Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bf53f7-6178-4ad2-be9e-7b945a1e8547.roa
File: 15bf53f7-6178-4ad2-be9e-7b945a1e8547.roa (raw, json)
Hash identifier: NpnkwZQ/7wvlsfq4HPzFLMHQnLtRuY0T6DT1mOIYIKU=
Subject key identifier: 8E:37:5B:CE:D7:91:89:47:2E:E9:A4:B6:EB:E1:70:ED:9E:EE:09:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50B56742968F1C1B207B16DA5BC1B8463535BA5D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bf53f7-6178-4ad2-be9e-7b945a1e8547.roa
Signing time: Wed 19 Aug 2026 01:00:58 +0000
ROA not before: Wed 19 Aug 2026 01:00:58 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b5:67:42:96:8f:1c:1b:20:7b:16:da:5b:c1:b8:46:35:35:ba:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:58 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=d5717f1dd52a68596c7c60944751b7a2baa1bc2c58818eb86d8fbc6c9aea3092, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a2:3f:83:e2:da:a2:62:b8:e0:a4:cf:d8:1c:
d4:5d:b6:b6:7a:2c:1f:40:3d:53:51:a2:3a:0e:8f:
39:6c:e2:1a:fb:27:07:4a:b8:e4:1d:87:36:f8:5b:
cb:0b:26:44:03:bb:a5:f3:4f:7c:e1:b8:c4:e6:43:
95:ac:47:35:72:0a:f2:97:66:25:56:67:6c:0f:ab:
ce:92:17:4b:ab:c8:bb:ed:2e:b8:6b:29:5b:8d:15:
73:64:53:47:83:fe:ff:68:b4:7f:e0:a2:39:46:49:
f5:53:fb:78:a4:c3:e8:cc:4c:92:43:2b:a4:d8:67:
06:3b:04:a0:32:79:ba:52:83:eb:db:83:d6:f0:33:
49:0a:4c:81:61:7f:31:2d:28:d1:d9:0d:9c:f5:28:
06:4f:dd:9d:8e:0c:77:82:4e:ed:00:20:8d:a5:a4:
92:4b:58:9c:5c:74:47:29:cf:2b:57:fe:cc:f1:d0:
96:fb:5a:65:8f:c6:bd:29:43:06:c0:7a:56:bb:4d:
e0:3e:ce:f1:eb:8f:c4:7f:33:99:aa:05:61:7a:c7:
0e:69:2b:77:7a:86:4c:d9:4e:7a:7f:31:b9:f8:87:
74:b8:c8:c8:fe:a9:6b:ee:e3:df:5d:2f:9c:5e:1e:
21:fe:fa:e5:12:c5:ae:e1:3d:3b:6d:7c:3e:c7:db:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:5B:CE:D7:91:89:47:2E:E9:A4:B6:EB:E1:70:ED:9E:EE:09:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bf53f7-6178-4ad2-be9e-7b945a1e8547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:5040::/48
Signature Algorithm: sha256WithRSAEncryption
53:18:8d:bf:97:69:60:81:31:8c:c2:f9:5f:7b:a6:86:3b:8d:
d8:9e:e4:31:a1:ca:fd:23:7d:e5:cc:12:ec:8f:e6:39:c8:44:
95:9f:f0:3e:b8:c4:03:5e:bd:e4:87:12:c8:44:d7:5e:e8:12:
21:99:cb:a0:20:a3:e2:f5:88:c1:4d:37:9e:8c:86:f5:12:2d:
91:04:42:73:24:22:12:e8:3d:55:52:a2:55:9a:05:0a:17:03:
02:3e:85:3a:c5:df:6c:14:98:a3:cc:b9:29:1f:cd:c6:ca:9b:
c1:2a:4c:b4:80:4e:e9:a9:3e:da:1d:c1:f1:04:f1:b1:ad:a5:
ed:42:1f:d5:1f:a8:45:8f:a7:48:8b:21:76:57:66:82:b6:7d:
f7:79:c8:2e:85:3f:fb:1a:08:82:69:b9:76:fa:a3:f5:09:8c:
e3:1d:03:44:38:9e:21:74:99:42:0b:d7:5f:2e:ed:ee:28:f8:
63:0c:a3:bf:13:5b:5c:20:38:d6:33:7a:fd:22:3d:3c:e1:ec:
5a:5e:38:f5:0a:e2:24:b6:2d:8b:72:2d:91:c0:02:c9:82:0e:
a0:b7:56:78:68:31:d6:e7:2e:7c:67:dc:72:7b:be:27:20:54:
60:05:e3:00:3b:07:78:2a:da:60:fb:2a:71:06:ca:f5:52:91:
ef:2c:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:04 2026 by rpki-client