Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173784a5-02ac-471e-bb56-8d257dd9d810.roa
File: 173784a5-02ac-471e-bb56-8d257dd9d810.roa (raw, json)
Hash identifier: oFagD/ASuTapjiJsisQWYhGExa++cinYqGvLVjZ+7rk=
Subject key identifier: 20:A4:54:69:26:61:01:A0:F6:7A:C0:8B:54:C2:49:02:9E:FC:12:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63500DAE4A4F5B9794917B93EBD7952EE1F0BDFD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173784a5-02ac-471e-bb56-8d257dd9d810.roa
Signing time: Thu 10 Sep 2026 02:30:12 +0000
ROA not before: Thu 10 Sep 2026 02:30:12 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:50:0d:ae:4a:4f:5b:97:94:91:7b:93:eb:d7:95:2e:e1:f0:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:12 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=0ed1a5193b4a6007ce277bdfa764174051fb03a1dddcd7c6ab3377d47b35bcb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:d9:e1:8a:92:d8:eb:92:b7:13:a2:ac:2d:
d8:66:2c:58:95:04:8c:c6:91:e3:23:2f:af:bd:0e:
61:9c:27:f2:81:4a:64:d8:06:f9:20:c9:c4:c1:bf:
02:3f:9a:4b:fb:26:4d:cb:13:29:74:5c:5c:09:72:
9c:a5:7b:dd:11:e4:37:f5:ae:41:83:36:f0:67:8f:
33:53:4c:78:d0:9d:37:b2:42:9f:7b:db:52:c5:5d:
20:fc:0c:7c:d8:53:42:eb:b5:d0:61:bc:e5:0c:2f:
03:49:4a:60:f4:10:7d:7a:17:19:33:20:e9:1c:e4:
ab:93:93:54:7b:a2:a1:a1:83:c2:55:c2:b0:4d:00:
45:eb:2e:be:7d:3f:58:3f:07:f5:6c:ee:b9:6c:ce:
c4:5a:9c:9b:06:5a:6d:60:b4:e9:54:2b:ff:a3:30:
e6:d6:ff:35:9d:36:bd:a9:0c:1d:e1:dd:12:2b:0e:
32:10:02:e7:0f:f0:9d:60:06:eb:91:0c:66:6a:bd:
77:8c:32:75:26:67:a5:d4:63:74:fc:5a:b7:fe:d1:
26:33:9e:58:69:7f:18:64:3d:d6:91:bd:15:01:1d:
ff:4e:48:33:e3:fa:67:5f:76:fe:ea:3a:85:57:4f:
d1:37:3e:28:d4:a0:c8:f1:7c:f6:c6:2a:ac:27:38:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:54:69:26:61:01:A0:F6:7A:C0:8B:54:C2:49:02:9E:FC:12:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173784a5-02ac-471e-bb56-8d257dd9d810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:800::/40
Signature Algorithm: sha256WithRSAEncryption
45:d2:ae:0f:98:51:d7:38:dc:53:08:9a:8a:93:94:fd:ff:59:
6e:ab:66:96:fc:0a:1a:3d:7e:b5:e8:23:93:16:97:84:31:9b:
9b:0a:c1:3b:ff:e8:fa:af:c4:22:a6:5d:50:38:08:c2:6e:26:
10:44:f8:1e:a9:9f:ff:40:e5:7b:ce:7c:b2:60:36:b7:79:a4:
43:e5:f6:fd:af:39:4d:aa:e4:9e:bc:26:c5:6a:57:ae:f0:eb:
15:c6:82:15:eb:1a:9c:18:e6:cd:b6:35:11:94:3c:bd:b3:48:
be:ed:b0:76:28:5b:12:7c:3e:7f:83:34:99:a1:74:45:bd:a6:
cc:4c:5a:6f:f6:59:f5:93:cd:ea:d6:b8:1d:58:80:ee:b3:42:
34:26:80:b9:d7:c3:67:04:f5:9f:e1:bd:7e:00:72:0d:67:ec:
f7:a0:0e:22:11:31:cd:77:18:10:bb:fd:54:ff:73:c9:db:0f:
f8:0b:96:f3:34:b6:f2:37:95:9c:c4:3f:2a:5a:53:3e:a2:24:
b3:78:64:e8:aa:59:68:ad:33:48:61:44:1b:03:10:e8:9a:cc:
8f:6b:ec:6a:e4:e7:3a:91:a2:1a:e0:90:63:63:9e:a6:e6:5d:
99:45:64:0a:ab:a3:1b:2b:53:39:ae:af:7c:5c:8e:cb:80:b3:
31:ad:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:33 2026 by rpki-client