Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
File: 1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa (raw, json)
Hash identifier: gWY/QWGKDTe6SDjcxjCr8SEMy1B1h60GattqN75nYOw=
Subject key identifier: EC:63:BB:A3:63:ED:A5:52:F3:68:9D:9A:FC:9C:C4:6A:77:1E:3F:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 258DCBD6C3E6B391DB5EA62309AAFCB0152DD5FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
Signing time: Fri 07 Aug 2026 04:50:21 +0000
ROA not before: Fri 07 Aug 2026 04:50:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8d:cb:d6:c3:e6:b3:91:db:5e:a6:23:09:aa:fc:b0:15:2d:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5aaac418c066523633e3eae54259b99b7fc20144a8ca024dabb4397893a7a0b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:e1:de:8e:a3:90:e9:99:85:53:48:2d:6e:
09:73:e5:fc:a6:03:cb:93:f4:67:27:b1:e3:e0:48:
fd:01:e1:53:04:82:e3:71:f9:ab:15:99:27:f7:ed:
9a:19:7b:e2:ba:cc:b8:1e:c6:4e:ca:f7:1e:48:20:
ee:c9:cf:1c:ed:45:19:48:b6:db:0d:ee:fc:2f:fc:
d9:e7:17:cc:6c:6e:f6:05:b4:ea:df:bb:62:d5:69:
c4:e9:63:16:49:45:16:14:17:62:4a:80:3a:61:52:
8e:fd:b7:e1:04:66:fa:e5:97:78:1c:78:0f:2c:c4:
d7:1a:cf:ce:ec:2b:05:a8:82:4c:49:f9:ae:d4:ad:
b8:0f:ab:45:4c:a3:03:d1:71:ee:d0:a8:5f:9f:44:
18:80:8f:d4:38:9a:14:35:3c:c9:6a:f9:2f:78:b0:
4a:04:94:d4:13:8e:63:bb:91:b9:26:ac:a2:0a:4c:
0d:8f:9e:c6:d0:85:81:78:03:99:74:9d:f6:3d:aa:
ee:dc:c0:73:06:b7:05:76:54:4d:42:05:78:d7:c6:
ed:77:ff:41:cc:dd:88:93:05:69:04:87:dd:d3:ce:
3e:18:fc:44:c4:6d:15:29:95:39:1b:ac:92:61:fa:
9c:cd:d2:f5:26:e7:98:ff:d9:f8:1e:fe:ba:65:02:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:BB:A3:63:ED:A5:52:F3:68:9D:9A:FC:9C:C4:6A:77:1E:3F:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:dc:f5:91:2f:f6:3d:c9:98:51:4e:ac:c3:d8:2f:67:eb:6a:
8d:69:6d:ed:f0:c4:96:e9:5d:c8:20:ef:74:4b:e6:bf:a9:c4:
1f:38:5d:55:be:e2:55:b5:04:3e:d5:75:7b:44:d1:b7:0e:a9:
87:50:f5:d4:73:be:1a:95:34:ce:92:2f:40:03:ed:d0:e5:1e:
1c:1d:f4:b4:21:61:cd:34:79:85:22:c9:40:2f:df:ea:d3:ff:
07:67:df:d2:91:99:75:03:c7:f0:37:88:ad:b2:0b:67:ea:16:
bb:70:f1:25:28:d8:d3:72:3b:b3:dc:49:4a:1e:9e:8b:66:0a:
c1:20:57:ff:93:ad:eb:b9:69:fe:15:90:e7:27:11:a3:32:c4:
9b:79:23:b7:04:65:c9:da:3a:16:2a:6f:08:ee:fb:81:3e:12:
eb:75:46:48:75:c7:05:86:35:ea:27:10:e6:f8:ff:cd:f9:ca:
bf:03:87:33:36:e5:02:39:e9:aa:ac:e0:51:bd:e4:6d:26:ab:
dc:eb:e3:a9:08:76:5b:86:ef:e5:ea:47:05:09:42:7b:24:7c:
96:75:cc:87:29:2f:b0:09:6d:5b:03:96:f7:3f:e4:1d:e4:7b:
e2:08:89:fd:b1:4a:f0:47:8a:b2:ed:25:e2:5b:79:22:bb:5f:
4e:b9:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:07 2026 by rpki-client