Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
File: 14a1cb35-92d7-4bc2-854c-094a3829c73e.roa (raw, json)
Hash identifier: 5iFIVv9fCWbbvL1FB6aZ1Ae9m+/4yTtsQyJaCi3ko1U=
Subject key identifier: 66:6C:C4:57:77:48:5F:C1:08:0B:DD:F0:A0:4D:ED:6F:93:3A:FF:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 129F4DA79C43B3ACD3A5E4527A62A87B91821607
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
Signing time: Fri 07 Aug 2026 04:51:06 +0000
ROA not before: Fri 07 Aug 2026 04:51:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9f:4d:a7:9c:43:b3:ac:d3:a5:e4:52:7a:62:a8:7b:91:82:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=76b2b0235135676a8ec83e7e8ba60c52bd26b5654064e00812970fde8ff48270, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:16:0f:84:1d:14:30:29:e3:6c:73:d3:f7:
a7:40:bd:b7:5d:84:65:b6:be:5d:9e:a1:92:98:d3:
01:13:7e:a5:f3:a2:eb:66:70:a2:c1:7f:a9:47:b1:
f0:87:09:1f:75:e1:cb:62:3c:b9:e2:e4:99:99:04:
93:f8:10:1c:79:a4:d5:58:e4:ac:a9:84:b8:3c:8d:
60:8e:bb:52:99:09:48:a9:69:9e:9d:37:9a:78:04:
13:1a:30:b3:dd:dc:91:5c:a2:e7:54:e9:01:51:0d:
06:aa:34:ea:da:64:87:fd:39:6f:1a:44:95:f3:ab:
d2:a5:69:f7:bb:0f:07:e0:c7:3c:c9:20:66:e7:9a:
cd:82:7d:69:be:d4:26:f3:a0:9b:65:8d:9e:15:22:
ad:4a:53:77:67:bb:c0:f1:26:c8:98:69:4e:37:48:
3e:ab:0a:a5:8a:a1:e5:3a:0d:28:4c:69:af:eb:3c:
07:be:be:d7:31:c5:c9:2e:ca:37:9c:54:58:a1:a4:
60:a8:8b:f3:74:ab:41:23:7b:b0:25:72:58:c1:b1:
2b:d3:71:b5:ef:d6:bb:61:82:7a:d4:3b:5d:df:5c:
d0:45:76:00:79:2b:21:dd:d1:28:00:68:08:8e:25:
c8:48:29:9f:fa:12:51:6e:43:fd:35:57:f4:b6:6f:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:C4:57:77:48:5F:C1:08:0B:DD:F0:A0:4D:ED:6F:93:3A:FF:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14a1cb35-92d7-4bc2-854c-094a3829c73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8040::/48
Signature Algorithm: sha256WithRSAEncryption
1b:c0:28:21:27:31:e0:a9:95:48:c3:36:dc:5f:eb:c8:ef:bc:
26:cc:69:8b:bf:73:98:3a:d6:8c:61:09:bc:d8:6c:55:a8:e4:
1a:dd:61:f7:de:ee:cb:19:e3:08:97:ca:eb:dd:5a:ad:26:fc:
58:ee:14:15:68:1e:24:a1:84:37:0a:8c:22:a5:79:76:48:7a:
71:4e:c1:6e:27:83:d9:1e:46:72:d2:fc:6a:3a:79:39:b3:96:
7a:5c:58:bd:92:dd:3b:4e:c5:ea:ac:2e:89:7b:ce:4d:07:a0:
0b:fe:c0:f9:0c:40:6b:01:d1:ca:c8:15:8c:81:4e:cd:c0:73:
a4:1c:e9:01:50:da:39:7e:8d:aa:f5:d6:7d:bf:74:2a:81:5a:
9a:56:d3:89:04:e9:c8:10:55:58:e0:1d:59:f1:59:4f:61:cd:
e5:3d:00:12:f6:c0:53:25:18:46:f4:17:5e:8d:9f:cb:a0:e9:
16:f3:da:5b:71:35:3c:9e:69:c3:16:1a:53:1c:7f:f2:1d:a8:
c7:34:02:f6:12:9c:a6:78:7b:db:3f:18:bf:56:1b:47:a9:29:
1c:3e:67:ba:f7:41:f7:8e:77:0a:cd:75:eb:f4:5f:26:0d:79:
86:79:8d:4a:e1:bd:bb:8b:b9:4e:82:b0:bf:fb:d3:d2:b4:80:
e5:da:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:49 2026 by rpki-client