Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/278dd4fa-de02-446c-a4ac-184c5f35a577.roa
File: 278dd4fa-de02-446c-a4ac-184c5f35a577.roa (raw, json)
Hash identifier: 17BmuGCOUdX7nraZLUYWO7rHNa7IyqTsMrmb2LTtctM=
Subject key identifier: F3:80:E5:D7:E6:F9:3E:0F:C0:47:23:A3:B5:BA:2D:A8:01:6B:07:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 362B91D7C0E0D93D3BEAD062B4246EF81C60DCFB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/278dd4fa-de02-446c-a4ac-184c5f35a577.roa
Signing time: Fri 07 Aug 2026 05:40:38 +0000
ROA not before: Fri 07 Aug 2026 05:40:38 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2b:91:d7:c0:e0:d9:3d:3b:ea:d0:62:b4:24:6e:f8:1c:60:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:38 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=321434b8b266292dea2f43a0d4b1be53b3b390e51eeddbe8d4f7a60ee69482df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:c2:30:ad:7f:5a:de:4d:f0:b0:61:6e:fb:
59:6e:af:e8:d6:61:af:ee:c7:24:36:34:9f:90:f7:
9a:e7:cd:61:2a:cc:b8:75:e2:52:40:2a:10:eb:60:
21:d8:46:75:8d:d9:88:63:d3:65:51:14:cb:52:f0:
e5:d0:1c:30:b9:d2:78:a8:78:9e:58:2b:f4:26:7e:
ee:4d:a0:b1:2b:e3:33:2e:c9:78:f4:c4:b2:f4:a2:
c2:8f:7b:d3:3d:c8:66:3d:a4:a1:89:9a:9c:d4:33:
8f:c4:08:da:36:f9:50:e4:95:5f:2c:8c:11:05:73:
c0:66:83:c2:bf:18:c6:8f:ef:b3:72:73:fd:63:d9:
f6:69:16:fe:e5:ac:9c:df:f7:ec:dc:20:7b:5f:c9:
aa:03:d9:b1:e7:82:e3:79:fb:04:b1:84:c2:64:45:
d7:92:9d:aa:de:f2:52:19:40:6a:23:54:1f:6c:9e:
04:2b:84:84:56:47:b5:ff:f7:72:9a:c1:60:5f:7e:
7c:3c:e2:d9:55:bb:4f:da:5f:87:8c:d3:6e:5b:a0:
50:ab:cc:de:3c:0a:1b:4e:36:00:c0:fe:40:d0:58:
dc:e8:b2:84:98:d3:61:ed:6e:ea:f3:73:e2:71:a6:
a2:34:d1:cb:e0:38:18:e1:6d:9b:87:92:9a:8b:42:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:E5:D7:E6:F9:3E:0F:C0:47:23:A3:B5:BA:2D:A8:01:6B:07:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/278dd4fa-de02-446c-a4ac-184c5f35a577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
b5:84:3b:1a:5c:25:77:04:17:f6:81:75:9b:32:33:31:0a:83:
91:32:a9:29:43:13:8c:de:e5:f5:d6:60:dd:5f:74:9c:fc:29:
e7:56:fc:4a:07:65:88:34:50:74:d5:67:ef:c7:77:45:da:34:
09:7d:ed:3c:00:52:fa:c1:e2:43:89:55:e3:d0:1b:df:7c:eb:
81:e4:74:f2:6f:39:5e:db:77:71:e3:59:75:9f:ab:92:8c:96:
ed:5b:83:94:3d:68:a1:5d:03:b9:4d:42:a8:25:4a:c9:71:5c:
9d:65:d0:ff:63:44:26:dd:e2:9b:81:5c:2f:6b:93:55:2d:ee:
6b:04:a3:98:c2:18:d8:16:4d:58:71:99:a5:d1:95:56:d0:c8:
f8:1b:dc:e5:0a:9d:42:39:58:91:81:7d:5a:05:48:9a:6c:17:
5b:b7:c7:69:80:24:19:32:e2:6d:9e:a6:26:ae:10:93:83:c4:
0a:38:03:a2:8d:76:69:f0:ac:0a:4e:39:96:05:ee:9a:73:e3:
da:60:e2:ca:34:29:da:8f:43:44:78:00:60:06:d6:77:e3:bc:
83:3f:81:45:d9:c8:28:9d:25:67:99:03:dc:db:8b:13:29:d1:
2f:93:a6:bc:62:8c:b3:e1:90:ed:f7:c5:a4:66:71:1f:01:06:
6b:32:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:15 2026 by rpki-client