Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json)
Hash identifier: +QS4Jzjg50mlqaHDnvFMWPDTEpG1gAADf+CDEMZOxdY=
Subject key identifier: 9D:77:1A:9A:E5:CE:09:E3:69:B4:34:41:B9:BB:28:28:B5:FC:91:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D49C4CB7F2DEE756C03E77A8D1A3944960B34A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
Signing time: Fri 07 Aug 2026 04:40:52 +0000
ROA not before: Fri 07 Aug 2026 04:40:52 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:49:c4:cb:7f:2d:ee:75:6c:03:e7:7a:8d:1a:39:44:96:0b:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:52 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a5868f4141834b01ef86fb1498c9024d7139a3742176aac322be133b101618d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:1c:f4:85:82:4d:92:45:49:58:61:07:46:
b5:c5:3c:29:0a:9c:f2:61:d4:e8:57:0d:0c:a3:44:
86:8c:7a:21:9c:23:1d:41:b2:e9:34:13:29:22:ee:
ca:e9:4e:74:86:5f:7b:a9:90:73:71:95:32:b1:54:
08:68:92:a0:fe:2b:13:32:20:60:80:f1:a5:1f:c3:
28:8b:a2:e7:53:6a:28:8f:29:46:d9:48:49:92:53:
92:95:b2:d7:93:83:05:d9:8c:ab:70:e8:5d:93:b0:
81:fe:6b:aa:51:93:95:0f:f4:72:14:f9:bc:17:4f:
d5:cb:ee:45:7d:a9:95:48:7b:ea:7d:5e:2a:56:99:
0f:26:89:c7:72:8f:58:c1:e6:82:a6:35:52:93:8e:
cc:ab:40:8f:7d:15:ce:59:c6:a2:e9:c6:00:90:8d:
21:f3:9d:31:a3:fe:15:ed:b3:22:ff:8a:00:05:fb:
59:46:08:f1:3c:b8:bb:36:d2:3c:32:34:4f:60:eb:
24:f4:e2:e8:0d:72:5d:06:ba:94:88:de:a8:51:8c:
60:28:cb:62:24:0a:a8:49:5e:1c:8a:82:12:ac:ba:
05:b1:b9:1c:eb:cc:34:2b:6c:b3:df:62:2d:a8:26:
dd:81:c8:f5:7f:f9:bb:3a:65:4d:96:65:c9:76:c6:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:1A:9A:E5:CE:09:E3:69:B4:34:41:B9:BB:28:28:B5:FC:91:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8030::/48
Signature Algorithm: sha256WithRSAEncryption
7a:34:b7:3f:50:da:1f:85:d6:21:84:e1:57:aa:3e:4b:0e:09:
5f:3c:37:ac:f6:13:63:31:16:f8:81:60:bd:39:64:3b:f1:79:
db:28:e1:7b:b5:10:29:17:82:30:26:ac:97:72:2c:88:0a:10:
4b:da:50:c2:5f:17:b3:cc:74:19:45:8b:25:ae:66:31:fa:13:
89:48:88:2e:4c:d7:80:39:8a:c7:f4:7f:fb:ab:13:2c:7f:1b:
a4:45:52:dc:5e:2d:1c:39:c1:a3:ae:7f:78:a6:7a:ad:17:c2:
bc:48:2d:19:02:6a:cb:26:09:74:90:de:b1:ad:13:46:50:c4:
00:03:7e:05:0c:94:49:8e:e4:b5:de:92:fd:5d:ef:51:37:9b:
a7:7b:d0:56:71:dd:0a:89:f7:4b:20:51:64:8b:1f:26:38:32:
9d:a2:b5:26:4b:ce:e8:46:47:b8:04:0e:12:45:8f:80:30:9d:
e2:1a:d1:6b:48:f9:f4:93:6e:40:1a:71:fb:5a:12:ad:33:be:
91:91:4e:82:01:ce:51:d3:03:2b:c2:c2:a0:fb:e8:bb:dd:01:
79:80:74:b0:70:eb:24:5f:1c:dc:be:07:ed:69:e1:07:0d:22:
d4:b9:11:19:45:fa:aa:9c:c6:0a:02:f3:07:da:db:32:ff:3d:
a3:0f:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:46 2026 by rpki-client