Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
File: 16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa (raw, json)
Hash identifier: E+5Tc9xjL/uWZnKXNOuGn7E3eZx1H5A3+mqdFjPYgHI=
Subject key identifier: DA:21:3A:60:6C:9D:9A:11:36:43:8C:BB:AB:F4:B3:44:B8:8B:8F:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A0E372E1F2E9BAE80DF84B87FA24AC7497FC0D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
Signing time: Fri 07 Aug 2026 05:20:06 +0000
ROA not before: Fri 07 Aug 2026 05:20:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0e:37:2e:1f:2e:9b:ae:80:df:84:b8:7f:a2:4a:c7:49:7f:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1d5700d63e85130274c00d87d2f4b842773ff5528b233da976bdffc4fc4a4cfa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:ab:12:fe:0e:52:3d:e6:ee:e6:dd:e7:d2:
a5:48:b2:b1:28:1d:c2:ee:45:4a:f6:69:99:cc:e5:
cb:f9:f5:ac:47:27:46:70:b6:83:3c:2a:3c:c1:3f:
98:7c:5f:19:5a:25:2d:c6:fe:04:03:87:5b:a6:8e:
32:a0:75:bf:46:4b:63:1c:5b:85:b9:98:fd:d0:7a:
d2:77:33:5d:f8:a8:87:be:ae:12:fa:1e:61:81:16:
fa:f3:22:47:54:02:ed:86:e0:e6:b8:16:2c:e6:c6:
1d:b7:36:2f:d7:1f:b2:40:e6:20:c7:1a:da:8c:d5:
03:db:98:7e:53:a8:75:e2:ed:7a:ef:ed:0d:75:b6:
43:a1:c9:ab:86:e8:73:58:50:3a:9f:d5:6a:4b:5a:
a0:7d:20:21:0b:ae:c7:ef:09:ed:b5:34:2d:49:65:
10:c0:31:91:38:04:75:55:11:5c:8d:a1:60:54:70:
16:44:15:38:d9:e8:0f:bd:d3:79:a7:bf:0a:7f:be:
5b:6f:b8:56:02:3b:fe:bd:54:73:ba:1b:61:a5:68:
c5:ba:26:6f:b2:a1:48:6e:b0:1c:e4:be:aa:d6:c0:
51:d6:6c:e1:a3:c4:86:25:b7:24:cb:22:20:40:70:
b9:a2:ac:be:d4:e5:21:17:0e:dc:23:b2:bc:fd:3f:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:3A:60:6C:9D:9A:11:36:43:8C:BB:AB:F4:B3:44:B8:8B:8F:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:b000::/40
Signature Algorithm: sha256WithRSAEncryption
38:eb:72:94:ef:93:43:4e:7a:19:b4:0f:b4:dd:d8:5c:10:97:
7b:b7:fa:9d:7f:45:17:6b:5a:74:a2:89:0d:bc:05:a1:8f:48:
15:7e:a0:94:d0:81:d8:7c:72:17:0a:82:dc:f6:a9:c0:d5:43:
e0:a3:bd:a2:4f:b2:03:73:92:cf:00:f6:62:96:90:dc:6d:4e:
87:40:c5:6f:b5:43:42:1c:10:cc:f1:73:aa:75:9a:5f:fc:6c:
76:6b:ad:13:a5:00:03:0b:a6:39:be:0d:f3:8b:59:dc:2d:e4:
55:96:8b:22:10:f0:8b:92:ce:d0:1b:74:f3:23:ce:5a:f3:9e:
55:45:c5:9d:f7:c0:08:dc:0a:ef:c9:ea:27:6a:0a:df:5f:65:
5c:aa:43:66:65:fe:ff:8d:5c:69:e2:51:07:2b:94:c4:be:a0:
4d:57:04:a4:43:1a:46:26:d7:9c:64:c5:a0:51:f7:15:7e:b4:
55:d7:4c:ef:ad:ea:87:e5:02:57:47:b3:6b:d3:02:3f:38:de:
ed:92:71:52:a3:94:f3:08:8d:04:a4:8b:50:8c:7c:d9:82:59:
8b:ab:31:7f:a3:8f:c5:32:5a:9e:7e:c9:d7:80:86:55:cf:34:
6c:14:a3:87:3e:60:02:d1:11:3c:9a:a9:2d:1e:34:72:ca:1c:
17:bc:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:52 2026 by rpki-client