Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b28278f-4fad-45f4-a194-c2e785f1c443.roa
File: 0b28278f-4fad-45f4-a194-c2e785f1c443.roa (raw, json)
Hash identifier: wvF0JsA5cDfetBBkQ2AoFrpAzCYSfwOuP6uA++OrYGM=
Subject key identifier: 85:13:B8:2F:12:46:48:D5:7D:4E:90:67:A5:21:19:6B:E8:0B:B6:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72809F33AA8DE701A46085D627FF5BEEAABD2CAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b28278f-4fad-45f4-a194-c2e785f1c443.roa
Signing time: Fri 07 Aug 2026 04:30:35 +0000
ROA not before: Fri 07 Aug 2026 04:30:35 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:80:9f:33:aa:8d:e7:01:a4:60:85:d6:27:ff:5b:ee:aa:bd:2c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:35 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ea336076c1cef30020bb0cbcacbf5c884e7852661108c11def5f9aa212c072d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:09:9c:65:fa:2c:78:ff:6e:ef:fa:c9:0f:
f4:48:99:e1:62:53:96:4e:25:5d:6c:c4:ca:86:8d:
7d:38:d9:55:1c:27:5d:53:6e:23:b2:dc:f5:c3:cd:
54:e0:23:1b:55:46:9f:2c:1c:88:1a:0d:8c:ce:e0:
6b:7d:08:e8:4e:11:31:da:39:3a:b0:14:57:68:8e:
33:a5:e3:e8:b7:ca:53:92:1c:5f:69:48:e1:1d:47:
64:c8:e3:01:b8:e7:2b:f6:69:51:02:3c:77:56:6e:
72:53:28:d8:62:cb:fd:96:a0:84:1b:06:c4:51:d3:
59:d9:77:e7:b4:d3:4d:03:d5:9d:fc:75:cf:4f:50:
c9:37:9e:d0:1c:76:f3:e0:24:f2:bb:b2:70:40:ef:
4d:92:91:5d:b8:1d:68:66:47:21:27:6f:80:86:3a:
49:c0:41:2b:f7:8b:d3:79:50:05:c2:51:f3:15:e6:
79:38:dd:bb:f5:41:4f:87:4c:b5:90:97:06:af:94:
e5:a4:b8:70:a6:fa:53:3d:74:e7:aa:3e:cb:ff:62:
d8:a3:99:92:01:99:ed:99:6f:78:1f:4a:d2:d1:20:
64:c8:27:d1:3d:7f:82:ae:1b:8d:b6:e7:b5:ff:23:
f6:e9:73:b8:20:b0:42:2c:61:15:42:e6:29:ee:9e:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:B8:2F:12:46:48:D5:7D:4E:90:67:A5:21:19:6B:E8:0B:B6:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b28278f-4fad-45f4-a194-c2e785f1c443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:800::/38
Signature Algorithm: sha256WithRSAEncryption
43:ad:3b:98:ec:5f:f2:75:4d:8d:c2:12:f5:f8:b1:b3:9a:3d:
e2:29:90:25:99:90:8d:dc:e6:8b:25:3d:db:16:d0:04:23:d4:
f4:a7:2a:1f:7a:0c:33:a7:8a:1e:98:18:c4:59:08:dd:5d:e6:
65:30:cf:a1:37:b2:f6:c7:bc:1b:46:4c:5f:28:ac:81:90:0c:
5d:f7:d6:7f:ac:f0:94:aa:e8:7f:e1:ee:94:4a:2e:95:7d:98:
79:11:48:f2:54:42:85:d0:bf:75:c6:fe:94:51:c4:5a:6e:be:
8d:51:5a:49:cd:96:24:be:d9:8c:b2:4d:62:77:dc:4e:6c:39:
e1:f6:2d:39:22:5e:fc:63:d7:37:c2:d2:9b:2c:07:52:89:0e:
a7:d8:cf:e2:97:26:99:73:7d:fc:1a:09:c6:64:22:ea:3b:99:
c9:36:26:44:7d:ab:4a:d0:ec:02:60:53:66:8b:64:9e:49:de:
2e:c5:19:80:57:a7:8a:49:a6:09:94:de:f6:dd:98:f3:f1:da:
4f:52:03:4e:4e:fd:a8:3a:98:46:40:fc:c5:21:17:b8:4b:77:
f1:1f:05:e5:ed:8e:16:7f:3c:94:6d:1e:4a:9b:7a:0f:39:6d:
d9:9c:2a:b8:f7:66:41:b0:de:f4:d7:6f:3c:7f:27:d0:4e:6e:
43:36:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:15 2026 by rpki-client