Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa
File: 05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa (raw, json)
Hash identifier: VhSsvz40hMA48IPNUMyifOAuyyxeHsLgp5QM0HBfp/Q=
Subject key identifier: ED:87:3A:E9:45:6C:D4:81:30:29:80:BA:A9:E6:36:95:13:CC:E3:49
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B5AB7A1D13ACD8E439E1057918FCA45E478FF6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa
Signing time: Fri 07 Aug 2026 05:30:50 +0000
ROA not before: Fri 07 Aug 2026 05:30:50 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5a:b7:a1:d1:3a:cd:8e:43:9e:10:57:91:8f:ca:45:e4:78:ff:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:50 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c5ab53a873c650407d12119dcff75bc1082510ff4efb843941ef6e141ee21bae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:53:3b:f5:a6:a6:0f:ae:7a:81:08:1a:e4:
7b:35:ed:81:f2:ec:47:56:a5:3a:57:6a:b2:4a:a8:
79:fa:7d:1a:96:75:72:2d:70:aa:35:03:16:8b:20:
e9:7d:44:2b:15:26:ca:8c:52:c5:66:35:e4:ae:b7:
85:8f:1e:c3:b8:01:3c:29:71:38:59:bd:ad:51:8b:
38:fe:41:e7:cf:02:1f:10:99:81:24:9e:da:e0:04:
dd:d0:97:72:c3:d0:9e:13:64:1d:91:fb:62:32:cb:
b3:d5:37:31:aa:e7:93:56:c6:e7:82:b1:4b:6f:41:
db:c9:ce:47:9b:5c:9b:20:ac:ed:d5:d8:14:4c:f2:
d5:0d:29:ce:b0:06:71:d0:62:c7:d5:4c:e0:1e:b1:
02:49:77:12:fa:a2:7e:b6:a6:99:c8:e0:bd:78:f9:
8f:32:d0:70:17:3b:ed:6a:03:52:ac:07:7d:13:b9:
74:99:11:3a:ea:4e:78:24:47:21:43:3c:95:53:43:
64:c1:00:07:ec:41:c6:ea:13:dc:73:44:fe:b7:db:
f2:55:50:8a:ed:da:6c:7f:3c:9d:2a:26:a9:3a:21:
57:1a:56:41:50:61:d5:27:c3:d4:b7:6d:4a:23:0e:
2f:47:8e:f0:d9:0d:cb:b9:3c:40:97:e9:48:ec:2d:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:87:3A:E9:45:6C:D4:81:30:29:80:BA:A9:E6:36:95:13:CC:E3:49
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8050::/48
Signature Algorithm: sha256WithRSAEncryption
1b:e2:a7:67:a1:bb:38:97:d0:01:91:40:1f:ce:4f:39:f5:09:
fd:e5:cb:d3:ac:ee:c2:a9:9a:ef:b8:21:6a:98:b7:bb:18:8a:
ef:22:b1:56:a5:6b:51:e1:f1:4d:6b:c3:36:df:ee:93:a8:78:
3c:f6:38:e1:46:12:5a:6b:ad:98:b5:2d:b7:cc:dc:90:06:aa:
37:2b:cb:d0:fb:26:9e:ea:8a:9e:6e:09:f8:0e:e8:b8:c8:c7:
f5:36:e9:35:d2:2c:fa:45:b6:7f:38:09:65:05:c1:31:20:0f:
d1:3d:5b:f5:8f:66:eb:22:4a:82:9d:5a:5f:2c:94:16:f9:b9:
b5:90:56:35:45:d4:06:1f:16:b0:ff:8f:a0:2b:d3:52:52:10:
85:f6:08:2a:fb:a8:8e:be:44:3e:58:6a:7c:9b:4c:21:d9:70:
24:e3:2f:2f:b8:47:e7:0b:6d:97:24:80:df:d1:30:51:4b:21:
87:15:6d:3c:cd:c9:ce:56:f9:8f:42:a6:41:a7:34:25:7b:2f:
84:43:2c:1b:a4:ae:b2:ce:8e:7f:c8:60:8d:08:7a:ab:6e:ba:
6e:bf:e6:6a:33:7f:72:12:99:b7:d0:f0:48:c3:a9:9b:aa:7b:
a3:89:6c:87:9d:62:2d:07:33:af:a1:a6:1c:c4:c7:a0:c1:90:
70:f0:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:21 2026 by rpki-client