Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2f449809-abd8-4202-adc3-ce8dd1767b62.roa
File: 2f449809-abd8-4202-adc3-ce8dd1767b62.roa (raw, json)
Hash identifier: RnKNwM5qsxHsYXoXjrgYYJkemwrx9WY0bI9j0ULncEk=
Subject key identifier: BF:BF:E6:66:02:1C:D1:DD:43:0F:82:20:26:24:60:35:D9:D6:9A:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D6851BCE0BB889F2D6B625A29115D5ECF5827D2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2f449809-abd8-4202-adc3-ce8dd1767b62.roa
Signing time: Fri 07 Aug 2026 04:31:00 +0000
ROA not before: Fri 07 Aug 2026 04:31:00 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:68:51:bc:e0:bb:88:9f:2d:6b:62:5a:29:11:5d:5e:cf:58:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:31:00 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9e5f41391b0eed895c2f978f6e0e5397b79f5a509a949c6c18db26d9caf311b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:b1:e0:43:5a:fc:c5:42:87:16:00:cf:a8:
76:99:01:bd:47:6e:9d:47:c3:3f:96:01:4c:0c:22:
7f:06:c7:c3:ad:ab:59:07:b6:b0:19:ee:ff:e6:c6:
fe:ce:d3:61:84:5c:68:f1:48:d3:c7:0d:5d:91:26:
ac:e9:66:22:e4:a0:1a:b6:ca:18:65:0c:7f:48:11:
d5:4c:44:1c:15:92:10:77:4c:b5:6a:7c:a6:8d:3c:
ae:69:cd:83:e0:4f:b7:c8:b4:9d:2d:bc:d0:5c:39:
cb:b6:e5:96:36:32:ff:68:a6:2f:94:db:a0:2b:be:
46:7f:0f:44:ec:d6:f2:7c:76:b5:fe:1c:b6:74:8f:
2d:2b:6e:e6:96:aa:9b:56:c8:2d:c0:8d:99:38:0a:
ea:9a:5b:fc:50:77:0f:f0:56:cb:12:d7:ab:0c:1a:
9b:57:84:3e:64:79:b8:1f:d2:5f:96:20:b1:7c:09:
84:f8:98:9f:97:f5:ae:23:95:89:47:c6:aa:f7:e8:
29:e3:f0:cd:2a:97:a2:2d:8d:ad:0a:70:61:e4:29:
2d:1a:73:e7:52:0f:ce:f0:c1:dc:8e:03:b8:dc:47:
3f:63:ca:a9:69:ad:5b:35:ca:bb:1c:7b:58:56:40:
4a:45:af:ea:50:43:f0:81:d6:97:3c:80:24:c4:4f:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:E6:66:02:1C:D1:DD:43:0F:82:20:26:24:60:35:D9:D6:9A:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2f449809-abd8-4202-adc3-ce8dd1767b62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:5000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:3c:66:b1:89:cc:57:cb:e2:5e:1a:63:d8:86:38:7d:62:c9:
d7:35:e7:b0:2a:9d:ff:1b:8e:8c:32:2e:35:67:49:ad:dc:60:
0f:cd:63:cd:0c:45:4f:39:25:c3:7f:c8:c5:ca:f8:d4:1b:8e:
5a:96:b7:4f:e3:3d:9f:ac:e1:7b:c2:ed:cc:ac:39:05:66:11:
c4:46:ef:58:be:cd:24:f8:54:45:8b:fb:c0:7e:a4:6a:66:1a:
02:a8:cf:91:f0:23:15:75:c9:b1:fb:7f:30:a6:93:4e:1d:65:
74:e7:a4:3d:74:b4:81:b5:9a:97:91:73:ca:f7:80:f5:09:cc:
19:53:1b:5c:c4:7d:ac:62:fe:fe:90:13:ed:f6:c7:dd:97:be:
c1:33:44:c1:a5:0d:58:56:b9:a1:cd:7a:00:7c:72:6a:01:77:
b0:fc:c3:7e:4c:c7:b7:1b:a5:a0:44:f8:6c:0f:d7:24:70:d7:
1c:4b:0c:24:70:14:bb:8f:2c:1d:10:d9:91:34:e2:ec:a4:c2:
d7:ab:1a:94:59:c5:bc:f8:67:78:27:00:a7:21:8a:21:5c:72:
25:9f:53:20:82:d4:7f:4b:f7:c2:48:6f:63:d1:89:0a:49:90:
d5:76:22:73:85:53:9b:56:ec:08:86:66:d2:c6:ec:4c:68:9c:
b3:9a:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:16 2026 by rpki-client