Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
File: 49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa (raw, json)
Hash identifier: 4fkMJxNMPXLVPG8AkfzfFI7tzappvAq49gpGyrQJFhw=
Subject key identifier: E2:B0:87:03:B0:59:A0:4A:F4:50:61:AA:66:99:EC:38:96:39:48:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62A9FBEF78A0B1DC27D284068A02BA4438AEBC08
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
Signing time: Wed 04 Nov 2026 00:02:31 +0000
ROA not before: Wed 04 Nov 2026 00:02:31 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a9:fb:ef:78:a0:b1:dc:27:d2:84:06:8a:02:ba:44:38:ae:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 00:02:31 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=123f74a210c28af94e9b6a353d905b32c06e6a6e018a68a4cbac9b41e1fb0680, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:38:bf:26:4e:2a:b7:78:b4:47:bc:4a:bc:
c9:c3:ba:62:41:d6:64:ab:5c:b3:88:17:7f:83:3c:
e3:94:9a:23:65:5f:bd:99:56:6a:3f:40:5c:b2:2c:
22:b3:29:4d:1e:d1:ea:9c:2e:1c:72:50:c8:ac:aa:
ed:b6:c7:54:49:b4:7a:18:08:a5:92:30:96:73:bc:
32:0d:bb:c2:8c:72:6e:44:29:92:12:27:46:43:b0:
87:90:26:f5:28:fe:81:5f:ed:41:88:84:28:45:d2:
ff:23:74:40:47:81:9b:2f:89:59:4e:f1:d5:60:2f:
42:ff:75:6f:17:a5:8e:6d:b3:80:30:96:f4:74:82:
05:39:70:03:c5:4c:a9:3e:6f:89:cc:63:53:fd:59:
a1:3e:c1:ff:f8:19:e4:4a:65:9d:83:26:78:05:ab:
60:56:8d:30:9b:ca:02:e5:1f:d3:b1:0f:af:f8:a5:
8c:e2:bd:aa:59:05:86:5a:33:27:39:66:90:6e:29:
07:0e:e1:51:06:1e:82:e5:7d:9b:48:ee:02:c7:b4:
e2:84:e1:b4:ae:da:9e:96:38:41:f7:36:62:bd:a5:
8d:6e:20:20:46:ec:b3:c1:dd:9a:35:bd:e1:00:8d:
d0:44:9d:9e:05:23:b9:43:91:87:c1:6f:a5:b7:f2:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:87:03:B0:59:A0:4A:F4:50:61:AA:66:99:EC:38:96:39:48:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49c2a5be-4bb3-4c42-b3cb-e0cbac28f97b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b::/32
Signature Algorithm: sha256WithRSAEncryption
a1:9f:37:25:40:6b:bb:8d:4e:dd:6f:be:eb:8a:27:b7:d8:db:
b6:16:7c:05:be:43:2f:86:9b:8a:e6:cc:f1:89:fd:47:a0:b1:
fb:b1:0e:f8:5a:49:ad:54:ea:b6:ba:ca:ff:c6:71:79:ce:14:
7a:5e:85:28:e9:d1:b9:73:3f:5c:15:89:96:8d:53:43:ab:81:
ab:19:04:13:90:0b:17:86:00:1c:0f:be:3a:45:95:e1:c4:08:
7b:ea:74:a5:9b:0d:87:2d:f4:5c:60:1a:64:e2:76:12:32:8f:
40:78:7e:d5:8b:cc:a5:83:c0:48:e4:df:a6:f1:91:b6:b2:25:
fa:a9:0a:de:bb:fb:a9:3f:0e:25:77:54:77:20:fa:74:cc:28:
fb:b9:d0:12:1c:d7:83:49:ca:1b:b3:6a:fa:69:2a:a5:a7:87:
27:44:e3:16:cf:16:ee:94:cd:5b:ca:ff:5c:05:27:85:df:2d:
2b:b6:e2:dc:06:08:5d:05:0c:54:a7:f0:f4:37:72:b0:90:bd:
d3:c3:51:e8:d8:f6:a9:a1:09:f4:20:e8:35:6b:fc:d2:f9:91:
38:71:e2:a0:84:03:48:cd:6c:dd:ae:88:49:aa:e6:35:0e:61:
16:70:c0:b7:ff:4d:2e:13:83:ef:90:39:bf:fb:6c:c9:10:f0:
15:a6:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:10:23 2026 by rpki-client