Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa
File: 0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa (raw, json)
Hash identifier: cDSQeHdfYonkl5ay6h+4PZuOzAWzMevQ9wvb16yChvg=
Subject key identifier: 11:79:3F:2D:D6:1C:8A:1A:20:33:C2:2F:EA:8A:67:F0:06:E2:B3:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35634C0B3E322FCB19620C58DFE5CF54526BBC7C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa
Signing time: Fri 07 Aug 2026 05:10:21 +0000
ROA not before: Fri 07 Aug 2026 05:10:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:63:4c:0b:3e:32:2f:cb:19:62:0c:58:df:e5:cf:54:52:6b:bc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a786d5d7520b03d30f01bfb06de13b61bf2fe1b36b7def3e49ef52eb04742af5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:af:a3:8b:35:5f:8f:ab:ea:55:d1:95:8b:
67:1d:75:26:da:71:f0:aa:a9:23:cd:a6:5b:a3:5e:
e1:e0:de:06:66:98:b0:3b:a8:93:c5:71:ba:70:40:
96:fd:25:99:ef:b4:ab:dd:c2:d7:89:f8:3e:ef:66:
dc:c9:88:28:07:82:94:f6:f3:1a:3c:5f:3d:15:13:
30:4b:5b:64:c6:d5:0f:bc:9d:9b:a1:01:27:46:e9:
c2:43:5d:fb:77:26:32:82:6d:61:f6:d6:c8:63:23:
5d:9f:c1:65:a4:d8:28:32:6a:a8:a0:d4:98:9d:27:
ea:d4:5c:98:bc:a4:c1:c1:0d:75:9b:95:bc:ed:a1:
6d:2e:d7:9c:e3:fa:f4:84:7e:19:1f:3a:18:52:52:
7a:f0:94:57:67:ab:ec:6c:44:d6:b7:b3:56:73:17:
0c:12:e3:34:09:40:54:9c:b3:3c:4a:0d:f7:6f:4a:
4b:87:b6:76:ea:11:cc:0b:7d:3c:be:30:10:96:3d:
7a:25:7b:80:9f:18:49:68:92:85:7e:3f:91:86:61:
4c:b0:cf:3a:78:7c:92:98:89:bc:10:45:15:28:c3:
a8:99:16:37:55:53:7d:f1:4b:7c:7c:b3:24:ed:f6:
a1:cf:ff:8d:d2:f8:b2:fd:e6:7a:b1:29:30:c3:b9:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:3F:2D:D6:1C:8A:1A:20:33:C2:2F:EA:8A:67:F0:06:E2:B3:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:1000::/36
Signature Algorithm: sha256WithRSAEncryption
4c:76:6a:7e:48:87:44:f8:3a:fa:10:c8:e7:43:2f:45:29:9b:
d9:88:54:02:55:5b:ee:97:ae:2f:80:cf:84:c2:d9:0d:d9:46:
06:e9:fa:58:ef:d8:ac:50:eb:71:ed:b7:53:b1:4d:c6:18:6c:
83:a7:f2:3b:33:e7:b7:1c:b2:05:e2:2d:99:e4:11:a1:95:45:
77:bf:50:fd:a8:5f:bd:c5:2d:98:34:2b:a6:fd:06:ef:7f:19:
e1:8f:6d:d8:49:a5:9e:4b:d4:a0:ad:f8:44:11:51:46:19:38:
b1:b4:29:e2:51:80:88:b0:e7:93:39:37:ec:6a:8b:06:44:df:
47:b6:60:55:7e:4a:9f:1e:18:1b:23:22:8e:3a:e5:2f:c6:69:
5b:bd:fa:79:ff:c9:c2:84:1d:95:af:99:29:db:48:21:10:24:
1e:01:c8:db:31:5e:87:ae:ff:bb:f7:16:ca:8f:72:71:5c:02:
da:41:06:b4:b3:8a:dd:25:62:f3:a5:a7:b1:ef:a8:af:7f:a1:
6c:63:3c:ea:bf:fa:2c:01:11:fe:28:9a:f2:77:09:cb:19:35:
6d:e8:3d:25:73:a6:fd:dd:88:2f:c7:c5:fa:8d:2e:8c:2a:a0:
7b:83:d3:9d:44:99:10:ad:95:36:28:77:bc:8f:39:36:dd:4c:
dd:03:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 23:39:45 2026 by rpki-client