Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cceafdf4-c97a-45c6-a4d2-b319afc6f49e.roa
File: cceafdf4-c97a-45c6-a4d2-b319afc6f49e.roa (raw, json)
Hash identifier: XnPG83jPKMSp/Zn8CIwqKmEQnoc/IS2Dzfa6OPPuuLE=
Subject key identifier: BB:3F:28:94:8A:66:88:C2:C5:13:66:89:39:D9:90:BE:A4:8C:5A:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4902E7D455961F3C41523172B78747D5DC9E7317
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cceafdf4-c97a-45c6-a4d2-b319afc6f49e.roa
Signing time: Sun 11 Oct 2026 15:10:11 +0000
ROA not before: Sun 11 Oct 2026 15:10:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:02:e7:d4:55:96:1f:3c:41:52:31:72:b7:87:47:d5:dc:9e:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=bbfc53d3bad4793d74c928120d6f79eedc1e845eb2f6c2ad4a05a6d0803cbf02, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:88:13:09:bf:6c:47:99:a6:47:33:e1:36:
5b:04:94:85:53:6a:8b:87:3d:03:5e:cb:2b:5a:f5:
72:fc:a6:4d:31:08:a2:bd:78:9b:e6:6d:de:c8:25:
67:df:82:68:9e:1b:9e:be:2b:a6:d3:45:66:4c:e6:
07:c4:a7:52:62:aa:bf:12:1c:f6:30:53:e5:68:38:
ad:99:b2:71:76:39:78:c4:85:2e:c5:05:b1:f7:22:
30:1f:3d:22:a0:16:34:39:52:e1:06:e5:6a:d5:96:
f7:f6:ad:ee:51:24:8f:68:6c:61:5a:2e:03:7d:b2:
aa:c6:0a:65:31:34:de:49:d8:82:d7:0a:7c:2f:bb:
6d:c7:dc:06:43:1a:88:ba:f7:29:e1:4d:f7:5d:ca:
31:42:d1:c1:ff:9c:8e:fb:b3:7c:e0:cb:c3:97:14:
e7:09:02:ec:50:81:7a:5c:73:93:fc:79:f6:23:f2:
ec:16:c0:38:3f:a4:64:c3:11:ec:9a:89:34:ea:91:
8e:c4:ff:61:df:98:95:42:dd:af:7c:c9:5a:47:ba:
b1:53:f8:0d:ba:5a:bd:fa:15:25:bb:de:b7:24:ae:
ef:2e:ac:98:9a:05:19:96:41:08:f7:d3:62:ab:d9:
38:02:81:d9:e7:d1:4a:43:b3:f7:45:58:ef:24:e5:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:28:94:8A:66:88:C2:C5:13:66:89:39:D9:90:BE:A4:8C:5A:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cceafdf4-c97a-45c6-a4d2-b319afc6f49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8040::/46
Signature Algorithm: sha256WithRSAEncryption
18:89:e6:d2:a2:96:86:b7:04:a5:74:60:5a:d6:ea:e1:97:b7:
1c:15:31:ad:9e:2a:76:c2:33:11:7e:d8:2a:99:2f:70:ff:60:
7f:dc:f8:76:fc:88:96:6b:7c:b5:be:15:73:52:cc:3f:f0:e9:
51:84:6c:31:aa:b6:aa:05:e8:af:e1:79:71:6b:b1:9e:75:22:
c5:c0:24:a3:05:1a:7d:ec:30:ce:a2:4f:0f:6e:f5:02:ef:43:
34:4b:2d:7d:96:07:6c:ae:b8:a0:10:91:8d:00:fb:be:12:c0:
40:2b:64:b9:dd:c0:90:4b:8a:35:c1:c4:73:6c:e1:b5:eb:ee:
ae:0d:40:50:5f:56:0a:fe:c2:27:af:4a:4b:46:75:a5:25:fd:
9d:a5:99:16:63:1c:11:a2:b5:c7:3e:bd:f5:2b:b3:42:8e:0c:
37:53:50:3b:9d:18:42:05:1d:69:55:b7:80:9a:1f:f9:85:74:
60:c0:74:5a:cf:3a:f4:7a:49:ea:e1:82:fa:a3:a4:ae:c9:c7:
42:ce:e1:e0:83:b1:23:43:af:ef:32:73:f8:a8:cd:ff:cb:ae:
c0:cc:70:fe:ff:79:73:36:aa:f1:e1:8d:4e:36:af:c0:ff:65:
0c:7c:35:d1:4b:61:43:95:a4:16:f6:7a:39:f5:0d:34:5a:b5:
c9:2c:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:44 2026 by rpki-client