Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
File: 14c60b75-8947-47da-9c6d-7045cbbbea55.roa (raw, json)
Hash identifier: eN/QGAN+9TKHhhvQiu/dl0hZJrxxYlnGMObIAuDqeS4=
Subject key identifier: D2:9C:CE:54:C4:6F:03:2E:B1:71:B3:7C:E9:79:40:E7:D1:2C:4C:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 685FD0989436477D1778183B9F1A82EA035E00E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
Signing time: Fri 07 Aug 2026 04:40:26 +0000
ROA not before: Fri 07 Aug 2026 04:40:26 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5f:d0:98:94:36:47:7d:17:78:18:3b:9f:1a:82:ea:03:5e:00:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:26 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=00a89dce45317a7056ecb0303ed7a52e4a660aaa2c479453b808308d265e52a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:55:79:c9:79:6c:cb:a1:96:ba:6b:c2:74:
e2:34:7b:43:5c:3d:2d:df:b9:df:bd:8c:a2:d6:94:
08:48:67:24:2b:ec:95:75:e8:2a:6e:28:f7:32:c2:
7c:f2:a4:b4:85:26:a0:4b:94:36:db:15:33:1a:6e:
76:8f:d3:1f:e3:fa:13:2f:d4:84:fe:62:ec:d8:0f:
63:5a:78:64:f5:7f:4f:4a:dc:c4:28:5d:66:c5:9d:
dd:1a:64:16:94:ec:ae:0a:cd:c6:81:59:d5:6f:5c:
4c:18:b3:41:39:5a:fd:d3:0e:2b:cd:8f:74:b3:a7:
64:56:0a:92:b6:9a:13:ff:cf:94:24:1b:ad:eb:21:
1a:63:47:6a:a5:79:30:09:8c:d8:5d:14:17:03:c3:
3a:43:5c:3d:cc:ba:e2:9e:95:0f:69:30:a3:ba:22:
71:a5:4f:6d:68:42:05:b7:98:4a:62:20:6e:9e:ad:
99:1b:af:82:a2:d7:7e:2b:04:38:26:c8:57:5b:49:
4e:dc:ca:b8:1d:a4:76:03:48:4f:64:1b:88:ce:09:
78:c6:41:e8:55:a4:28:51:ea:f0:9c:da:ba:2c:82:
de:8b:57:a4:ff:a3:d3:6c:33:21:36:56:03:00:36:
7c:87:90:2a:b7:35:e6:ab:ec:ea:49:d0:03:03:7b:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:CE:54:C4:6F:03:2E:B1:71:B3:7C:E9:79:40:E7:D1:2C:4C:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:1000::/40
Signature Algorithm: sha256WithRSAEncryption
86:c4:0b:4c:20:5b:4c:86:dc:4a:e7:ce:ac:3a:00:ac:12:07:
c1:59:bd:dd:4b:88:ad:de:45:b8:09:28:bf:4f:f2:5f:27:e4:
a9:ba:66:51:8a:6e:ee:bc:ae:0e:c9:69:1d:db:e7:a7:ef:b2:
07:64:10:a6:61:64:ee:c3:72:2b:98:07:49:07:f2:f1:e8:7d:
cd:4a:25:0c:f6:e4:00:d5:0e:78:30:7a:70:e8:0e:de:63:2f:
05:58:b1:6e:b7:b7:3c:f1:24:75:75:7c:bd:8f:b6:ec:fe:78:
d2:41:2c:d2:0e:f2:88:94:63:e8:7c:65:c7:3c:a0:44:56:2e:
de:32:5e:cf:19:c8:06:79:8f:92:ff:16:d6:9a:cd:8e:a0:bd:
01:82:a3:5a:f6:08:6c:e3:9e:60:f4:13:ec:10:ba:24:57:07:
c8:fb:9c:59:93:a4:cc:9b:bf:4b:a4:3a:1d:0d:6a:b9:a8:e1:
9a:eb:b2:b4:25:6c:f5:79:21:ea:1c:4f:17:f7:61:9f:ce:fe:
da:73:dc:1b:65:87:43:74:0b:68:e4:a7:4e:a9:38:ba:45:1c:
fd:80:f4:d1:c4:1e:d5:0d:60:2e:b2:3a:7f:05:c0:6c:bf:3c:
0f:ca:3d:bc:ff:99:f8:c1:88:39:32:f9:78:6f:57:db:99:9c:
b0:8a:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:01 2026 by rpki-client