Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b87e675-f218-4ec2-96bf-4cab8a9fdcc9.roa
File: 2b87e675-f218-4ec2-96bf-4cab8a9fdcc9.roa (raw, json)
Hash identifier: 9HQLvZukKt2bjRG/okKLtpgBGU6pUvA4Yo4AspAULpQ=
Subject key identifier: 14:6B:A1:0D:98:EF:90:BA:76:8A:72:A0:9A:77:61:06:65:9A:9C:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1013CDE00794C4A1C245C0074FE33AA1330A0401
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b87e675-f218-4ec2-96bf-4cab8a9fdcc9.roa
Signing time: Wed 09 Sep 2026 16:13:57 +0000
ROA not before: Wed 09 Sep 2026 16:13:57 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d069:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:13:cd:e0:07:94:c4:a1:c2:45:c0:07:4f:e3:3a:a1:33:0a:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:13:57 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=24d96462ae19d3257b2e6ef0264c6db29f6516dfa64bd33ef759bd247103e804, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d3:36:e0:03:2e:a7:f5:54:64:b6:a0:e2:77:
c1:dc:08:84:6b:af:dc:6a:18:5a:84:ca:b0:a7:49:
4b:a3:81:3d:ab:9d:8e:16:d2:42:2b:70:90:3b:8f:
bb:da:7e:b7:48:81:58:11:89:a1:b1:1f:99:a0:fe:
e1:f5:cd:e7:88:e6:32:0d:6d:79:5f:2e:9a:1a:bd:
e0:7c:7d:35:ac:5d:c9:1c:13:02:39:db:d3:db:cb:
d4:a7:81:83:46:e1:a2:89:7e:24:db:5b:6f:b0:5d:
90:b5:49:24:3d:54:f1:25:9b:64:92:20:99:02:d4:
65:1a:80:3a:bb:37:be:29:79:34:e1:d6:27:92:fb:
7a:47:16:4d:b1:87:86:cf:cf:d1:87:8f:1f:7f:6e:
46:26:f7:44:0d:27:81:cc:17:6d:56:8f:ee:8f:5c:
ff:e8:9a:d1:dd:b9:50:65:86:96:6a:d9:4e:c2:6d:
16:4c:08:f4:d8:08:9d:80:6e:9f:03:40:6e:1f:ec:
39:cc:b1:af:56:dc:a8:e3:13:97:83:50:27:66:f1:
ff:9a:b8:f3:eb:ed:22:19:5c:e8:99:69:03:e7:1a:
19:ee:27:36:d2:28:9a:68:77:35:3a:f3:88:3d:21:
a0:62:29:42:bf:b7:e7:89:4a:18:0b:a0:cf:ad:af:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:A1:0D:98:EF:90:BA:76:8A:72:A0:9A:77:61:06:65:9A:9C:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b87e675-f218-4ec2-96bf-4cab8a9fdcc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d069:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:f8:ee:f7:da:b3:cc:23:c2:b6:ad:56:47:4c:88:25:95:98:
8a:7f:ed:f6:33:2d:99:63:fa:75:e9:2b:ce:ff:07:4b:18:56:
af:70:04:74:23:3c:27:6a:d4:85:f0:85:e3:94:59:6c:1b:81:
6f:56:22:94:b6:9b:86:ae:cc:bd:8c:92:2a:4d:3f:3b:7a:54:
9c:fd:b1:1b:ac:84:45:17:63:45:04:ea:82:27:75:54:fd:4b:
50:27:44:df:b2:bb:03:f6:71:04:f5:82:0c:26:87:19:69:5d:
54:2b:71:9b:64:0d:dc:92:e2:02:16:8c:4d:b3:b0:f4:7a:8f:
f1:45:8e:3a:8d:64:f5:26:47:88:2f:d1:9d:bb:01:a7:d9:c3:
ea:cc:e9:9d:1f:6f:0f:5f:ce:fa:31:8a:1e:63:2d:41:28:d9:
8a:5d:c2:bb:2b:60:a5:eb:61:d0:f6:28:52:ae:d3:22:46:b5:
13:46:3b:c6:bd:a8:2a:c8:be:e4:eb:5d:e9:01:c7:4b:af:91:
c5:cd:5c:bd:83:7d:9c:43:2a:a3:fe:91:22:ce:4e:71:74:0d:
2c:58:af:57:e0:a7:95:bf:c2:19:d1:80:4a:d5:a5:de:b3:cf:
be:02:57:4b:dc:28:8b:d4:0c:49:69:76:9a:1a:75:b4:62:e5:
89:5c:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:54 2026 by rpki-client