Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
File: 01309cf4-63f2-4f18-9689-8db4888bbe62.roa (raw, json)
Hash identifier: ekY9C06h7D+oQAyd5AlMMR1andg0/puEl9ojnTqp108=
Subject key identifier: BC:63:3C:DC:2D:10:EF:93:E9:AB:D9:79:FE:52:3C:38:20:CD:68:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 775C54E8CDE04BA14A3B55381D185A926027D716
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
Signing time: Mon 10 Aug 2026 01:00:54 +0000
ROA not before: Mon 10 Aug 2026 01:00:54 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5c:54:e8:cd:e0:4b:a1:4a:3b:55:38:1d:18:5a:92:60:27:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:54 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=c449a92325eb46e74b22db023557de839b63ce3059dc64191f89a611c73544f7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:cf:34:d2:ef:f6:6c:bb:d8:66:6f:b6:40:
3b:8a:18:14:c6:ea:66:4b:e4:ea:56:78:64:eb:ad:
84:bf:73:78:12:4a:f4:0f:a0:92:f5:af:e8:4d:e2:
36:ab:1c:04:ec:82:f5:62:4a:e5:f3:e8:0e:22:92:
8f:53:98:a0:dd:b0:f9:4b:34:09:58:a4:1b:1c:61:
be:d8:5f:3c:ed:33:61:f4:4c:b7:d4:94:6b:33:69:
1b:22:fc:a1:c0:93:c2:a5:df:23:54:02:23:d1:8e:
ce:25:ab:8f:7f:6a:54:25:48:0d:f2:83:69:10:cf:
f5:9b:89:1f:37:05:08:02:07:3e:07:ba:f1:d9:e6:
dd:07:7c:86:44:62:ef:9d:7c:07:63:19:11:e0:cc:
3c:ab:8e:2e:28:42:de:38:8d:bb:ee:6d:3c:49:02:
92:65:29:18:2a:8d:6f:27:19:ef:8c:11:7b:9e:20:
ee:37:69:14:ea:6f:a4:aa:98:2e:ec:ec:cb:74:89:
82:57:93:a4:0b:7f:6d:06:e3:bd:33:72:fa:bc:b7:
36:df:01:c5:03:bd:d1:8e:7c:a2:db:df:02:4c:75:
d7:49:36:2b:f3:f1:c9:d1:2a:d5:02:64:6b:13:d1:
b7:91:31:8f:af:c6:04:6a:1b:ea:9a:b0:16:96:bd:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:3C:DC:2D:10:EF:93:E9:AB:D9:79:FE:52:3C:38:20:CD:68:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01309cf4-63f2-4f18-9689-8db4888bbe62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:5040::/48
Signature Algorithm: sha256WithRSAEncryption
b7:bf:9b:4f:44:58:a2:b1:fb:ae:5d:2c:f6:fc:ea:7d:d1:9a:
de:0e:4d:6e:88:ed:e6:43:43:18:6c:a9:cb:18:c2:13:97:d6:
09:7b:00:5b:38:a6:3f:96:9f:5f:1e:a3:6e:ed:b1:28:f5:e2:
94:db:08:cd:87:6c:db:49:df:b6:5e:a0:d2:46:a0:4a:8a:b9:
07:8c:83:24:48:06:08:7c:d9:d1:72:b0:46:5f:82:1e:d7:64:
8b:00:d5:c2:65:c0:e8:e8:4a:bd:94:ee:8a:bb:fe:78:86:19:
65:4d:91:b2:23:43:49:1d:4e:b1:f6:39:b8:bb:5b:42:e6:fc:
f2:96:58:0b:0d:c8:e6:d5:2a:5a:27:2b:57:53:cc:9b:ff:29:
fc:0d:9b:8d:49:0d:88:3a:01:bd:58:34:e0:e5:54:f7:83:dc:
77:6f:3b:7c:55:ed:20:f5:9d:0b:cb:4d:08:13:5b:7f:50:85:
5b:6a:1c:1d:3a:ef:67:7a:20:3c:3a:21:59:58:64:e1:34:01:
5a:77:54:f0:0d:c6:41:99:ee:f7:5c:e2:f3:42:1a:40:57:c4:
dc:73:55:28:35:c3:eb:0c:e9:ab:c3:9c:85:25:b6:f8:f9:67:
78:94:a0:d3:dd:e4:d5:c2:7f:86:a9:6e:9e:5e:1e:0d:d8:9c:
cc:fa:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:49 2026 by rpki-client