f6:a9:39:04:9b:99:c3:b5:36:78:7b:
64:dc:33:90:5b:f3:6b:f3:87:9a:cf:c1:ee:15:1a:0a:75:84:
28:16:24:cf:ca:9e:c7:9c:49:30:a4:c2:e6:13:be:1a:1c:1e:
c3:eb:7d:ca:4d:1b:a0:57:67:f2:8b:09:a3:2a:21:8a:53:6a:
16:37:4d:22:bf:56:ca:82:2b:a2:f0:66:04:49:f7:f6:2f:28:
2e:db:53:fd:b1:42:ca:65:9a:13:3b:c4:a6:ed:5a:5c:1b:cc:
8e:3c:82:d8:00:8d:a8:46:df:e3:22:84:e3:10:1d:06:de:c5:
78:f5:e7:58:4d:ad:4b:ca:79:91:a7:41:1e:8d:6b:09:72:3c:
ba:47:d0:85:11:96:68:58:1a:aa:53:92:3d:3b:97:44:e6:9b:
8b:7f:13:b5:71:42:2d:dd:93:98:76:40:16:fe:60:62:3d:95:
c3:52:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:28 2026 by rpki-client