Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
File: 27140a0d-612c-4da4-a60a-55c28faff6fe.roa (raw, json)
Hash identifier: yOU5/RvDADnNGSICGSeb2J4YCuu69DMRrcm0X/Ko93E=
Subject key identifier: 60:51:0A:D2:4A:AA:A7:2E:C2:98:CE:6B:19:1D:31:72:02:88:B8:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1420CEE463694EEBD9084F4EF4CF0C9BE25510DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
Signing time: Fri 07 Aug 2026 04:30:12 +0000
ROA not before: Fri 07 Aug 2026 04:30:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:20:ce:e4:63:69:4e:eb:d9:08:4f:4e:f4:cf:0c:9b:e2:55:10:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=08682cff6fcba04666d8e0df501fed1cb77fa946371806c1e0cb2b3c400e22a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:b7:a3:4e:9d:38:6e:6a:c8:ec:9f:3e:e2:
4c:67:d0:82:8c:85:9a:68:33:af:6d:95:45:1e:fa:
77:a9:43:42:90:01:5e:3c:ff:62:35:cf:04:29:5f:
04:c5:7a:01:ba:7f:95:85:51:9a:26:3b:74:f1:cf:
5c:a4:2e:df:7c:a6:e7:6f:38:6c:c7:46:69:71:e6:
a2:75:9d:93:21:69:dc:51:f6:aa:9b:07:92:7a:73:
fb:6a:c7:f6:8f:a0:ce:85:80:91:ef:b1:8d:e8:c6:
c0:02:f7:16:b9:12:34:87:ea:65:f5:ee:83:44:a2:
f4:3d:d2:79:1c:83:03:7e:96:54:6a:85:f7:61:18:
1e:61:9d:a5:4e:12:f8:46:2a:4d:b7:91:4a:46:87:
ee:e8:b1:f8:5e:a5:ee:f1:4d:93:5f:fa:25:34:38:
97:54:46:f7:e2:71:99:cb:af:1e:81:f8:8f:1e:93:
0b:a3:17:0c:9e:5b:19:3e:b5:b2:d7:d3:6e:2f:ff:
14:d2:56:cc:4a:7a:fa:72:1f:2c:9d:10:73:49:09:
ff:84:6d:11:8d:f1:bb:6d:b2:d9:3e:a6:1a:b5:03:
e1:7e:13:0c:45:f9:8a:06:1d:34:00:b4:d3:94:a3:
80:f1:d9:de:0e:a3:3b:d6:e1:06:4b:2e:aa:10:75:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:0A:D2:4A:AA:A7:2E:C2:98:CE:6B:19:1D:31:72:02:88:B8:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
55:c5:82:f9:34:e5:61:0a:41:18:21:59:a4:de:c9:8d:6d:6f:
9d:b4:cc:b6:e5:2f:94:b0:45:9a:c3:54:0f:6c:16:18:66:77:
0b:7b:fb:f5:c2:3a:f4:d7:33:e4:d0:4e:fe:29:79:ad:8b:4a:
32:fc:c5:14:4f:6e:48:ba:26:61:2a:de:83:c0:a3:93:16:a0:
d5:b6:7b:16:96:7f:b5:b7:ab:85:66:f7:50:2e:0d:32:ee:8c:
82:a6:37:de:e2:53:fc:d8:6c:67:41:f2:66:5d:17:42:9f:9a:
d8:29:2e:e7:04:36:34:8a:4d:f5:2a:ca:a3:f1:fa:73:5a:89:
a1:32:dd:fb:cc:91:05:e4:03:62:04:c4:a6:b8:8d:6f:4a:35:
36:86:c3:89:28:e8:88:56:3d:b4:59:97:08:46:51:72:1a:d7:
04:6a:92:30:45:bc:b0:47:e2:04:73:50:ed:e4:36:34:cf:fb:
a0:53:d9:50:97:23:af:47:f0:61:0e:3c:73:e1:3f:17:97:e4:
38:cc:fd:25:01:4e:a9:53:a6:5b:f9:2c:1b:74:65:11:f5:c2:
98:9a:e3:ec:6f:c3:b6:bd:cf:18:81:cc:69:f6:28:9e:60:e0:
02:96:a4:18:d0:9a:79:0b:49:44:10:5c:82:1f:87:e0:2f:25:
e5:97:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:10 2026 by rpki-client