Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc452689-b0a6-4816-a48a-8c8854d225f8.roa
File: fc452689-b0a6-4816-a48a-8c8854d225f8.roa (raw, json)
Hash identifier: elZ6ANbiMmo/Qphw4cn+Jl+gOBKrDxGQ00/3d68AKyQ=
Subject key identifier: 79:27:FB:4C:C0:0E:22:0B:E9:B9:66:23:AC:18:DA:21:12:8B:EF:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E200D0D191BEC55096619B22238E26C8CF84E23
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc452689-b0a6-4816-a48a-8c8854d225f8.roa
Signing time: Thu 15 Oct 2026 03:30:55 +0000
ROA not before: Thu 15 Oct 2026 03:30:55 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:20:0d:0d:19:1b:ec:55:09:66:19:b2:22:38:e2:6c:8c:f8:4e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:55 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=87a1041f005f085731871bcf4e2e6c9fe6a1d54624124df02ff7badae2895d0c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:96:e3:22:98:8a:23:48:57:79:f3:b5:09:
8b:1a:33:b7:2e:b1:d0:8d:f0:e2:5f:8f:e4:47:09:
a3:fe:4a:ee:7d:9c:df:77:5b:38:b9:d3:bf:ba:ee:
92:95:a7:f2:a6:12:07:5f:a2:5d:79:8e:30:0f:fe:
e0:a0:6a:07:3e:5a:69:b4:95:cb:73:74:cc:98:27:
23:b2:c1:89:e5:da:6e:dd:59:02:03:03:5a:17:ac:
1d:87:d9:c3:c9:a1:c0:fb:37:d6:90:04:fe:3f:8f:
35:c4:1f:5d:26:2b:11:20:4a:34:0e:d5:9c:f1:5a:
9e:0b:26:db:94:8f:1c:ea:79:87:bc:13:dd:74:78:
6d:dd:9c:da:86:88:47:67:80:08:5f:32:63:68:cb:
0c:1f:b7:cf:0b:e3:70:52:22:27:66:6e:b0:d3:0c:
29:ee:f6:33:2d:20:15:da:dd:d2:b5:46:f8:22:a2:
2c:3e:74:e1:8c:62:b5:6a:70:6a:2e:b4:4a:2c:69:
cf:ba:d5:fe:6e:66:c2:c6:09:69:11:a7:cc:97:37:
93:90:fe:5e:52:51:1f:b4:71:27:28:4f:23:65:26:
59:5e:1b:a6:1a:db:2b:fd:a1:62:22:31:d7:07:ec:
e9:fb:2e:56:37:d7:42:dd:b8:98:db:56:0d:dd:67:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:FB:4C:C0:0E:22:0B:E9:B9:66:23:AC:18:DA:21:12:8B:EF:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc452689-b0a6-4816-a48a-8c8854d225f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:eb:c1:eb:ef:a6:b9:c8:5b:e3:cb:51:48:84:a5:e5:e7:de:
89:4d:f0:c5:df:91:31:60:84:00:74:c1:c0:08:8c:a2:9f:92:
93:ed:36:4d:43:9d:bb:77:94:ef:ce:82:1a:69:df:56:e8:0b:
fb:d4:97:24:e8:d3:5d:e7:85:ca:c2:7d:76:cc:d1:50:9a:57:
99:44:3f:22:e6:18:e2:45:09:35:13:c7:3c:ed:c7:c5:23:0a:
e3:cd:bf:1d:8a:69:d1:dc:7d:89:7d:c2:7d:30:52:da:3c:a8:
40:e9:62:b0:ab:4a:5c:e9:6b:d7:b6:f2:2a:da:fb:d5:c7:0e:
81:eb:71:75:1d:88:46:5b:10:02:e6:b3:61:cc:96:74:a4:8b:
98:c3:ea:ee:56:e8:d8:46:ea:55:d5:a3:b1:25:59:5a:06:3c:
c0:67:10:b5:ff:2e:b2:81:32:ba:81:46:89:23:96:5c:88:c5:
c6:50:d0:93:1a:58:7b:10:0f:63:32:a1:c1:3a:b7:83:3c:4b:
1c:95:1c:10:8d:fa:18:78:1d:ba:04:38:c3:d8:11:9b:20:a4:
42:13:bb:01:f3:15:31:5c:9c:e5:58:cb:e3:6e:3d:1f:2e:30:
fa:ea:fc:07:ea:d4:e7:b8:87:82:d5:4a:18:fe:67:99:2f:b8:
7e:43:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:48 2026 by rpki-client