Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bd4661a-6576-46e1-b4db-aac6262599da.roa
File: 1bd4661a-6576-46e1-b4db-aac6262599da.roa (raw, json)
Hash identifier: ZQJVDyBXGyd5JoXKJloNaOlq/kQgtHAdXtVeRikEWqU=
Subject key identifier: 95:B1:D6:17:A7:82:5D:41:88:C8:BC:5E:97:75:CF:B5:6D:03:26:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4290C9948C2CB09B598B560A04C1BB58052E9172
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bd4661a-6576-46e1-b4db-aac6262599da.roa
Signing time: Mon 10 Aug 2026 01:00:32 +0000
ROA not before: Mon 10 Aug 2026 01:00:32 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:90:c9:94:8c:2c:b0:9b:59:8b:56:0a:04:c1:bb:58:05:2e:91:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:32 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=05a1669190350120d44f48df93cccc6f9c03b4d8abff897bfa5c95df4c302c38, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:09:b3:30:2c:54:73:08:87:2e:b5:26:15:
05:25:fb:24:66:2b:69:3d:fe:95:3e:cb:c5:77:33:
af:3f:92:7a:d9:39:d8:52:61:79:d4:d9:a1:8f:3e:
49:57:62:cb:e9:8d:49:83:a6:b8:86:e0:c3:7d:00:
24:12:5c:36:41:18:42:7a:46:7a:be:6f:c1:f0:db:
33:80:d2:ac:69:94:02:58:f8:5b:23:2f:46:d8:57:
b6:48:84:e9:c2:9e:19:bb:d1:b3:47:c3:64:92:0e:
21:55:1a:ed:69:9a:2b:5c:72:10:ab:ad:c2:1b:af:
29:07:1a:a8:f9:26:fa:0e:91:94:8b:5c:13:cb:d9:
3f:5b:46:4b:d5:34:c7:a1:c2:df:90:e2:c4:7b:c1:
4a:b9:31:c2:76:53:8f:bd:43:d6:90:39:97:a1:37:
fe:e8:cb:0b:29:d4:c3:77:a0:4a:73:6f:09:9b:d4:
9e:f1:54:88:58:ce:89:2f:db:f3:ec:e3:88:f4:0c:
7b:5a:e7:39:8e:60:86:7e:3a:e1:f3:54:bd:6c:93:
e6:5a:39:4b:c4:09:75:7d:55:a6:86:1f:c8:91:02:
7a:cc:8c:6a:40:a6:44:73:2c:04:cd:8e:86:22:06:
68:35:5a:9d:26:e3:4b:3e:40:fc:c7:69:87:42:f4:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:D6:17:A7:82:5D:41:88:C8:BC:5E:97:75:CF:B5:6D:03:26:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bd4661a-6576-46e1-b4db-aac6262599da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:d5:98:50:15:ee:26:b0:c4:f3:73:44:67:02:b0:a6:e5:b9:
2d:ef:9d:fd:dc:d8:88:18:3c:dd:cb:6f:c1:ee:43:3d:44:29:
28:cf:6e:8e:59:be:cf:43:b1:92:e2:ee:bc:b5:f8:e2:d0:33:
d9:bb:3a:83:8b:aa:e7:2c:72:81:42:f3:f0:7f:ea:c7:4c:eb:
be:27:60:62:9e:23:6f:b1:6a:56:3c:1a:e4:58:70:60:ae:2b:
e0:bb:fa:0b:0b:18:e1:8c:69:95:e8:7a:24:e1:bc:3e:65:c1:
53:4f:f9:05:39:ef:35:20:05:00:69:5c:6a:3b:00:5f:be:5d:
11:e8:93:a9:37:e2:ce:d2:88:fc:dc:30:5d:23:fc:46:5b:19:
bc:d6:e7:ea:30:f3:ba:c8:23:25:8c:35:7a:0d:e0:9f:10:56:
dd:96:87:0b:c7:94:59:9b:95:df:a0:e2:84:4d:2e:20:f4:2a:
e7:8d:a6:63:61:b8:11:a6:82:af:a9:2a:1f:54:6d:dc:c3:a9:
aa:2f:0b:2a:d0:28:fe:76:8e:85:4a:25:cf:df:aa:90:ca:c9:
84:b8:49:d9:be:1d:25:e8:74:1b:fb:1a:96:ea:82:0e:81:9e:
d6:93:03:04:d2:83:d0:1c:ad:ce:ba:e4:f4:73:b0:08:4b:fa:
ae:21:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:45 2026 by rpki-client