Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
File: 1366e04f-98da-4078-9b0a-cc452dfb7a22.roa (raw, json)
Hash identifier: 4PfBS8HL/EzK1K0fzEZ/u69jKGAQNJAQgW8eyQmRTNs=
Subject key identifier: BF:20:98:42:E5:F4:E3:6C:57:3B:4F:C4:7B:68:DC:18:E4:80:6D:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45BA2F689952619E85C4370E17CCBA66EB451571
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
Signing time: Mon 10 Aug 2026 01:00:34 +0000
ROA not before: Mon 10 Aug 2026 01:00:34 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ba:2f:68:99:52:61:9e:85:c4:37:0e:17:cc:ba:66:eb:45:15:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:34 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=150d0e5435cad99ac0598f449bfbe10ecb93a78e8777f397f8b247ea11360c4c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:29:4e:06:e7:d0:c7:c7:78:cc:c0:37:d3:
2a:56:cd:d1:67:fe:69:48:66:3e:f9:48:da:d9:7a:
44:d8:52:19:f9:a1:99:e5:a8:2f:79:b3:62:8f:21:
1b:c9:43:60:93:cb:10:76:30:72:de:60:80:c2:72:
1a:25:04:79:72:87:db:a8:83:ba:1c:f3:f7:92:4a:
8e:99:10:d7:e9:f6:49:0d:57:03:3f:24:6b:ea:f2:
42:5a:0d:b0:62:7c:96:a8:c3:fc:1d:58:dc:59:42:
98:47:ca:bf:99:ea:9c:5e:38:67:7b:f6:3b:bb:01:
92:37:f6:a5:ac:3b:67:79:cc:f9:b0:26:9a:78:96:
01:28:7f:c7:ca:a7:48:1b:d5:16:8c:15:f4:dc:4c:
ca:08:a6:5c:72:47:5d:9f:5e:98:92:d7:82:b6:8d:
9b:90:da:01:42:6f:65:0b:2f:57:3f:b6:c9:f6:b1:
f6:e4:75:ce:e4:d5:e9:be:48:e7:dd:4d:dc:51:3b:
f1:07:a9:77:8a:17:80:46:45:cd:00:16:3b:ae:5d:
5b:20:11:05:a1:da:cb:0b:6b:9b:ca:58:6f:29:c8:
ab:e0:a8:ca:1e:a0:21:94:f9:b9:98:89:3f:00:e2:
94:ac:be:92:13:14:7d:e2:97:66:2f:43:11:ef:ed:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:98:42:E5:F4:E3:6C:57:3B:4F:C4:7B:68:DC:18:E4:80:6D:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1366e04f-98da-4078-9b0a-cc452dfb7a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8020::/48
Signature Algorithm: sha256WithRSAEncryption
17:5a:66:fd:64:f9:ab:fd:01:7a:29:3c:0b:62:a0:9c:dd:1e:
24:c3:3e:00:57:e2:d7:0a:4b:eb:59:b8:c6:6b:ef:59:71:08:
0b:c8:0a:9e:46:f9:22:b1:bc:e7:03:27:be:a9:fb:5a:7f:76:
59:bb:e7:55:62:9b:5a:a2:d3:9e:f0:5f:a7:8a:30:66:2e:ff:
d2:b0:c3:18:cb:7a:5c:40:e6:b3:1b:73:06:35:f1:8b:81:7c:
99:01:9a:1a:d9:22:e2:49:b4:17:c0:4c:97:1b:68:4f:ce:1d:
2d:da:4d:7a:34:bb:3a:20:74:31:9b:53:67:38:00:b4:f0:b5:
70:f2:a0:0a:72:fd:19:4b:ca:bd:2c:0d:20:dc:b8:9e:bb:96:
e3:c1:69:8c:bc:aa:23:50:11:30:4d:6c:4a:2d:09:24:26:36:
4d:72:c2:31:79:c2:b1:c9:15:6a:7c:29:4c:94:6c:33:3e:8d:
c6:0a:52:85:94:e1:c4:d3:be:fb:ad:5e:5b:ac:5c:ee:d5:b3:
39:bb:26:c9:46:1e:b7:a6:b8:23:82:ba:fd:6b:ed:14:58:a9:
9e:7b:54:53:a3:0f:c0:d0:98:46:20:38:b4:9a:b7:c4:94:ea:
c1:57:69:aa:3e:75:14:c2:70:f5:2e:f3:6c:da:ac:dd:be:e0:
31:11:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:35 2026 by rpki-client