Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e73a352-eb27-42d6-a921-e4c996c7d5d5.roa
File: 0e73a352-eb27-42d6-a921-e4c996c7d5d5.roa (raw, json)
Hash identifier: R/9nVHqb/QyPGJ5gDSo88DKLrodPYXjgoNIh50YpOrk=
Subject key identifier: 41:7B:52:E0:05:BA:FE:66:84:EE:BA:5A:5B:D4:8C:02:84:BA:88:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F8EE42EA16C7B8CA1546FCDCE20EA4047F8969D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e73a352-eb27-42d6-a921-e4c996c7d5d5.roa
Signing time: Wed 09 Sep 2026 16:14:04 +0000
ROA not before: Wed 09 Sep 2026 16:14:04 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8e:e4:2e:a1:6c:7b:8c:a1:54:6f:cd:ce:20:ea:40:47:f8:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:04 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=b9fb4e925964efac129d5028c1a0a9f8c61fc7a93513c26393cdcb05f62a1c43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:bf:9e:db:98:77:d3:59:c6:6f:e7:47:c0:
17:83:41:91:24:68:b1:fe:f7:dd:db:c9:95:fb:40:
a6:4d:b8:54:e1:09:b1:b8:7c:ab:90:fd:65:33:1d:
15:b5:9f:b0:9e:4d:50:79:31:ab:7e:ac:c4:9d:d0:
e5:e1:4d:c9:26:8f:e7:6a:47:94:9f:54:84:9e:fb:
df:c5:b5:38:1d:b1:26:75:be:c0:08:50:f3:e4:19:
b7:4f:e0:28:84:bc:a0:93:e9:73:91:3f:a5:04:e2:
d8:be:fd:1a:ee:62:1a:64:27:cf:8f:19:a5:8a:43:
f5:05:68:72:9f:48:d6:0b:8f:dd:d1:ed:10:f4:f4:
cc:e7:95:f8:28:98:f2:68:d9:66:5e:d2:b7:23:4a:
6d:48:27:c7:64:d0:80:4f:d7:fc:2b:1e:ff:d5:73:
15:31:d0:6c:e3:6f:63:ce:70:17:1c:77:da:ad:21:
9d:1a:ee:07:79:f9:76:df:d4:5b:2c:5f:87:16:dc:
38:ee:62:27:43:a3:5c:ea:47:0e:cc:5e:6b:57:a6:
2c:40:a6:a2:8b:6c:26:9a:cb:21:2d:bb:0b:76:90:
0a:19:5b:29:2b:8d:d3:c8:9f:ba:88:ac:f3:81:db:
7c:c5:af:3b:33:fa:0f:c7:47:94:1a:1d:f8:03:83:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:52:E0:05:BA:FE:66:84:EE:BA:5A:5B:D4:8C:02:84:BA:88:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e73a352-eb27-42d6-a921-e4c996c7d5d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8800::/40
Signature Algorithm: sha256WithRSAEncryption
6d:ec:2a:b3:75:22:83:00:f5:a7:3b:61:89:30:68:8e:71:6b:
3e:d6:43:a1:b6:80:93:2a:85:d0:4e:b7:a4:fc:db:12:a0:91:
87:d7:ed:3e:23:62:fc:dd:c6:19:3b:c5:ec:b8:79:6c:16:34:
5f:f4:c2:35:8b:6a:d9:9d:49:72:a1:d9:7d:21:95:ba:57:cc:
95:2f:36:d4:fe:e3:6c:58:74:fb:d6:59:1a:f8:68:fa:46:a0:
cc:06:0e:1a:c8:fd:12:cd:62:da:fb:99:1b:b9:59:f6:0e:6b:
2b:21:ba:f4:69:55:3e:c9:7e:83:b3:71:d4:cd:e9:b4:e6:12:
68:4d:31:77:1e:9d:ca:5f:0c:43:27:66:25:c9:04:e8:39:fd:
7d:7b:3f:d1:bc:ec:f7:fd:3b:45:1b:da:b1:f8:41:b6:7c:64:
50:6b:fe:7c:b8:30:10:39:97:f4:f1:f9:d0:dd:e8:5e:cf:9b:
54:64:31:5b:fe:c1:42:a7:36:78:d8:5f:f9:30:19:18:05:2a:
44:88:c6:e6:ca:ea:54:78:e5:a4:68:86:79:39:87:e0:36:64:
88:b3:0b:96:33:cb:c8:a9:2a:cd:9f:6b:cf:77:b5:db:54:5d:
8d:84:9d:53:a0:5e:19:dd:c0:5f:c9:e6:35:a5:e2:d9:0e:13:
71:4f:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:26 2026 by rpki-client