Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173f4b09-86fe-4ece-a79a-2e361058daf8.roa
File: 173f4b09-86fe-4ece-a79a-2e361058daf8.roa (raw, json)
Hash identifier: 4uVlnY6BrQV0oXj83pA2C5D2DwLS9wlNoF45oxmE+zc=
Subject key identifier: B8:77:9A:AF:53:62:9B:EA:9D:D0:D3:F6:1C:5C:89:83:CF:EE:9F:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D11F37507C48DD7085145F8BCBDCA0307AA7C39
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173f4b09-86fe-4ece-a79a-2e361058daf8.roa
Signing time: Mon 10 Aug 2026 01:01:10 +0000
ROA not before: Mon 10 Aug 2026 01:01:10 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:11:f3:75:07:c4:8d:d7:08:51:45:f8:bc:bd:ca:03:07:aa:7c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:01:10 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=cb2e2f4cfbe1dc7927983490e605c260eae8634eca781d6d3ffc9b3fd0a2207e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:42:64:a8:10:ba:6e:15:bb:c0:f3:8d:19:
0a:24:37:63:59:f8:81:ed:11:fb:f6:8e:69:1f:92:
9d:0a:b0:c3:a7:ab:38:ac:a8:39:e0:e7:8e:5e:af:
4b:b2:24:c6:76:bb:03:cf:72:00:01:2e:e7:52:d6:
2c:10:c3:5d:56:d5:fb:59:f2:3f:8b:75:9b:f2:56:
3b:06:8f:eb:bd:ca:c6:cc:36:6c:0d:05:56:ed:01:
ff:46:ef:05:2a:90:15:0c:ed:ef:23:98:d7:86:0f:
cd:15:c7:9e:2c:1a:f1:ee:0e:37:e4:5f:60:30:c9:
30:21:08:4d:57:61:17:46:da:dd:cc:ee:0b:f4:e1:
dd:d8:c0:86:9e:65:a0:90:c9:07:80:a1:69:e4:7f:
08:7d:0f:fa:52:f2:71:f6:45:dd:24:c1:d9:de:8f:
77:63:43:79:2e:55:70:23:89:6b:79:df:be:74:ac:
55:92:e4:69:7a:62:44:69:c2:47:de:c7:88:d5:8a:
a7:73:70:a9:8b:c0:24:a6:8e:61:71:92:94:b5:52:
11:52:f9:32:57:e5:a5:c4:dc:61:30:4e:9f:63:8d:
77:b4:75:23:2e:d4:89:cb:f9:9c:c9:a1:57:b2:fb:
14:f8:ec:25:13:32:7f:ba:5d:02:bf:bd:6c:c3:48:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:77:9A:AF:53:62:9B:EA:9D:D0:D3:F6:1C:5C:89:83:CF:EE:9F:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/173f4b09-86fe-4ece-a79a-2e361058daf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:26:5e:21:df:3f:c7:03:b1:10:92:44:f0:53:95:a8:76:95:
57:82:d0:a4:e8:3e:5c:d5:80:2a:7e:7a:2d:13:6b:c3:33:aa:
96:6e:f7:8f:7c:74:3e:48:69:26:9b:ae:ca:05:f9:49:f0:ec:
5c:1a:cf:d1:8b:48:ed:f9:c2:27:46:57:99:ba:ee:94:2e:fe:
3e:68:be:85:c5:e2:e2:0b:f5:bf:af:2f:bc:75:fe:6e:43:f8:
e4:0a:01:38:df:25:7e:24:14:08:a9:ca:9b:11:f8:de:13:04:
a8:a5:bd:51:df:08:a0:f4:cf:49:c3:52:f6:33:cb:00:56:49:
5b:17:71:77:8e:3a:a6:14:f3:bf:3d:27:a9:59:4e:9c:7b:8d:
29:98:e1:1f:95:83:7c:a1:da:ee:d6:ec:ca:06:47:16:f1:39:
0f:d8:7a:4a:78:fe:b9:9a:c7:cb:b6:5f:9b:dd:d7:14:5a:b5:
63:56:2c:cf:9b:55:e5:bb:80:a9:1b:3d:1d:24:bd:10:8e:bd:
bd:86:de:24:76:73:be:e4:ab:a3:e6:88:75:91:3b:51:84:3b:
c7:76:d5:3b:af:b9:f2:48:78:50:9f:5b:6b:a6:92:b4:99:40:
46:88:22:b8:4d:1e:25:c8:20:9f:a8:d6:b1:74:62:fe:39:28:
3d:a5:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:03 2026 by rpki-client