Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
File: c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa (raw, json)
Hash identifier: HUg0kX8yRaUdOXmHL0b3eCNaYqV/x6XaeP4uT82y2+4=
Subject key identifier: 07:A7:CB:A1:DB:B3:44:89:3F:BD:36:7D:BC:95:D2:04:17:5C:93:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B83B2187F286CE1959FCF8AB3EF60A5A5AC4757
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
Signing time: Mon 26 Oct 2026 04:50:53 +0000
ROA not before: Mon 26 Oct 2026 04:50:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:83:b2:18:7f:28:6c:e1:95:9f:cf:8a:b3:ef:60:a5:a5:ac:47:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=65e4263a8e27f2c45601239788af1a5744c6963e372a4d1a5d748dc1c0983cec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:f5:63:fd:ce:af:c8:5f:53:93:8a:35:e1:
3a:b0:6d:df:77:c7:c9:e0:f1:2a:ee:fa:4a:08:b8:
af:c5:9a:79:cd:0f:ef:b3:dc:2f:93:2b:75:4b:4c:
06:83:20:c0:86:83:c3:20:44:9b:e3:e2:ae:c8:a1:
b0:e3:c9:6f:14:a7:73:99:a2:70:b0:05:9a:2b:c3:
e9:44:95:2a:c3:c1:7b:1d:c2:a7:58:1a:fa:06:38:
9f:6a:18:c2:16:d5:e3:e8:e1:1a:81:6f:43:9f:e8:
31:17:01:e2:31:8e:d0:6d:09:3e:4b:a6:4e:da:bf:
1c:91:6c:de:08:f1:3b:0a:9e:3a:60:27:54:dd:fe:
85:ea:5b:39:4a:bc:ec:6e:63:56:3c:9e:9b:0a:b3:
b5:f6:43:c5:b9:eb:e1:89:68:b9:11:36:73:d0:bf:
23:f4:f2:22:60:83:29:99:db:6f:12:25:4e:b5:41:
ee:81:c9:49:b8:f6:5a:3d:57:83:12:48:4b:7d:cb:
20:16:d6:97:cf:7b:57:4e:bb:5f:1b:5c:af:4c:8b:
39:18:a0:61:ac:37:b3:d4:45:e9:8f:4e:ae:79:8e:
42:c4:ee:bb:b6:8a:9a:11:52:1b:82:ba:e3:47:d8:
a4:30:c3:85:c5:b2:4d:17:45:9b:9b:bb:49:be:7f:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:CB:A1:DB:B3:44:89:3F:BD:36:7D:BC:95:D2:04:17:5C:93:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
70:7f:42:52:58:86:ad:8f:eb:d9:b8:60:11:70:37:60:5f:a1:
0a:ff:17:32:75:9b:fe:82:e3:bd:f2:77:bf:fe:2d:5b:8b:47:
75:d8:d0:a9:6e:1c:be:00:31:2e:77:ff:37:64:50:7c:ad:65:
20:d4:c6:72:f0:3b:9d:9d:94:2b:43:91:99:a2:85:e0:d8:4f:
91:97:83:b8:a1:da:f4:09:00:ec:da:00:69:cd:02:d2:5e:fa:
f1:81:10:16:49:91:85:f1:18:6f:a6:6f:cd:60:df:74:70:d6:
c3:f8:f3:34:de:74:96:99:4c:63:55:56:ac:b1:80:a8:83:9e:
0f:4c:6d:31:06:4a:a8:87:a7:e7:77:e9:27:16:6a:27:a1:04:
40:11:7b:8e:fc:bf:02:35:2e:50:b5:79:40:7a:ef:9a:da:22:
a7:7f:bc:08:1c:6a:fe:72:b6:a5:4e:02:10:30:e5:68:de:71:
40:12:96:f4:f3:26:03:d1:80:8d:59:ef:89:c1:de:99:70:80:
be:51:7c:68:9a:8f:e1:89:23:3b:18:97:a2:7e:e1:64:f0:0a:
3b:4a:35:e2:4d:e1:eb:37:ca:6a:35:77:c7:34:e1:f4:6d:b1:
4b:f2:bb:f5:14:f1:32:ed:36:25:13:72:15:05:9c:fb:1d:8b:
6a:2f:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:49 2026 by rpki-client