Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json)
Hash identifier: oY1lB3+xZHKzHMt0Saz588nDrVZY23GHsf74fXJFbgk=
Subject key identifier: 98:7D:6A:02:21:E7:1B:4F:73:26:D1:A9:80:30:70:55:C1:4A:1C:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1597233DC93B2F8F04C6E8E030C921F8CADB6E51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
Signing time: Fri 07 Aug 2026 04:30:39 +0000
ROA not before: Fri 07 Aug 2026 04:30:39 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:97:23:3d:c9:3b:2f:8f:04:c6:e8:e0:30:c9:21:f8:ca:db:6e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:39 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=2d215f45614fae48ee8f5f94811f335ff3697b6fa4dbe26dde17559755a45745, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a3:51:29:2c:29:c8:89:f4:b7:b1:86:24:b8:
06:7f:f1:d3:1f:a9:77:a1:a5:44:af:f7:95:b9:96:
07:db:a7:80:92:6d:c1:68:f4:53:28:3c:69:27:fa:
f9:2b:70:0d:7e:1b:29:56:98:35:f7:aa:1f:0a:15:
fd:3b:23:ae:ee:bd:32:3c:9b:c6:41:82:e8:1e:f8:
1d:d6:d4:6a:22:b6:35:73:cf:88:75:02:d2:5d:7f:
7d:10:32:52:3f:14:85:81:98:77:d4:6f:81:1d:c9:
1d:d6:87:a1:3b:49:01:ee:00:d0:b3:5a:9f:74:e6:
73:d2:bc:32:95:6f:a7:df:1e:ac:a7:c0:e7:fd:7b:
1a:fc:46:4f:cf:8c:de:dd:d2:ea:81:1e:36:cd:07:
6f:75:cd:e7:f6:f6:7a:76:17:20:89:3f:dc:e3:19:
2b:fb:43:22:9f:e8:90:8f:39:4c:1b:d7:da:88:2b:
9a:30:95:7f:87:02:8e:16:c6:cc:46:dd:a1:57:cd:
55:d5:fa:4a:4c:54:64:60:7b:c5:6a:66:0b:53:ba:
24:0b:1e:ac:fd:e9:cf:6b:b9:0c:98:84:0c:c6:4d:
35:f8:43:c7:83:58:49:2e:03:a9:64:82:6f:87:aa:
8c:fe:da:9c:66:8a:17:7f:3f:e7:33:95:96:1e:30:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:6A:02:21:E7:1B:4F:73:26:D1:A9:80:30:70:55:C1:4A:1C:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
56:f4:7d:56:d0:b9:54:0f:f2:c6:2d:7f:8a:97:22:12:44:55:
dc:dc:22:fe:51:09:4f:a8:9c:03:d1:35:cc:70:b5:17:c3:33:
94:83:66:b8:eb:71:de:1a:d1:d1:ae:e9:ba:24:fa:1e:a1:f3:
28:5a:eb:56:b0:45:92:b7:0e:ee:1b:ec:03:0a:c3:bc:84:61:
9c:e0:7a:99:07:57:58:a9:54:99:21:f6:4e:6e:24:95:be:e2:
d1:fa:79:d5:02:5e:f9:9d:b1:c6:34:48:69:09:ce:dd:68:55:
f6:c6:e1:73:aa:33:02:63:2f:64:1f:13:cd:2d:01:df:bb:4e:
d9:df:7d:87:9b:c5:a6:b7:03:c9:b0:b8:07:69:07:03:83:35:
1c:56:43:4d:56:0c:f2:e8:34:18:94:05:70:7e:92:19:d8:cd:
b5:9a:db:0f:1f:fd:47:b9:4b:aa:64:30:7a:7f:d1:72:8b:9f:
1b:e5:93:31:d0:de:a3:ae:f9:39:31:eb:43:54:1b:0d:11:45:
b9:e2:d3:5a:a6:73:67:92:77:b3:35:e1:0d:af:23:25:1e:10:
98:73:ae:95:8e:73:3f:1c:c6:7b:36:6f:fb:12:ba:cd:95:f1:
47:5c:ba:aa:c0:f6:28:53:b1:d5:83:1a:25:76:9c:9e:7c:c7:
b6:b0:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:14 2026 by rpki-client