Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2affa009-7cf4-482d-83f4-2250c7f5cd8e.roa
File: 2affa009-7cf4-482d-83f4-2250c7f5cd8e.roa (raw, json)
Hash identifier: GaBkfz4ZFeQ8VCMvbaJPxsMh1l5FoMoOq7w0ro8mc4s=
Subject key identifier: 95:2D:63:28:B2:CF:2C:3E:0A:0A:D2:82:BD:02:BF:59:81:32:30:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 055F6B2F4BD093BCAFC238BB030EDA37EF7BB68F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2affa009-7cf4-482d-83f4-2250c7f5cd8e.roa
Signing time: Wed 09 Sep 2026 16:12:58 +0000
ROA not before: Wed 09 Sep 2026 16:12:58 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5f:6b:2f:4b:d0:93:bc:af:c2:38:bb:03:0e:da:37:ef:7b:b6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:58 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=cab7234c2d0f97e0a15ed99d5848624122553a54c223c0e4c63a9ca28d70874e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:e2:64:33:1e:94:bb:af:d5:52:2d:cf:0f:
91:57:64:63:4f:ef:1b:e7:aa:4e:0c:0c:a2:40:c0:
ae:25:52:be:47:7c:7e:cc:9f:46:91:d6:bc:84:03:
3b:0a:b9:64:a7:07:78:2d:80:98:c5:c8:1c:ea:b8:
6a:1b:c4:74:db:49:2f:cc:dd:06:d8:20:77:75:82:
c8:5f:e2:ea:a6:a3:96:e7:40:53:52:43:0b:2c:b8:
3b:9e:b7:35:c4:cd:13:d4:c2:76:19:3c:2a:97:04:
3d:1e:81:75:cd:7f:9a:8b:09:d7:83:b9:ca:64:6d:
b6:55:bc:0e:d3:70:a8:0e:6a:9a:3b:5a:72:fc:dd:
4c:01:18:77:db:41:1b:c3:4a:59:1a:9d:0b:0d:f4:
70:fb:c4:d2:00:9f:f5:a9:dd:9e:5d:5f:6e:f7:ce:
3e:90:04:b3:ef:b1:b9:7c:9b:ed:ae:69:2f:be:4c:
4b:bc:1a:df:be:df:82:e1:ee:03:d8:51:f8:9b:2b:
7b:9e:9c:79:61:d3:4c:74:f4:5f:70:ab:79:15:20:
7a:7a:f9:19:83:bd:d0:1c:b1:af:11:81:56:76:90:
71:df:d3:63:87:40:63:da:e7:a9:2e:3c:27:60:09:
b1:83:38:28:62:74:aa:b3:1d:35:9f:10:64:6a:5c:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:63:28:B2:CF:2C:3E:0A:0A:D2:82:BD:02:BF:59:81:32:30:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2affa009-7cf4-482d-83f4-2250c7f5cd8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:c000::/40
Signature Algorithm: sha256WithRSAEncryption
41:0d:1a:ff:f0:a1:42:c2:4f:77:24:59:72:cb:70:1b:39:cb:
2e:dc:85:d2:48:fe:42:a8:88:f8:9f:f4:bc:b2:19:d7:42:b9:
b1:5e:cf:c4:d8:67:b1:8f:4c:4e:2b:bc:4e:ad:41:10:55:6b:
c4:89:09:1f:d6:2c:56:97:32:1e:07:9e:1c:8b:be:8c:e5:48:
cd:ec:54:9b:37:90:fb:a2:84:05:c3:5b:69:52:81:6d:14:c4:
49:9e:c9:36:6e:1e:ec:5c:cd:1d:2f:86:3f:e3:a4:41:29:0e:
cf:2e:42:70:dc:9b:bd:68:b8:05:0a:c1:02:2d:25:7f:ae:eb:
ae:60:63:79:85:0f:44:4f:f7:5d:73:3c:49:81:bf:09:90:0f:
84:a7:43:d0:15:61:b1:4b:8d:7a:3b:ed:a4:e3:56:3d:8f:da:
46:59:f5:5d:84:3b:b2:27:a8:d4:98:cc:69:8a:f0:89:61:86:
07:fc:c5:1c:0b:e1:1b:cd:55:99:f7:d6:b1:b7:23:07:d7:1b:
7c:a0:33:3e:42:14:1d:98:c6:49:97:f1:d3:82:5b:82:eb:e8:
5e:a8:eb:5c:52:44:ab:2d:89:39:05:da:03:fb:3a:d5:04:bf:
65:57:e8:8a:cd:60:8e:1f:16:1e:1e:90:75:3c:bf:35:0f:af:
1c:3a:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:22 2026 by rpki-client