Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa
File: 15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa (raw, json)
Hash identifier: aaAOusJlxRiOwpIS6t6oDjx29Wo6ZZz6WJ3iC2tlIGc=
Subject key identifier: 7C:F4:3B:6F:F2:64:2C:C4:62:66:92:12:3B:82:E1:88:37:0B:5A:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68CBEF5D1ED33585A248A0A4A6E6490B7B7B8440
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa
Signing time: Mon 10 Aug 2026 01:00:15 +0000
ROA not before: Mon 10 Aug 2026 01:00:15 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cb:ef:5d:1e:d3:35:85:a2:48:a0:a4:a6:e6:49:0b:7b:7b:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:15 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=d34ef1aadeac08b0e83c8f083492eba9b93338e70e33f619a0246a3b6775d0e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:01:c9:0c:8a:be:89:09:b1:67:18:02:b4:
c9:9c:a0:9d:58:62:97:75:49:06:fa:70:c1:de:b8:
a1:87:2b:c2:21:32:c1:f2:2f:d5:fe:62:17:5f:10:
58:5b:c7:f2:3d:70:74:4d:54:d3:70:f8:72:83:30:
c3:bf:a2:9a:ba:23:6c:a2:96:eb:cf:af:ff:e3:77:
7d:9f:fc:95:b2:71:86:ec:01:b3:d9:2c:56:5d:9e:
67:51:be:e7:e6:c8:c8:89:b0:b6:96:88:f0:62:12:
25:fc:8d:64:d3:e8:d7:9e:c9:35:53:51:a4:22:76:
0d:22:58:6d:6b:a1:ff:80:5a:b2:67:5b:c7:38:0b:
98:aa:bd:f2:51:0d:c0:67:96:4d:19:f6:39:57:68:
5a:65:b2:65:4f:c4:13:8c:19:cc:d9:11:87:10:e1:
9b:b8:43:3d:66:a6:c0:7a:ba:52:05:60:76:6d:d9:
0a:26:a1:0c:d0:ee:ce:74:aa:d6:19:b0:cf:2e:3f:
17:38:e9:a8:b1:4d:65:75:9f:30:fa:ee:e9:bd:db:
12:b6:eb:55:40:7c:66:3c:cb:23:25:68:3a:01:d2:
70:43:c0:0f:fe:04:94:98:5b:65:3d:80:84:4f:ac:
3f:a8:02:42:17:59:d8:8b:cf:44:08:2b:fa:57:8c:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F4:3B:6F:F2:64:2C:C4:62:66:92:12:3B:82:E1:88:37:0B:5A:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15c2c50a-36f4-4b91-b032-bbfe99a697b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:88:26:20:19:6f:8d:06:fe:91:78:7e:e3:57:57:95:e5:fe:
76:92:55:2a:d1:2b:40:8b:15:75:15:f0:4e:7b:eb:b7:f1:ad:
18:40:df:e3:3e:33:c8:cb:f6:26:0c:65:15:1a:fc:d3:76:33:
75:03:59:8b:47:d2:42:20:dc:d2:92:7b:12:6c:58:bb:b2:35:
22:98:22:6e:eb:8a:74:2c:e4:0c:26:fd:50:b1:f4:5f:7e:78:
a1:f7:69:d2:29:f2:a3:8b:46:80:07:d2:a1:d6:b0:2f:a0:87:
2a:12:c2:6b:c1:05:08:23:7e:11:15:cb:3b:e0:43:88:64:4f:
e9:38:02:61:17:7b:ff:ec:9c:71:81:e1:62:a5:64:89:c8:cd:
e5:3e:37:f1:54:de:f8:6b:e9:0d:ce:52:f2:b6:17:c1:a4:00:
71:b4:df:9f:4a:18:8c:56:21:de:44:35:58:bc:ef:b7:f0:38:
86:e4:3d:ed:e5:6b:1c:81:d4:70:1a:33:cf:ce:f4:79:bc:8c:
8e:71:eb:27:91:88:38:e3:c8:05:bb:a5:9a:a4:4e:ed:d5:ce:
7f:1b:74:1c:d9:ca:2d:a2:5d:d5:71:c3:b0:a0:dd:c4:79:8a:
ed:94:fc:1a:36:1e:38:15:84:0a:68:b8:ff:f5:8a:cc:f7:05:
e9:a8:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:56 2026 by rpki-client