Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
File: ec82a459-cf20-418a-8b9d-03c08dc90b73.roa (raw, json)
Hash identifier: M9qWqmu+SOQYbg219IGquNIZnVGGLZAEXWnP59oaEcA=
Subject key identifier: 1C:F5:36:14:52:65:AF:E3:92:22:12:7C:39:21:F9:17:48:7C:22:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 91DE3979309F2121809C8F4EBF93DAA28F414B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
Signing time: Mon 26 Oct 2026 04:40:09 +0000
ROA not before: Mon 26 Oct 2026 04:40:09 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
91:de:39:79:30:9f:21:21:80:9c:8f:4e:bf:93:da:a2:8f:41:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:09 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e9470521541900a4a071d86f8df7c8de5597a48e463108fe1d66b9f39f230674, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:05:c4:61:ce:ee:aa:b6:62:ec:9d:45:11:
c6:6c:18:5a:b1:5e:bc:21:cc:59:97:5c:47:ca:b0:
b3:72:7a:68:f9:8b:0a:dc:0a:9a:b7:7f:1a:a2:5a:
fe:7f:fe:f6:d5:07:49:bd:af:58:e1:96:46:1b:d7:
79:c9:c7:2f:4a:bb:d2:d3:c9:a3:32:35:87:f1:48:
3f:fe:e1:61:78:a1:cc:31:96:ad:92:11:de:cc:cb:
c7:db:9b:14:0f:26:eb:59:bd:5e:76:45:07:72:ae:
07:34:b3:30:fd:40:3c:92:47:9c:cc:8b:3a:2a:f6:
12:7c:f9:7f:36:e9:0a:f3:7a:4f:6d:c9:df:5c:8d:
c9:54:d3:48:2e:6e:ba:a5:00:ed:48:71:b0:7b:97:
44:67:17:89:fd:8a:a5:c1:61:91:74:ed:6a:03:0a:
8b:43:62:99:7e:bf:47:03:0d:cd:bb:42:d4:9e:8b:
a5:eb:f6:f4:e7:e3:55:1a:e9:48:e6:d0:49:3a:38:
c1:af:c1:d1:57:ed:c3:52:33:cd:5d:51:3f:94:e1:
ed:96:2e:bd:1c:85:18:17:0d:41:d4:98:40:a7:01:
bc:83:35:4f:9e:06:2b:42:b1:b8:ce:bf:8e:42:31:
eb:da:86:77:c6:da:33:91:7a:8a:1d:e1:07:f5:23:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:36:14:52:65:AF:E3:92:22:12:7C:39:21:F9:17:48:7C:22:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ec82a459-cf20-418a-8b9d-03c08dc90b73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.3.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c8:03:e9:26:8c:82:1c:6c:73:c8:a0:37:95:6d:e6:05:02:
4a:8f:fd:4c:d7:1c:20:e0:d9:ba:bc:00:8c:d5:fc:56:c5:76:
5c:33:86:ae:d7:3f:56:dd:7d:83:f5:84:22:50:ed:ee:a7:30:
48:be:3e:34:2f:44:27:ed:41:ae:5c:14:9f:7d:2b:82:3c:64:
c3:1d:f5:69:c1:c7:13:03:e0:4b:fd:97:81:30:92:6e:ec:a9:
85:64:04:fd:68:b7:13:2e:19:ce:a9:32:87:ac:ce:c5:08:f7:
71:e1:7a:6f:bf:08:55:2e:ed:df:37:47:28:68:2c:5b:43:6d:
4d:69:4d:56:8b:36:63:4b:a5:db:c0:6d:26:1a:bd:9b:21:2c:
ea:9f:e3:ac:fd:b3:ee:60:77:65:a8:5e:fa:d5:a8:ce:27:65:
4b:7e:4b:81:4f:27:97:78:73:88:e5:28:83:dc:54:68:12:94:
da:41:3b:8f:52:44:76:f4:ea:d3:d5:9c:0a:35:6d:30:12:88:
97:a8:ca:1a:d5:20:6c:3f:31:39:e4:38:05:60:15:c8:99:37:
62:16:63:b1:e1:68:c6:7a:9b:62:ea:19:e6:e8:89:92:dc:d8:
5b:f3:3e:09:f3:b4:75:97:06:86:cf:4a:50:69:c7:c1:3b:7f:
46:50:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:43:15 2026 by rpki-client