Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
File: d2fe4803-5028-4c31-b369-a86c9539bfa2.roa (raw, json)
Hash identifier: O7In3igeZTzwa4ajb0IWLRt+WKiKt4J1xDQrCdP+NCo=
Subject key identifier: B4:D0:C4:B4:49:8B:E9:CA:CD:0F:AC:4F:59:5E:2C:A1:31:4C:E1:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 238DDB7461270363F440470B3C51C470D783434F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
Signing time: Thu 22 Oct 2026 01:40:06 +0000
ROA not before: Thu 22 Oct 2026 01:40:06 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8d:db:74:61:27:03:63:f4:40:47:0b:3c:51:c4:70:d7:83:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:06 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=4fa3d6418d27b633be8d5ce74bd43e84b23ee66240c05c08c654298976622177, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:1d:d9:5e:9d:88:5e:07:6c:2b:eb:72:45:
c3:d2:57:be:dd:42:5f:21:02:51:62:73:f7:c0:85:
3d:45:1d:87:46:88:a3:cd:48:8e:13:12:39:7c:ad:
b2:b5:36:b1:f9:c4:a9:58:13:ed:75:e2:cb:28:9f:
08:fc:50:c1:de:57:dd:a8:a4:11:c9:00:ee:68:48:
f9:f2:45:ee:e6:72:63:cc:75:46:bd:f7:35:c1:dc:
68:4d:18:26:49:e8:0f:52:b5:d8:69:a0:8b:df:82:
d1:7d:f3:55:27:07:dc:f9:09:be:f3:a0:97:c5:a3:
3e:14:40:33:14:4c:46:3c:50:c6:5e:5e:d6:71:9a:
47:03:2c:78:98:65:94:58:7c:e3:9f:93:23:5e:bd:
c1:31:3d:12:15:a7:5a:1b:23:b7:c7:cd:86:8a:28:
fc:2f:4a:91:f5:c0:c9:f8:2e:32:e7:95:81:03:b8:
d8:48:c9:ec:b0:96:58:7b:42:b1:63:d5:d1:16:d4:
48:d4:63:23:e7:e4:18:91:36:65:c9:bd:77:50:35:
c0:4f:95:45:46:f4:f4:89:4b:e2:a4:0b:d3:98:e2:
d3:3e:94:a7:41:e3:14:51:31:e4:6f:d2:db:7a:c8:
f2:af:13:8c:f0:a6:23:15:12:b7:f9:01:cb:88:ee:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:C4:B4:49:8B:E9:CA:CD:0F:AC:4F:59:5E:2C:A1:31:4C:E1:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2fe4803-5028-4c31-b369-a86c9539bfa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:8000::/48
Signature Algorithm: sha256WithRSAEncryption
5c:95:78:8a:0f:27:1d:63:84:71:d2:ab:98:f7:1f:ba:17:98:
6b:17:e5:f2:73:27:77:26:6d:09:14:e5:e8:84:51:ff:bf:bb:
89:4c:24:6d:cc:ee:67:70:14:b0:7a:f4:33:c1:b2:89:f6:2c:
70:e6:08:40:06:58:7a:c9:f5:83:34:77:ce:ca:22:bd:e4:94:
bb:24:47:95:65:c4:7d:87:21:31:87:e9:07:33:5d:c7:8e:e9:
f9:3e:1d:21:d4:3d:14:ef:1e:a2:68:d0:0d:f4:ea:9f:33:77:
86:5a:0b:14:c3:3b:78:f9:ec:86:24:90:cc:ba:0e:1c:03:1c:
a2:51:37:a0:21:d8:47:c8:21:6a:a0:33:b2:08:64:cb:1c:ae:
7a:3e:bd:ef:2f:38:77:2d:9c:18:dd:a0:8a:8c:b3:fa:8d:9b:
93:85:d1:66:b5:3b:dc:2a:31:52:8e:52:d4:26:ac:a9:99:23:
2e:1f:7e:19:35:7e:d8:92:d2:a2:9e:49:68:93:22:32:2b:f7:
fe:4f:d6:12:38:12:aa:57:fc:7f:4a:bb:6c:99:5c:03:b9:e0:
2e:0b:56:4a:ec:5e:97:38:8b:0b:1f:19:22:5c:64:2f:9f:fa:
60:a4:ec:eb:8e:9c:59:99:89:13:4a:56:ba:f5:4e:0c:fe:ac:
b9:f5:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:06 2026 by rpki-client