Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bb54880-1127-4cb8-99f5-e27145030242.roa
File: 0bb54880-1127-4cb8-99f5-e27145030242.roa (raw, json)
Hash identifier: FeUJgf2itqQPqY60gxVbs/s0Dj5X1nY8S6RX/unvCdo=
Subject key identifier: 34:2E:5F:0E:C3:40:20:D4:58:C6:61:7A:60:A0:BE:A4:02:91:56:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A90E86EFF08941E46AC9E7E007649F9F56DC718
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bb54880-1127-4cb8-99f5-e27145030242.roa
Signing time: Wed 09 Sep 2026 16:15:19 +0000
ROA not before: Wed 09 Sep 2026 16:15:19 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:90:e8:6e:ff:08:94:1e:46:ac:9e:7e:00:76:49:f9:f5:6d:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:19 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=d128ce399062d78e12512cce2debbdf0f01b3b918ed93e506b49c2602e9e2ad4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:4b:e0:f7:c0:8b:2d:33:10:bf:72:9b:14:
99:0a:d1:b0:98:19:ab:ad:0b:1d:17:81:29:2b:f8:
fb:7e:63:3c:7e:67:7f:d6:4f:d2:90:1a:66:3d:3f:
08:30:b8:70:9e:37:38:b4:2a:38:89:12:b2:c9:0a:
42:03:c7:df:55:af:c2:9c:60:e3:36:8d:7d:61:11:
67:ee:6a:60:c1:84:92:39:48:0f:0c:46:9d:10:73:
b5:22:f2:c5:4a:1c:a4:13:3d:cf:1f:10:96:83:f4:
c2:54:ef:1e:ff:33:67:04:f6:8e:e5:a8:8b:be:48:
72:43:a9:0b:c6:37:70:1b:c9:ef:71:58:27:59:bb:
13:8c:49:e7:d1:7b:f0:33:ad:2e:c6:c9:bf:30:9e:
79:59:84:3f:64:2d:98:7d:2b:42:f9:d1:4e:a6:f2:
0d:9e:19:52:e8:23:d9:24:a6:46:11:33:55:71:2b:
0c:64:51:72:aa:c8:42:4f:5d:ce:61:61:a2:3a:0f:
6a:c2:9b:2e:3c:27:bc:83:ff:60:67:0f:47:bc:c9:
69:ef:29:ee:17:91:bb:bd:d8:ef:d1:e7:9d:8d:9e:
68:f3:34:c8:11:50:20:70:32:8b:d8:ad:8c:89:00:
2d:6c:33:ed:3d:b0:97:b6:51:c9:5e:03:60:76:9a:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:5F:0E:C3:40:20:D4:58:C6:61:7A:60:A0:BE:A4:02:91:56:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bb54880-1127-4cb8-99f5-e27145030242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:8800::/40
Signature Algorithm: sha256WithRSAEncryption
28:90:6e:2f:28:14:fb:8e:14:42:a6:e1:68:e4:8c:b8:7f:75:
d6:98:04:6b:6c:e6:de:6c:07:e2:88:dc:87:e1:65:79:d0:2d:
4f:0c:9b:ba:09:02:c3:0e:25:5d:c8:51:d7:fb:0e:bd:07:bf:
e5:8a:7b:de:d9:ad:12:ca:94:32:c2:32:4c:0a:52:11:27:5a:
52:2d:0e:73:ed:47:b5:2d:7e:8e:aa:f3:ec:4b:ba:b2:44:7e:
c9:19:88:09:fa:d7:47:ee:8b:40:39:d8:eb:0b:bb:ed:e5:b4:
f6:f1:1f:a0:84:4c:3f:6d:c6:82:ea:86:21:9b:73:60:16:df:
06:40:a6:f4:28:d0:26:6d:11:5b:07:49:7e:ac:58:24:ff:86:
4c:5f:0a:dd:2c:74:f4:19:04:cd:f6:a9:c7:65:0c:0c:12:43:
a8:cf:9c:54:e3:9c:b5:06:fd:6e:93:05:bc:8d:a9:d3:07:11:
98:1c:79:c0:2d:c5:ce:68:a9:bd:bd:c8:09:68:b2:f2:4f:9b:
f9:5c:06:69:d5:65:9d:85:5f:74:73:c1:77:96:37:51:9a:cf:
29:c4:eb:ea:21:db:20:2f:ff:22:93:7b:95:cb:a2:ab:5e:78:
42:4d:c4:eb:e1:4f:08:98:0c:a0:48:25:2c:3f:a1:73:0b:82:
e5:53:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:30 2026 by rpki-client