Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
File: c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa (raw, json)
Hash identifier: le5BgwtznuG//4tr2TCJKpyv2k+dU2xwHKkHLx/eUlI=
Subject key identifier: 10:9A:BF:3E:F0:46:2B:42:7B:1D:CA:19:BB:61:E0:1D:7F:86:AD:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F6D94662AE5BD25DB6B95F53D1BF1D46C61F966
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
Signing time: Tue 27 Oct 2026 00:02:21 +0000
ROA not before: Tue 27 Oct 2026 00:02:21 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6d:94:66:2a:e5:bd:25:db:6b:95:f5:3d:1b:f1:d4:6c:61:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 27 00:02:21 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=6ff55ed274218808eb63cc339baf46b89df326716673f2afcb8ccd810dca429c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:a2:ce:59:f9:1a:4f:0c:a3:18:48:67:35:
40:51:ce:e5:83:5a:3e:cd:97:23:d9:f7:40:1b:0c:
33:0a:89:2a:20:7c:d8:96:4e:75:22:ad:58:21:a6:
99:a3:9f:2d:fd:72:18:c0:71:56:fd:bb:3f:0c:02:
d2:9b:c7:f3:50:20:a4:9c:a0:c6:15:6a:2b:5b:b9:
04:39:14:c0:49:b8:ef:28:5c:f8:ae:a6:6f:4c:de:
3d:23:3a:4f:b9:99:a1:7c:ad:5e:be:20:85:98:e0:
f1:fa:8a:a3:7b:17:5c:54:d2:25:90:14:56:56:7a:
9d:55:27:bb:40:14:be:3c:58:01:c8:41:4f:51:11:
da:1d:af:d5:62:57:9e:00:b4:0f:58:54:b7:06:5d:
39:c7:a9:21:40:dd:8d:c2:fc:13:69:76:82:e0:39:
69:f8:c7:2a:f6:ae:46:a2:a6:5f:b9:0d:c8:e0:67:
f6:19:91:21:39:48:48:c8:8c:73:b9:9d:c9:10:86:
8c:14:47:41:a1:7c:13:53:3e:d9:96:d7:95:f6:a9:
c9:c6:7b:75:bd:86:3e:ea:bc:33:4f:d4:36:44:dc:
6a:89:6f:aa:b9:f8:7e:fa:23:b5:fe:3d:72:db:00:
93:aa:e5:89:3f:ea:d5:1f:10:20:32:71:1b:d8:a2:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:BF:3E:F0:46:2B:42:7B:1D:CA:19:BB:61:E0:1D:7F:86:AD:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.32.0/19
Signature Algorithm: sha256WithRSAEncryption
37:60:67:bf:c6:cd:14:8e:30:8c:10:2f:91:01:96:b9:98:ef:
ff:94:fe:50:63:07:e2:1e:36:b3:f2:e0:89:74:f0:aa:cf:b8:
92:72:2f:9c:01:9a:32:ed:9a:04:8f:cc:23:1d:3a:ce:6c:2e:
53:0b:62:35:35:8f:d5:a7:20:5a:ef:8f:b7:7b:e2:be:a5:a4:
db:95:a2:72:2a:40:50:3e:55:d6:6e:14:b3:c1:48:e9:eb:1f:
b6:45:c1:8f:0e:52:c5:7c:0b:b2:9a:53:ba:68:01:a2:93:2f:
cd:4b:2d:f1:44:e3:d1:cb:d4:67:14:fe:90:25:3f:02:14:4d:
03:14:aa:91:d5:cd:a9:9e:de:fe:90:df:09:82:ad:a7:25:13:
cc:a6:31:1d:f4:54:f6:c5:72:51:17:1f:8a:43:f0:29:71:e9:
3b:de:dd:a0:cb:b0:e2:f9:a8:a9:ac:56:ac:cd:ee:25:5c:2b:
62:09:5e:de:5a:a1:72:6c:8e:b9:22:dd:86:c2:e4:9c:a8:2a:
da:1c:52:bc:fa:c2:d6:d5:eb:12:e2:64:58:ae:34:6b:e7:55:
67:53:f1:15:ef:9f:b7:aa:f5:ac:f1:82:58:8f:3c:46:1f:4b:
20:bf:ce:7e:fa:c9:15:10:88:70:b9:3d:2c:ac:14:0c:e7:44:
87:57:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:46 2026 by rpki-client