Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec66173-52ba-4e6f-b1ec-889563dfb748.roa
File: fec66173-52ba-4e6f-b1ec-889563dfb748.roa (raw, json)
Hash identifier: Bpkv9tSuDJQrnmQiZ0V4wVWTKmuVxdiCsQl+YdxH+Gg=
Subject key identifier: B7:FA:AC:83:BF:4E:7A:7A:CF:63:06:21:75:98:6D:46:23:E7:DF:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 496E30139B35F757B6FC0A2AAD492AFA8BCE6F83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec66173-52ba-4e6f-b1ec-889563dfb748.roa
Signing time: Sun 04 Oct 2026 00:30:15 +0000
ROA not before: Sun 04 Oct 2026 00:30:15 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6e:30:13:9b:35:f7:57:b6:fc:0a:2a:ad:49:2a:fa:8b:ce:6f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:15 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=35dd2d410715b1981fa3b5ddc4a9f4396e57c9807e8c96bf25d1ff075ddf2165, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:fd:4a:7d:7c:b7:56:1d:49:71:d1:73:41:
72:96:7f:ea:13:75:f6:6c:9c:e4:db:f5:87:79:d0:
b3:2d:8a:f7:0b:cd:a7:17:99:b5:26:1f:ed:2c:dc:
a1:4e:99:8a:09:9d:61:29:ad:0d:f9:ba:e4:c1:46:
b9:e5:47:90:f0:55:e3:f0:68:43:62:2b:59:50:f3:
e6:11:89:86:59:6c:20:eb:f7:bb:12:87:87:f7:a9:
d6:7e:df:b6:1b:be:ad:86:8e:e7:95:22:b8:18:f3:
6e:81:9b:1f:e8:13:65:22:18:b1:9f:4b:f1:1f:6b:
92:5a:55:9f:67:b7:75:4c:df:3c:19:e5:ee:76:20:
b4:a3:e1:84:29:87:74:f2:73:73:f7:8b:13:80:3a:
55:2c:8f:42:fb:da:8a:b5:b8:8a:ce:de:89:30:ee:
a7:f6:08:21:ac:7e:b2:d0:6c:c5:ea:1e:45:5c:d0:
32:5d:f1:e2:18:16:33:81:a4:6d:ca:5f:a9:91:d4:
b6:66:9d:48:a0:a0:41:c6:bf:a2:d5:9a:34:fb:27:
57:69:08:fa:da:cb:1c:08:c5:60:23:0a:56:9a:ad:
46:a2:73:c9:17:66:f4:30:a1:97:84:9f:f6:da:d4:
fb:de:23:c1:31:83:6e:bf:d0:04:6e:1c:68:36:ce:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FA:AC:83:BF:4E:7A:7A:CF:63:06:21:75:98:6D:46:23:E7:DF:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec66173-52ba-4e6f-b1ec-889563dfb748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:6040::/48
Signature Algorithm: sha256WithRSAEncryption
03:ea:f0:96:f0:9d:93:7d:2d:4b:64:eb:f5:bb:d2:34:ab:5b:
04:f0:66:f9:5f:bf:b3:1d:68:54:d6:68:ee:f1:f7:5c:fb:74:
8f:8b:0b:f9:82:90:0f:50:e3:ec:a6:3a:39:11:f5:4f:4f:5a:
63:bb:ca:3a:e1:68:ac:c6:ae:2f:a5:4b:93:e4:81:63:75:47:
3f:70:28:41:03:d4:41:9f:78:52:0e:05:8b:7d:bf:2f:e4:10:
9a:25:b6:d3:e2:cb:92:0a:14:e5:53:7a:49:65:ae:6f:dc:03:
d5:92:a5:60:d2:60:f7:29:2d:ab:78:65:2d:7b:af:4d:37:f9:
a3:0e:cc:75:01:66:87:03:b9:77:a8:d8:36:f2:e4:c7:0b:d6:
49:23:a6:8e:fd:6c:fa:e8:00:13:28:1e:dd:b8:3e:92:03:b9:
82:6b:3b:dc:89:50:da:e3:30:7f:45:80:37:09:96:13:0d:af:
fa:d4:47:04:dc:e6:e9:61:68:3f:94:9e:1d:2d:64:48:e0:32:
62:dd:8e:3f:20:79:f1:42:5a:05:71:ac:4e:7b:c1:e4:33:9a:
33:34:c0:39:d4:a8:ab:e5:b4:51:6d:44:47:04:62:d5:98:de:
e2:e8:dd:fa:ef:cb:c3:eb:33:4e:44:a4:bc:35:68:e6:fe:40:
71:19:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:34:22 2026 by rpki-client