Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f51c56-79aa-48ca-895c-790a431bbd73.roa
File: 03f51c56-79aa-48ca-895c-790a431bbd73.roa (raw, json)
Hash identifier: PME/7uvy6/N8/PDKq0BOEy0ttoRxzr9Hyjt4QMINNRM=
Subject key identifier: CC:A0:FD:53:45:45:C0:D4:28:01:BB:CC:A1:F1:7D:04:DC:A0:9A:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DD235640FC9CF88720A25EBFC95A14DE448A419
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f51c56-79aa-48ca-895c-790a431bbd73.roa
Signing time: Wed 05 Aug 2026 02:00:08 +0000
ROA not before: Wed 05 Aug 2026 02:00:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d2:35:64:0f:c9:cf:88:72:0a:25:eb:fc:95:a1:4d:e4:48:a4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:00:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=8bb4aaa512c6a538f6b36d5346ff2985e0d74e90fd26d9b09ce8bce39a6372b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:89:27:67:42:f4:3b:26:c9:da:43:a5:d8:
2b:25:ec:2f:3c:cd:c0:e0:4f:0d:08:8b:ed:2b:f9:
cd:bf:69:66:04:27:7d:04:aa:d3:58:65:99:89:b3:
52:a4:85:4a:f8:12:b5:3d:de:22:eb:6b:cc:41:b9:
7a:2c:cc:01:52:eb:57:68:08:02:f0:64:20:4c:2d:
ac:e2:57:3e:39:9c:7b:10:d2:1f:27:94:5e:08:db:
cc:cb:e2:01:75:c2:7e:ff:56:6e:a4:4f:19:f8:66:
ea:e1:87:bb:a9:b0:aa:87:b1:ce:92:9b:92:ee:b8:
45:9a:fa:ed:a4:cb:94:c7:b7:fa:dc:33:0a:de:a6:
d7:e4:10:14:f8:e7:fb:97:ef:eb:b4:ca:5b:1c:8f:
af:68:a0:bc:3a:0c:6a:cc:be:61:23:01:01:a4:dc:
71:4b:1d:67:96:d7:46:3a:9e:11:65:9c:8c:b7:35:
a5:29:8d:f0:00:d4:ef:29:4f:13:57:33:51:74:90:
c5:d1:64:d3:0c:95:2e:37:16:48:65:8c:25:84:3f:
93:a3:3c:93:68:7e:96:d5:62:d4:7f:40:cf:b0:13:
06:23:6a:1e:e2:6c:ed:22:30:55:2a:fb:8e:7d:e9:
3e:9d:03:63:71:b4:1b:1c:e9:b7:b4:bb:aa:6e:a4:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:FD:53:45:45:C0:D4:28:01:BB:CC:A1:F1:7D:04:DC:A0:9A:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f51c56-79aa-48ca-895c-790a431bbd73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:800::/40
Signature Algorithm: sha256WithRSAEncryption
7a:69:30:11:55:87:23:32:62:2f:6e:98:8f:76:2f:28:76:d8:
e9:72:4a:db:0d:f0:9b:75:12:cd:c5:dd:10:51:b8:8e:ba:1a:
9a:41:57:87:66:54:68:bc:f4:a0:07:45:4f:5e:d1:cd:d0:f7:
6b:7c:18:66:7e:d0:35:47:a7:65:82:f6:6a:48:73:ee:09:65:
14:be:8a:c3:5e:a4:19:5b:3d:6b:35:a0:30:6e:16:3b:1d:de:
7a:84:0e:ad:fe:16:ec:cb:37:ad:29:65:a2:c8:cb:70:c9:e8:
4d:a2:86:c3:86:d2:ae:3d:e8:fc:25:04:7a:15:89:bd:bb:75:
96:03:29:eb:d3:16:4e:52:d9:e5:e1:66:44:cc:89:ab:f0:8b:
58:91:18:26:f7:4f:81:0b:fb:f4:1d:88:10:bc:dc:55:37:27:
63:17:cb:d7:b0:6b:e5:39:75:43:f1:d7:45:46:07:78:03:a1:
84:fd:83:c3:25:16:ed:69:09:cc:3a:1c:65:ac:a4:43:77:b8:
b7:89:11:f1:b4:60:8a:90:ff:e2:a1:7b:67:30:2f:a5:db:7d:
39:83:81:7d:90:b4:d9:31:cd:7d:c6:70:01:4e:9c:ab:4c:7f:
35:8d:3d:24:a7:c3:37:e4:87:d6:51:4d:f0:7c:c1:34:48:4d:
5f:99:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:39 2026 by rpki-client