Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa
File: 0f301beb-477a-41c9-9c3a-14517ff754d9.roa (raw, json)
Hash identifier: 0jCalBq2+vULe+0lylxBER+1rJbgVyO/JyvXmijrIt0=
Subject key identifier: 0C:5A:CB:F3:D5:10:C2:42:2B:32:77:F9:A5:0E:B5:26:18:9A:2D:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32ECCD9BF1CB8E469A4C9C1E8A0E97604C502A80
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa
Signing time: Thu 10 Sep 2026 02:40:08 +0000
ROA not before: Thu 10 Sep 2026 02:40:08 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ec:cd:9b:f1:cb:8e:46:9a:4c:9c:1e:8a:0e:97:60:4c:50:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:08 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=fcef6691f9def86e7e33197154545d8afade93a98643d74723cdac9513a5e07b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:c1:2f:d6:b2:11:e2:39:fc:fb:a2:fc:79:
da:f1:2c:46:a1:a5:9b:e4:9d:8f:7c:a2:2f:e0:4a:
b0:db:f5:39:4a:e7:ac:89:e6:f9:5a:4f:ed:fd:30:
3b:0c:63:93:01:f6:3b:ef:a3:53:01:83:fe:88:ba:
57:16:9b:8e:b8:9a:e7:11:56:3f:8c:97:69:08:93:
c2:54:cc:de:13:16:0f:2e:5a:83:b9:69:2b:32:3a:
8c:02:dd:49:da:ed:93:ed:81:ef:de:2c:e6:11:b3:
f8:b1:ad:4d:1b:3c:57:04:0a:6f:7a:30:b0:50:6d:
96:1b:d3:07:81:8b:5c:c2:d5:70:e5:64:71:1b:5e:
35:45:d0:db:73:47:dc:e3:d1:23:2d:16:f5:75:92:
da:d4:76:8a:3c:21:b1:bd:8d:42:09:bc:63:b4:c2:
44:61:0e:7d:39:12:b4:fc:45:d8:30:7d:5f:85:32:
2a:72:fd:d7:8f:6d:bf:a6:9c:00:91:08:37:c0:7d:
1c:7d:11:61:d2:d7:c1:dd:61:0f:36:ac:0f:9b:47:
c3:3f:70:34:4f:23:9a:0e:0d:97:fb:72:e3:9d:e6:
7a:92:de:2e:3d:50:cf:00:12:0d:64:96:e0:d5:1f:
8c:c1:29:b6:67:05:d1:dc:a9:e1:fd:9f:65:73:2d:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:CB:F3:D5:10:C2:42:2B:32:77:F9:A5:0E:B5:26:18:9A:2D:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:2040::/48
Signature Algorithm: sha256WithRSAEncryption
ac:2a:d8:5e:42:e6:a1:82:b6:a8:e0:76:e6:51:6f:74:65:9b:
2b:dd:d3:34:ca:2b:53:eb:a5:d6:89:50:36:03:0b:f2:6d:43:
5f:22:1d:c2:21:a6:be:9f:a9:6a:b7:df:39:e3:8e:57:dc:c6:
d3:9c:22:16:52:93:b8:5f:0c:42:57:77:f7:ec:0e:60:12:fe:
06:f7:54:1a:c9:c2:ae:b3:a5:da:2d:f4:5c:5b:5c:55:ea:f3:
70:e1:b0:b0:24:62:87:de:5f:b1:cd:b7:cb:a2:af:33:27:b8:
ab:e0:25:06:0f:c0:e6:2a:16:69:43:31:78:9d:b7:57:01:83:
cc:7d:29:17:af:19:53:c1:93:1e:37:49:29:6f:39:07:21:99:
52:de:25:e2:e1:9b:99:52:44:6b:ee:9f:e3:b9:54:16:7b:27:
b6:cb:e5:0c:e5:08:73:72:20:38:f4:3f:ae:8c:5e:4b:5d:65:
b3:cf:35:82:83:1c:25:66:6b:21:0f:93:4e:64:55:4f:67:60:
6f:b8:00:8c:03:d4:a5:53:fe:9c:76:f2:10:95:24:be:73:68:
d9:4d:ce:96:2d:f3:c8:74:09:09:0b:bc:86:a1:24:c2:6e:cd:
66:4f:50:92:c0:48:25:23:c6:bb:55:fe:41:9f:87:ee:e3:e0:
c9:b2:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:22 2026 by rpki-client