Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
File: 19a2984e-942a-4280-ac0b-904c9860af2f.roa (raw, json)
Hash identifier: sy2ME1U5r6tW8oT0gSoZLqRn/dPCDY5QIgkyvOX09B0=
Subject key identifier: 7F:DF:BB:E3:44:03:12:62:89:5C:B6:97:02:DE:75:5F:94:99:82:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3DBAC848D732F978EC7A03159D06E0E4DF128DFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
Signing time: Fri 07 Aug 2026 05:00:51 +0000
ROA not before: Fri 07 Aug 2026 05:00:51 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ba:c8:48:d7:32:f9:78:ec:7a:03:15:9d:06:e0:e4:df:12:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:51 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b9991fbd67e9db0e11965d8269fd5a81ee36362a5b9b88281413041531d5f9ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:94:bd:6c:e1:83:26:8f:93:7f:93:24:0a:
03:0d:f4:09:a5:92:f7:ed:d9:ca:9e:7d:69:df:ac:
cc:0a:79:ad:ba:be:68:c5:0e:e7:8d:40:b4:3b:fb:
4b:d5:11:9a:fe:e8:03:f5:d4:9f:46:54:e1:25:b4:
af:9e:bf:16:ad:91:8b:ce:bd:60:77:87:06:52:a8:
46:fe:ad:5e:ff:27:6d:1a:49:6a:e4:db:85:ed:ce:
8c:42:f2:b0:7f:ab:ba:67:e0:10:0e:a1:f0:7b:21:
89:07:14:68:02:ee:3f:68:1f:d9:a6:ec:ef:09:f8:
1c:22:33:88:53:a3:d4:70:2c:37:d4:6b:33:63:74:
da:46:ef:9d:35:57:c9:c1:28:c8:13:0a:20:35:ea:
cb:4d:92:7d:27:18:3c:d2:2e:47:85:73:79:d2:81:
c0:a7:76:b5:12:10:c1:62:b5:75:76:58:ce:c9:e5:
19:c4:b3:57:50:a4:3c:6a:ac:e3:8c:14:1e:bc:2a:
ec:71:f0:cf:0a:cb:9e:06:45:19:94:62:7f:e3:72:
a6:7d:11:50:9c:b9:d1:ea:1b:88:9e:39:f9:68:8d:
31:57:17:62:42:05:c4:55:f2:09:18:da:e5:df:26:
2a:e0:f7:63:86:e4:8a:fd:4f:00:82:71:ac:f4:40:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:BB:E3:44:03:12:62:89:5C:B6:97:02:DE:75:5F:94:99:82:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8020::/48
Signature Algorithm: sha256WithRSAEncryption
4a:90:ba:fe:77:be:be:1c:7a:29:3e:d3:8e:4c:60:54:c4:e3:
24:63:92:fe:55:91:3e:b1:79:28:49:7d:52:81:07:91:5b:7b:
bf:7e:de:7d:fc:32:b2:05:81:e6:b0:87:b3:bd:85:6b:c9:38:
4a:a3:cb:68:97:43:1d:36:ca:e1:be:55:fb:79:2f:5c:42:b9:
49:de:3f:3a:67:40:7e:4a:69:b9:4b:9a:f4:e6:22:2c:7e:33:
b7:06:4c:f6:70:3a:20:c3:f3:9a:84:84:6c:ad:56:2b:9d:c6:
0d:3a:39:0f:6f:52:60:21:c7:96:9a:39:03:1e:c0:9d:e1:be:
2f:6a:00:fa:f0:5b:66:07:ac:37:a7:98:b2:b6:cf:17:64:15:
10:b0:46:04:52:de:f0:a5:52:d2:c8:7a:2f:54:c8:65:0b:9a:
17:25:21:63:95:2d:b8:29:14:63:cb:de:48:71:a6:f4:58:cf:
c3:65:bd:c4:fb:02:41:b5:a9:f0:50:0d:18:c3:46:99:bf:f1:
62:a5:2e:8b:d2:bf:fa:04:92:85:51:99:3a:74:d3:1b:a8:d9:
1e:3e:28:23:56:08:89:b9:d3:62:fe:96:c7:23:27:6a:8a:60:
b2:13:ce:ae:77:ac:36:63:65:82:db:1d:04:31:15:af:07:5a:
f0:83:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:45 2026 by rpki-client