Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/182e091e-259f-44bd-bb67-c5e36fa6958b.roa
File: 182e091e-259f-44bd-bb67-c5e36fa6958b.roa (raw, json)
Hash identifier: uc30Q1e6Da7hYulBK7gS7n9r2ywrdIoEgGOoN4DkUTA=
Subject key identifier: 79:85:3A:45:81:2C:22:5E:9B:D3:CA:08:6A:35:50:99:FC:BE:7B:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 587CAFFE0E1705869F87483025EB65ED2B3FCEA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/182e091e-259f-44bd-bb67-c5e36fa6958b.roa
Signing time: Fri 07 Aug 2026 05:20:09 +0000
ROA not before: Fri 07 Aug 2026 05:20:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7c:af:fe:0e:17:05:86:9f:87:48:30:25:eb:65:ed:2b:3f:ce:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=cf8f92e54e2e9c8dc3a998ea1814f710482a43448818af707c613c3047157643, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:fc:72:04:bd:ac:ae:90:48:c2:8b:81:76:
39:ee:2b:65:71:35:9d:cc:52:fe:4f:cb:29:22:6a:
46:25:7b:b6:4e:f1:32:f1:78:09:c7:2e:32:2b:25:
32:d4:16:e5:65:6c:18:cf:21:e6:79:c9:2e:cf:b5:
03:e8:12:ea:98:8a:c6:f4:28:48:f5:cc:e9:35:b0:
0b:1e:fe:82:c5:d4:6a:dc:8b:3c:29:59:42:88:89:
0e:ee:be:6d:85:30:0a:6a:62:ed:38:90:5e:72:9c:
07:ab:e2:a9:24:84:23:4a:88:b6:f9:d1:8f:c5:79:
3b:02:c1:98:7d:3b:d8:c1:ba:98:1c:d9:0c:91:7c:
6b:85:ab:d3:32:3c:10:24:c3:11:d3:5f:8a:51:19:
02:bb:23:e0:14:1d:b4:d3:0f:78:3a:37:3d:95:7d:
75:40:36:c0:14:bb:0e:b5:f4:45:b0:fb:bd:0e:42:
b0:48:b4:4d:20:7f:8e:18:47:5c:73:f2:bf:c6:50:
7d:46:9d:a5:0e:ad:ff:34:8f:7e:b8:e5:34:07:98:
60:24:3f:91:b9:12:80:b1:7f:9e:dc:96:3b:43:a8:
6f:06:d4:b3:53:44:bd:19:98:40:84:f4:8d:3e:5d:
4b:53:05:c4:be:dd:d4:bd:b5:21:9b:22:e8:a7:28:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:85:3A:45:81:2C:22:5E:9B:D3:CA:08:6A:35:50:99:FC:BE:7B:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/182e091e-259f-44bd-bb67-c5e36fa6958b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:400::/38
Signature Algorithm: sha256WithRSAEncryption
8a:dc:5f:a6:4d:e6:0e:48:8b:f8:dc:2b:87:e5:07:41:47:b3:
94:57:9a:39:a0:5c:32:da:26:53:c6:4a:16:75:9f:9e:a0:6d:
5a:8b:ef:19:24:e6:ed:d7:7b:0b:05:0a:1d:9e:52:04:70:e6:
78:74:7b:b2:16:bc:54:b9:92:1b:61:d0:2e:75:d6:18:42:d7:
c0:27:91:c9:58:c0:2d:a0:bc:2e:11:09:d0:5a:b8:a8:e2:b1:
5c:ff:36:8a:aa:4d:47:ee:39:0e:4a:48:2f:78:7e:db:0c:fe:
ea:5f:4c:fd:4f:71:a2:74:df:95:ae:65:38:3b:5f:53:6d:7a:
f8:7a:93:23:bb:fe:a8:23:a6:19:6b:e5:ab:bd:fb:27:1d:94:
8c:6e:17:7d:e5:1c:0e:e7:7e:c5:ce:ec:9f:ec:6f:95:ca:6a:
31:07:82:a1:3c:e4:2b:61:1c:80:20:c2:61:76:03:d1:95:31:
65:89:c6:87:c2:12:31:1c:f5:4a:f3:8b:83:6c:01:70:1a:78:
6a:11:32:37:aa:e6:5d:3a:63:d2:e3:7d:35:a4:34:c3:45:77:
34:a6:fc:aa:da:db:be:91:5d:5e:2f:79:44:cb:f8:de:03:89:
a4:61:fb:16:5a:38:af:c0:f1:38:56:41:b8:4b:8d:80:98:96:
14:2d:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:26 2026 by rpki-client