Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08bc100f-f463-46a0-8799-66d1093e07e0.roa
File: 08bc100f-f463-46a0-8799-66d1093e07e0.roa (raw, json)
Hash identifier: 3RJoAu/Pw2BZHDhOl0BwHZCd5THZnxXjH+TOzMNOQ9k=
Subject key identifier: 58:2A:55:96:A9:1C:E5:46:8F:60:53:02:42:76:D1:3A:06:C9:B5:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 487A676B387DD99944B0D9971069C824A2CD5598
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08bc100f-f463-46a0-8799-66d1093e07e0.roa
Signing time: Wed 09 Sep 2026 16:14:04 +0000
ROA not before: Wed 09 Sep 2026 16:14:04 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7a:67:6b:38:7d:d9:99:44:b0:d9:97:10:69:c8:24:a2:cd:55:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:04 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=07e3e52df1e3fc8d4611ae0a373ec1cb506ab199a5b19060881ab69cff9801e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:a3:f8:e4:7a:e7:f3:fd:a9:fb:0c:97:b8:
50:6a:03:06:4b:c2:09:46:c7:45:9b:47:c1:3e:7e:
8d:e9:f5:f0:53:15:2d:d4:78:55:ff:62:31:48:e6:
25:4c:10:d5:be:7b:5a:68:22:24:4a:2a:42:0e:18:
f6:95:37:f2:0d:26:31:53:1c:f3:9f:93:94:48:9d:
a5:84:ad:12:c4:00:b3:34:ae:06:02:7e:b9:55:45:
5d:e0:23:f8:e1:16:08:1e:18:56:4e:bc:58:30:ea:
84:75:72:28:d0:12:5d:a6:74:aa:55:25:2c:7a:10:
46:b2:5b:7a:1e:a2:77:1d:90:d3:4e:8b:ea:2e:01:
9b:f6:90:f5:cc:84:9c:45:df:90:36:82:2f:1e:06:
1e:d7:96:0e:8b:94:cf:02:62:8c:39:7e:fc:f9:fb:
6b:b6:69:96:a5:d0:04:78:3a:0a:49:ff:06:3a:14:
57:61:97:79:25:6a:75:44:8e:86:9a:ec:68:ee:e5:
6d:e2:92:b2:86:6f:aa:08:21:69:d7:6d:de:91:4c:
0a:f7:48:7a:53:b5:cc:ff:0a:75:60:52:ea:2b:c1:
e8:83:70:a7:d2:61:08:32:df:ba:15:d3:b8:02:11:
73:b3:66:d6:97:bc:1a:2f:44:68:b9:ec:99:54:d9:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2A:55:96:A9:1C:E5:46:8F:60:53:02:42:76:D1:3A:06:C9:B5:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08bc100f-f463-46a0-8799-66d1093e07e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:4800::/40
Signature Algorithm: sha256WithRSAEncryption
0d:25:26:99:26:fb:18:19:53:3a:2e:6e:b9:13:2f:9e:da:9d:
f0:5c:3d:85:42:ac:a4:68:28:e5:6a:c8:9b:de:30:f1:ff:e7:
0f:23:41:c3:11:c5:16:92:62:87:9c:93:0c:de:b3:f7:ba:4d:
5e:2f:2c:30:57:98:73:ce:b8:dd:01:f4:9a:1d:46:53:ff:a3:
43:60:62:35:87:b8:bb:ee:9e:f1:f8:56:b7:e0:6e:00:91:93:
5d:d9:ae:c9:59:e7:35:1a:a9:47:79:bc:1f:61:12:0c:43:f4:
4a:b6:93:1e:14:13:fa:c8:b0:36:e0:e9:a3:2c:5b:b8:00:ed:
cd:42:7e:f2:aa:6a:5d:ee:1f:1e:cb:7b:af:0a:7b:4b:91:d3:
29:55:09:28:81:76:83:fc:37:1b:d9:47:10:ee:55:49:77:6b:
d7:ff:59:97:8b:90:8b:4e:11:23:f3:db:c9:ae:17:1e:9f:26:
d7:b4:c3:d2:c6:e3:d7:5d:45:fb:b3:3a:b4:2f:fb:c7:12:87:
a4:84:09:6a:90:c7:c1:bb:1b:db:e7:c1:a1:62:29:5c:3a:dd:
48:63:d3:e6:c5:d6:d7:0c:7a:41:6c:28:07:38:2c:3e:d7:1c:
2e:05:28:bb:62:28:39:a3:26:74:a5:17:2c:d3:ef:4f:eb:1e:
0f:70:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:25 2026 by rpki-client