Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17b4a643-b0b3-4de5-ae6d-b3610783f477.roa
File: 17b4a643-b0b3-4de5-ae6d-b3610783f477.roa (raw, json)
Hash identifier: C6h3TrCHFXBPQWLRZr39uZjfVeyz8XLgn59+E6n0ML8=
Subject key identifier: DF:EB:4B:B8:75:88:BB:9E:8F:38:E7:FC:43:D3:ED:B7:81:60:CE:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D9230191F51309C93A6BBE7B788A72A8F150390
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17b4a643-b0b3-4de5-ae6d-b3610783f477.roa
Signing time: Mon 10 Aug 2026 01:00:32 +0000
ROA not before: Mon 10 Aug 2026 01:00:32 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:92:30:19:1f:51:30:9c:93:a6:bb:e7:b7:88:a7:2a:8f:15:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:32 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=8f692a1c6e8adf9b13e781992860674556f7f5f2cb3d43a0cb5aa9fa2744df0b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:3a:0f:73:40:de:c8:fb:46:05:f4:55:18:
ea:8f:90:a9:25:e5:9f:5b:fd:a8:18:20:5d:c4:36:
03:80:e0:48:7f:f1:e5:d2:d7:a8:ca:7d:37:52:33:
df:03:4e:1a:4e:53:0e:83:7d:02:85:0a:b0:5f:1c:
25:0e:29:6f:81:d5:6b:e1:d4:dc:a6:90:1f:a4:af:
37:a5:f5:18:2d:3b:83:6d:41:7a:20:05:19:bf:5c:
a3:eb:50:8f:89:4d:06:60:1b:e7:28:23:9c:5a:ea:
ad:d0:6b:fe:d6:a1:56:dd:b7:0e:d9:db:65:52:18:
ce:2b:ce:b1:7b:d6:a1:0f:fe:14:72:4d:88:7c:42:
ae:d4:fc:30:35:a4:95:6f:97:7c:8e:00:0e:09:48:
53:0b:b9:23:57:fd:66:05:77:a1:f9:c6:03:3d:7f:
f4:3d:d4:aa:33:16:32:6a:63:1c:46:f4:b7:85:69:
ed:90:24:d1:42:55:2e:c2:93:59:a3:7d:40:8d:45:
bf:5d:32:1a:33:cb:48:eb:27:6b:7d:c2:e0:b3:34:
1f:48:8a:0f:f8:e3:ea:73:74:35:23:7d:db:ad:3d:
ef:57:1c:48:10:d8:b6:7f:75:03:70:00:74:77:bc:
26:fd:00:0a:9e:0e:9d:c9:d0:fa:96:d0:eb:52:80:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EB:4B:B8:75:88:BB:9E:8F:38:E7:FC:43:D3:ED:B7:81:60:CE:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17b4a643-b0b3-4de5-ae6d-b3610783f477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
0a:22:40:81:3c:02:af:9c:c2:41:b5:a2:dc:bd:89:41:07:a1:
39:d9:85:86:2f:9a:a0:76:80:a8:4c:77:51:1e:fd:e4:5f:c9:
a1:85:a9:0d:a8:1b:e6:98:a7:58:f7:3d:15:7a:a4:31:81:b7:
63:6e:f5:9e:7f:df:01:92:ec:b4:f7:b7:0f:96:48:c4:1f:e8:
df:57:30:ec:73:8d:f9:5d:4a:7d:19:dd:40:98:e8:5d:44:7d:
02:8d:f0:ee:84:19:8f:e7:51:6e:f3:40:4d:5a:4c:ed:99:01:
83:e2:e3:ce:f5:12:78:12:17:fc:6d:7d:a7:67:c4:a4:dd:ea:
71:e8:b5:aa:a6:b9:9b:85:7b:21:bd:c5:23:8c:e9:e4:5c:23:
1a:0b:17:de:c0:3a:98:c6:95:88:df:ba:9c:1f:58:62:7e:36:
f3:d3:f6:1d:c1:e0:89:dd:3c:14:cd:34:e7:47:c2:07:c4:4b:
42:f3:a7:b4:ed:f5:97:99:53:b6:59:ef:83:21:72:41:19:78:
5a:9e:86:95:b3:7a:39:5d:cf:a8:00:df:bf:88:ca:e1:e6:4e:
9d:81:fd:62:f7:f7:af:31:e1:3b:c4:fa:c8:01:78:3f:34:74:
e6:5f:e1:64:8e:bc:4e:6e:dc:94:73:24:58:df:83:b5:a9:d1:
96:98:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:48 2026 by rpki-client