Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
File: 1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json)
Hash identifier: E85mjptvl7RrTklSyeb8P+zdpGb2XRpYcnpoBWFy7eg=
Subject key identifier: 74:E9:1B:78:90:FB:78:10:F2:93:D2:F5:BF:C0:E1:59:13:7E:FA:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4248457CC54E5DB6AEF0475F63BCEED22D14063C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
Signing time: Fri 07 Aug 2026 05:30:49 +0000
ROA not before: Fri 07 Aug 2026 05:30:49 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:48:45:7c:c5:4e:5d:b6:ae:f0:47:5f:63:bc:ee:d2:2d:14:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:49 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c46ffd9bec5e2e6704394daa17ad5851a73ed78f639ba118dc49a2c2bd439b91, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:1a:a7:05:ea:8d:3a:95:c1:08:4f:ba:db:
f7:9c:a0:81:42:eb:2b:c1:19:f2:18:58:ca:b1:c8:
7a:0f:55:a4:e4:9f:ff:68:01:1e:c8:9b:d5:06:e9:
22:df:6f:a0:0c:8f:4b:95:a7:8c:1a:9f:24:c5:34:
aa:ba:81:f8:f2:b9:27:19:b1:f4:c5:44:77:f5:57:
8c:3d:55:9e:60:31:04:6d:bc:f7:7d:39:0c:1e:dc:
6f:10:8d:5c:58:f1:b1:3d:8c:47:82:d9:c7:22:b5:
f6:80:5d:b0:b9:09:d5:9b:b8:c7:d3:b7:c6:82:2f:
ce:bf:06:7d:2c:41:6c:3d:8e:31:3b:c3:3c:32:24:
81:83:e0:c0:b8:3b:be:e6:33:db:44:1e:6f:87:a4:
c8:52:8a:2a:20:9e:84:25:56:59:4d:ac:38:f6:96:
73:40:46:f2:8f:32:97:ee:1b:60:10:42:2d:2d:d6:
8c:3a:72:93:d1:c3:d9:b9:a4:ab:f3:56:83:f9:ba:
3a:48:fc:51:1c:23:6e:ba:21:e8:59:db:14:fe:ae:
e2:ea:e1:e3:9d:8c:ff:81:31:5d:f5:b4:d5:17:99:
2c:80:52:bf:2c:bd:55:b6:eb:dd:9d:9e:cc:2c:f3:
63:ea:6d:34:c2:4f:30:12:d6:de:7e:20:64:81:9c:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:1B:78:90:FB:78:10:F2:93:D2:F5:BF:C0:E1:59:13:7E:FA:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8080::/48
Signature Algorithm: sha256WithRSAEncryption
9f:47:f6:4e:8b:56:0c:54:38:d3:87:2c:75:4e:d1:39:22:be:
4c:6c:db:53:7f:93:26:2f:aa:ba:c8:79:9b:e8:da:b8:8f:76:
5b:d0:d9:5a:36:10:67:e7:3e:05:81:4d:8c:a2:07:10:2f:2c:
3d:03:25:cf:0b:21:91:db:0a:05:41:13:7f:b8:cd:92:29:5b:
a1:44:ac:b9:a6:dc:07:d8:c5:bd:f1:dd:cd:53:ba:11:ed:37:
9b:da:5c:cb:3a:bc:b2:2f:17:14:77:0c:43:24:08:fd:43:4d:
ef:82:7f:fa:0a:ea:a7:60:57:5f:9d:2f:15:5e:e2:19:78:7c:
02:ee:bb:52:5b:b6:a1:1a:85:d1:1e:f9:f4:20:ab:16:e4:14:
ce:a7:06:6e:46:1a:98:51:9a:6d:9e:da:9d:4d:98:ad:f2:d1:
b4:5c:b4:7a:22:76:52:77:ed:3e:b8:8e:9b:1f:14:bc:06:a1:
35:d5:ed:66:98:b5:a3:ae:44:22:0d:7f:57:39:e7:a0:6b:bd:
c4:ef:ae:61:ad:46:4c:c1:5f:21:e0:f3:ba:02:14:31:e3:1d:
3d:14:af:a8:22:e8:35:0f:ef:4c:1f:84:c0:a8:7e:2c:b3:55:
e4:de:bd:46:3a:5d:a1:1e:5c:1d:9f:fa:cc:47:8d:7c:3b:72:
70:ef:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:16 2026 by rpki-client