Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
File: 15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa (raw, json)
Hash identifier: 1NmA8JR0/cwCl4R87Sunhy2oyG4nZPFQXUH/CTlw084=
Subject key identifier: F9:D9:95:4D:12:E0:67:43:4E:22:6F:28:CC:77:AA:74:F0:F0:07:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 66BDCA36AC16844ED4B55DB149E007FD8903B282
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
Signing time: Fri 07 Aug 2026 05:00:49 +0000
ROA not before: Fri 07 Aug 2026 05:00:49 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bd:ca:36:ac:16:84:4e:d4:b5:5d:b1:49:e0:07:fd:89:03:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:49 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=89adbfa32bb6a02d0fb6ff57be0ca8e2f7c1a2cb6252936f0ac4e1ab120b768e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:71:a3:ef:8d:fc:b3:24:1c:e5:b2:c1:4e:
69:02:31:0f:f1:e2:ba:54:a0:20:c6:34:e2:27:1f:
92:f3:57:44:b9:22:d8:f1:57:1b:2c:93:76:cd:e3:
67:82:63:a5:c5:21:0e:35:dd:85:0c:1e:d5:7e:40:
d7:9f:b0:f5:cb:70:7c:ad:c8:33:61:8a:b3:03:eb:
ec:80:ac:64:c9:df:42:c5:eb:14:81:5a:53:dd:af:
61:92:07:86:eb:f7:cb:14:22:f7:ce:01:c9:e3:03:
ba:cf:fd:15:a9:0a:fa:c7:29:55:3e:10:48:78:6d:
27:f9:ab:8e:26:2e:71:1a:cb:2a:3c:29:93:0f:a9:
ac:d5:8c:e7:65:51:1f:54:e3:ed:6e:2d:e8:d4:89:
0d:6b:d5:a4:13:10:1e:97:88:d1:c3:37:9f:4e:72:
e7:b8:36:af:ed:d6:5f:64:c0:af:fa:81:d1:22:27:
af:3c:de:f3:ba:08:98:8e:39:92:45:fb:65:f3:f7:
a6:1b:ec:06:c2:7d:3e:f3:fa:2a:f9:20:23:19:6d:
1a:54:04:f1:48:81:d5:23:a9:30:c9:ef:23:e5:5c:
f8:42:b1:36:88:d2:50:6e:ed:1a:77:dd:15:9e:71:
13:93:5e:ae:1a:41:c0:6e:09:d2:79:a3:04:eb:d0:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:95:4D:12:E0:67:43:4E:22:6F:28:CC:77:AA:74:F0:F0:07:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
97:4a:be:0a:9f:26:d4:c9:cc:4d:24:db:21:e6:21:58:7f:3b:
96:91:1f:0c:91:4c:ca:71:ff:69:a7:d2:b7:86:a0:d2:03:b4:
14:1f:c6:e7:25:e6:4d:a7:87:dc:1b:e7:11:d5:18:70:40:a4:
70:86:df:02:4f:8f:e5:83:66:e3:c5:ed:f0:36:65:0c:5d:2b:
d0:d7:1f:1b:20:3a:d8:87:6c:da:c7:c6:67:85:a2:d6:fb:67:
96:9c:7f:b3:a7:d5:86:d1:22:ad:d8:9b:96:4b:4f:99:ee:39:
22:c6:79:b8:01:a5:21:d5:94:be:6a:19:15:df:00:49:89:e5:
98:fd:2c:21:a7:7e:cc:1a:8b:9c:0f:bb:0f:ba:1a:1a:fb:4b:
02:97:e4:69:25:6d:20:2f:60:ac:4f:08:ed:11:45:9a:32:f1:
9c:5c:51:4d:88:c6:93:2b:d7:70:ea:9e:2b:f0:a6:ac:59:ef:
7c:c1:0c:27:d5:dc:4d:5a:96:18:76:4d:7d:a1:c3:14:84:19:
b2:76:a5:c4:35:c7:37:3b:1f:9d:0f:77:83:a5:11:9a:b6:77:
88:5c:8b:3f:a2:72:91:07:ec:52:fd:15:c1:69:bc:04:86:31:
2d:94:87:e7:e2:cf:df:ca:39:9a:a0:5a:43:1e:64:75:ed:7e:
c6:65:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:03 2026 by rpki-client