Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
File: 0b360e2c-382b-4420-8550-330a58e946ee.roa (raw, json)
Hash identifier: 66bwxG3YmCHaceq/z+qlEQsnF6gOrMSI5J4hZDPnhfc=
Subject key identifier: 56:7D:E8:8A:5B:D8:C7:EC:4D:EE:DA:A3:AE:5B:92:4B:09:61:7D:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4301599FCE978D600451CC7F43A51A7E7239B681
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
Signing time: Fri 07 Aug 2026 05:40:23 +0000
ROA not before: Fri 07 Aug 2026 05:40:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:01:59:9f:ce:97:8d:60:04:51:cc:7f:43:a5:1a:7e:72:39:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=872cece8ff1da14bd8d434101faadfd8811387a7ac22dc653bfc87dbeee0ec79, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:d6:17:89:09:bf:23:e2:d1:0b:ea:31:94:
18:27:49:61:b7:49:b9:d5:23:11:28:11:bf:7c:b4:
39:a8:24:a9:e5:25:db:8c:2b:5c:68:6b:7f:20:83:
a1:48:f9:7a:8b:7a:e7:c3:ae:bc:ee:3b:ff:e7:67:
ac:1d:43:0d:11:8a:0b:a6:4e:83:d4:de:0a:f3:d0:
a8:8a:a4:7b:bc:10:54:c7:ed:b7:33:92:9d:db:30:
a2:7a:b6:ae:1d:e1:7f:82:35:65:9d:3d:89:4a:1b:
bf:c1:0d:0f:b4:eb:33:ce:e6:62:65:c0:f9:6f:77:
81:fc:0b:ce:4b:3e:93:f9:40:6a:48:89:7a:5e:56:
0a:66:19:97:b2:e5:b4:42:af:97:72:7d:ea:f1:8c:
43:b6:c1:7b:d0:78:10:0b:f0:8d:51:99:9d:13:3f:
55:0a:29:e9:e7:71:2f:cb:1b:b8:ce:e8:86:a6:30:
8e:f7:9a:e9:58:f6:e9:fe:69:8c:c3:fa:14:17:66:
5e:d5:c9:33:6e:ca:c1:f6:62:4f:4a:fc:17:a6:41:
12:ae:7a:e9:d8:06:24:b8:e1:f9:75:98:25:5d:ac:
92:fd:15:6a:d8:01:c0:8e:eb:66:26:6b:e4:cb:f0:
1b:24:cb:92:ca:c9:88:8f:8b:b3:c0:14:e5:9a:90:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:E8:8A:5B:D8:C7:EC:4D:EE:DA:A3:AE:5B:92:4B:09:61:7D:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:6000::/40
Signature Algorithm: sha256WithRSAEncryption
04:1a:83:7f:3b:66:f3:d5:92:52:aa:12:5c:73:fb:1c:79:29:
61:13:31:0c:ca:35:a4:aa:63:9b:6d:5a:b8:22:fc:22:bb:cc:
9d:a7:ce:d5:e9:0e:ff:b6:a8:63:7c:a0:a5:cc:63:34:c1:3c:
bd:7c:a9:36:aa:a7:2a:9a:06:ed:b8:72:08:f1:97:46:03:4f:
69:60:bb:65:8f:87:f0:40:29:bc:73:88:ed:0e:4e:2b:4b:e3:
39:80:c6:2c:50:23:4f:27:7a:f7:03:43:23:f7:56:5b:27:d6:
5a:ad:87:38:27:50:5f:12:d8:e3:df:dd:99:59:b9:a2:a4:fc:
c3:05:4d:33:ef:72:cc:e3:53:30:54:a7:fc:b4:ac:ba:18:10:
9c:27:de:c0:4e:de:86:d0:b6:98:cd:fb:ba:11:ee:8f:20:2b:
14:af:37:95:78:0a:d4:83:0a:b3:aa:28:68:e7:de:03:07:5d:
e7:cc:57:49:3f:a7:c4:37:87:b3:3b:40:c4:61:fe:e8:dd:a3:
ef:ce:d5:05:0a:ce:69:ac:30:30:74:56:70:fd:cf:7a:3b:a6:
5c:32:bf:26:d9:17:46:7f:00:56:73:b8:09:62:59:04:14:59:
1b:16:c7:db:20:f5:3c:38:47:e8:34:3c:d4:b5:0d:e8:58:c4:
fb:35:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:14 2026 by rpki-client