Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
File: 03a11d7d-6d37-488c-8fe1-258c484d1682.roa (raw, json)
Hash identifier: HPQlMX5Qb0suP/vZrS/uobJo43oQdqn2/+iW630Ijd8=
Subject key identifier: FA:8D:8A:F2:D4:3D:7B:12:87:E9:EA:66:4C:EA:AB:66:79:6A:6D:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 034C1176AC527EF118D5176D15387BC4910AD8B0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
Signing time: Fri 07 Aug 2026 05:00:27 +0000
ROA not before: Fri 07 Aug 2026 05:00:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4c:11:76:ac:52:7e:f1:18:d5:17:6d:15:38:7b:c4:91:0a:d8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a3055026f524a423d10cb07bafd3f0703a7ce21d72d1b29411b49ff1dcaad619, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:35:49:b4:4b:6a:9d:08:6f:f6:73:7d:1a:
59:19:7f:df:d9:cf:6c:86:be:4b:b2:00:de:b7:20:
94:51:97:0d:5c:ee:b5:76:79:4a:40:bd:ee:18:70:
b2:5a:9c:3b:57:b1:02:e1:90:8d:5d:d8:43:c3:5c:
3c:5f:95:0a:3e:51:b8:0d:b7:94:88:3e:de:e1:2a:
b6:ee:a1:ca:f7:e8:99:66:75:39:f8:73:ef:f2:e6:
a4:34:c2:68:c6:79:b4:db:90:d8:09:3e:ea:78:0d:
eb:a3:32:50:78:b8:96:b4:0b:e6:d7:19:14:44:ef:
6e:79:e4:9d:8a:93:c7:7b:c8:8e:67:ba:fb:52:c9:
c8:b8:a4:bd:47:48:da:df:e1:0a:cc:e4:d6:ea:95:
92:1d:7a:e3:9d:2e:a2:13:46:cb:4b:e8:5d:a9:94:
96:35:88:61:f7:99:bd:48:38:89:10:fc:71:c9:5b:
ec:13:9d:99:de:07:06:a6:e0:73:95:f9:d7:36:15:
53:f0:25:31:64:90:24:b4:33:ad:ad:d9:b9:3d:9c:
ae:48:78:00:8d:24:52:0c:62:cd:39:16:dc:24:a6:
20:38:24:0d:e4:6d:ad:53:0e:78:da:ce:15:13:ae:
b3:ea:6f:cc:cf:5d:ad:bd:d4:4e:d4:58:95:bc:1e:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:8A:F2:D4:3D:7B:12:87:E9:EA:66:4C:EA:AB:66:79:6A:6D:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5a:55:fb:ee:9f:73:54:40:8e:6f:83:50:33:82:95:58:cb:38:
98:e5:62:97:6b:71:2f:1a:38:b6:05:b5:6a:e6:8a:28:06:88:
c6:8d:b5:65:17:c1:76:13:a5:2a:c2:8a:e5:d6:69:8c:b6:f5:
e8:1f:1c:f6:d2:40:7f:3b:02:a3:8d:6f:92:65:dc:2d:52:05:
29:15:40:ed:2f:0d:d7:1b:95:6a:db:19:d8:6d:94:da:52:8f:
bb:20:3d:91:50:3f:66:0d:80:82:51:a9:a3:f0:92:74:51:8c:
af:1c:10:cd:5f:1d:16:16:64:62:1c:34:62:12:28:d5:c9:ab:
80:10:7d:58:4b:20:6a:ac:b0:38:9f:b9:6b:48:55:7d:34:90:
f1:d8:cc:18:89:77:f8:2d:14:69:24:57:23:40:06:93:dc:64:
b3:94:d3:3b:42:06:05:5c:ad:b7:4a:82:9e:62:bd:3a:df:e4:
ae:b8:6f:ef:ac:0d:fa:17:c7:86:a4:72:63:60:c4:e0:f1:da:
4b:b3:46:96:ba:7d:a5:05:73:3f:7c:b1:09:60:ba:f8:43:47:
93:67:67:44:b3:b2:61:f7:ae:7e:a9:02:03:1d:ce:23:91:02:
4d:a2:9f:f6:d7:e6:d5:d2:7a:0b:a8:92:e8:07:26:06:5f:68:
3b:8b:9c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:58 2026 by rpki-client