Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa
File: 1b481025-758b-4274-9258-687a3a99b530.roa (raw, json)
Hash identifier: TLh4Jlj9HaesrGW4bAZy1w8xKQ3FRzlvlav/KnnDxN4=
Subject key identifier: A5:77:7A:96:8F:CA:87:56:44:15:3B:BD:31:29:1E:F9:FA:DC:A9:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11EFEA1D59C3B08E29FABD8AB70951D37CF101FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa
Signing time: Thu 10 Sep 2026 02:40:27 +0000
ROA not before: Thu 10 Sep 2026 02:40:27 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ef:ea:1d:59:c3:b0:8e:29:fa:bd:8a:b7:09:51:d3:7c:f1:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:27 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=ff0e6626b9efe09f013d8757a861cc2e35cce33a1100b78b9c12043f613b076f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:f9:66:11:86:b6:d0:ef:73:cb:2a:67:75:
c5:05:c8:bf:12:99:4c:29:85:37:e0:54:66:32:81:
01:c3:4c:19:4b:0a:7e:af:dc:2a:69:79:82:4d:f5:
09:ce:8c:1d:0f:58:17:59:3a:52:6c:bf:44:97:dc:
b6:62:15:32:22:2d:34:a8:e7:6d:95:be:46:97:36:
03:61:a1:1f:b3:81:af:0c:7f:59:8e:ff:61:31:1e:
bd:73:4a:e4:55:ad:1d:5e:1f:3c:9e:99:b2:ec:db:
ae:6b:58:93:c2:b2:c7:88:4d:69:65:a6:3d:7f:05:
f0:1a:7e:d2:6e:05:8f:66:71:14:ea:9b:74:df:56:
91:88:a7:6d:89:53:c3:0d:fb:79:b8:68:56:a7:80:
9c:3c:69:50:0b:a7:57:83:f5:cb:6a:4d:6c:05:c7:
07:84:fc:f8:e4:d6:e8:f5:38:c6:de:89:2a:0d:2d:
e2:95:28:fd:d4:a0:23:61:90:43:84:a4:60:ac:7a:
e6:49:be:b9:39:39:a4:9a:97:7e:43:c2:d6:b2:5d:
ae:3a:88:83:24:5a:a6:99:b1:e0:13:0f:34:ba:0d:
ff:31:4e:22:10:18:af:ed:30:a3:bf:0a:ed:aa:cb:
0e:6a:65:b2:3a:6f:86:f5:9a:ca:6f:c9:1d:f7:b8:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:77:7A:96:8F:CA:87:56:44:15:3B:BD:31:29:1E:F9:FA:DC:A9:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:e040::/48
Signature Algorithm: sha256WithRSAEncryption
55:d8:86:1b:1a:fe:42:67:97:6e:a2:da:ed:3f:c2:00:84:80:
b2:ef:23:85:a4:a1:73:ae:37:3d:e1:6e:ad:84:2b:ae:33:04:
7a:d4:fd:b5:ad:c6:83:a2:17:90:d5:f1:64:db:ac:72:13:ce:
e3:0c:16:8e:62:6f:da:10:01:bb:30:2a:9a:5c:4b:73:2e:8b:
63:51:48:24:64:8a:fe:9b:d0:0e:bb:d3:2b:19:0c:61:f1:4e:
22:8c:60:9f:dd:04:22:ce:e3:f5:43:13:f7:0b:4e:bd:37:02:
f5:bd:c1:14:39:35:85:b6:b9:51:e6:2a:a2:4c:fc:83:2c:c8:
bd:0c:1c:55:85:5d:f7:6c:fa:98:2f:a8:4f:23:f7:15:11:be:
2f:50:1e:3c:9c:c1:1d:4f:67:9c:80:10:90:7c:8f:a7:47:94:
35:28:eb:bf:6c:04:a6:8f:cb:bc:30:b9:5d:36:9e:32:09:56:
a4:83:57:03:d5:ac:d8:0e:08:c9:a5:b8:e4:73:c2:58:59:aa:
55:75:df:7d:f6:f3:db:19:0c:29:4c:d1:24:86:10:ce:a6:9a:
33:80:42:63:0e:54:92:3a:7c:6c:b5:0d:18:7d:c8:e2:67:18:
d8:c2:32:cc:ea:ac:ba:63:77:f4:b8:df:fb:f4:48:03:c7:0c:
ce:b2:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:45 2026 by rpki-client