Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b170690-12a6-446c-86ae-4567f10a7e29.roa
File: 1b170690-12a6-446c-86ae-4567f10a7e29.roa (raw, json)
Hash identifier: m2K7xsqUsD8oOyBHvj2OHB3G81U+pf9P+9JiHRQGMMk=
Subject key identifier: 9B:2F:4D:D5:A2:67:E1:99:AC:98:37:8D:A3:F3:A0:EE:10:94:80:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C74D27418357C37E7C017EF396938C05C9C0D09
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b170690-12a6-446c-86ae-4567f10a7e29.roa
Signing time: Wed 09 Sep 2026 16:14:05 +0000
ROA not before: Wed 09 Sep 2026 16:14:05 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:74:d2:74:18:35:7c:37:e7:c0:17:ef:39:69:38:c0:5c:9c:0d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:05 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=c370bb7551e6cbfdc3b3f82979d0f6b69e91333a5036a82bef4c9e775d0cd3fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:76:ec:fc:e4:54:57:4c:3c:5c:f2:fb:b4:
f0:00:65:8c:e3:e2:70:c2:bb:15:68:f2:ee:99:cb:
66:3a:c2:8b:a0:2a:82:89:4b:48:1f:e9:72:b8:7d:
cf:74:d7:68:b5:be:e5:b9:89:ae:2b:6d:3d:31:70:
e4:1c:a8:f4:f5:cf:72:d9:fc:ef:a0:4d:00:5d:ac:
45:e0:ef:60:60:41:de:54:46:1a:1a:10:ed:4c:9f:
4c:14:5a:47:fe:58:91:f3:99:0a:67:84:b1:2a:f8:
b0:ef:0d:fe:46:a9:c9:ca:9f:ea:07:27:70:83:3b:
fc:61:44:30:e4:e1:96:a8:ae:2d:d5:fe:90:2c:a3:
79:e9:5d:7a:d7:9a:2e:06:06:64:1c:8b:1a:01:ee:
5a:2b:3f:d5:54:a8:fa:8c:09:e6:37:a8:ab:ec:34:
9f:67:59:7f:4f:98:36:a3:7f:d5:53:0e:9c:3e:5e:
2e:f2:23:8d:e9:8c:88:1b:10:2a:d9:4c:0c:28:60:
d3:ac:59:29:b6:6c:85:12:16:e4:07:1f:0f:82:e2:
f1:ab:89:46:cd:4e:5b:37:1e:d4:7d:82:92:fe:19:
de:14:7a:f4:76:c8:e5:22:e8:a2:c1:13:14:31:83:
d6:9f:c3:fa:cc:2f:bf:97:89:53:b0:9c:86:15:e5:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:4D:D5:A2:67:E1:99:AC:98:37:8D:A3:F3:A0:EE:10:94:80:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b170690-12a6-446c-86ae-4567f10a7e29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:4800::/40
Signature Algorithm: sha256WithRSAEncryption
86:a7:17:b2:4e:10:81:eb:dc:d4:ec:58:6a:c3:0f:85:e0:e6:
08:0e:1d:c1:38:9e:73:5e:ca:01:2a:b4:e6:19:23:54:67:d7:
20:73:2f:e3:3f:07:1d:70:e3:50:1a:d8:87:8e:c4:af:40:62:
be:f0:03:3d:e1:81:6a:8e:44:f8:ee:c1:07:57:1a:7f:49:34:
e6:b8:85:ae:1e:a1:97:16:70:82:26:e9:69:53:65:fa:80:f6:
78:0c:81:35:36:62:a3:11:35:83:30:0a:57:aa:ac:ea:4f:b2:
86:78:fb:e7:d4:be:c1:60:ea:b3:7c:10:ca:93:d1:06:33:f8:
62:46:dd:c9:9a:f2:9c:6e:ca:e4:8b:f6:d0:4e:07:a5:0e:d2:
28:0c:5d:8a:5f:ce:fe:a2:fe:61:51:97:44:52:38:ac:05:1f:
4f:fe:9b:80:00:4b:51:78:33:63:c8:c5:24:17:7c:d2:fd:31:
33:fc:d6:dc:df:50:38:56:b5:87:7b:05:a3:f6:0e:f7:3b:d3:
ee:0e:a7:d4:bd:8c:41:a8:13:14:54:90:76:82:99:af:61:88:
8b:06:60:88:d9:e7:66:50:b0:65:86:77:35:18:03:05:3c:69:
ef:be:c0:80:97:26:85:b2:63:b9:43:ef:95:4b:2f:7a:99:f8:
fd:bf:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:23 2026 by rpki-client