Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
File: 301d1d15-dd00-41e7-9f44-49159e46a51a.roa (raw, json)
Hash identifier: yk+kPyRPpnOZB0ZJ0lA9HdpBlgl/+8bIvmD6Nl+nkJ8=
Subject key identifier: 53:B7:12:A4:0F:26:53:83:91:94:FF:14:83:1F:35:E8:AB:88:5A:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F2B885E7AD5E3C779016973FB513027C95549D1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
Signing time: Fri 07 Aug 2026 05:00:33 +0000
ROA not before: Fri 07 Aug 2026 05:00:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2b:88:5e:7a:d5:e3:c7:79:01:69:73:fb:51:30:27:c9:55:49:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bb81a62972c4fe27a35da737641673d992be82efad3d60b806316b39ef6b43b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:84:08:12:67:d6:75:09:57:70:28:77:17:
b3:e8:9a:cf:0e:18:e2:e1:53:67:10:26:70:43:ff:
3a:3a:1c:74:d8:de:dc:b8:6d:13:9d:09:60:bc:3f:
3c:15:62:65:89:fa:bb:65:39:31:ab:a5:e0:22:84:
f9:59:76:9b:5f:2f:3d:9e:9c:b7:52:40:96:e1:fe:
d5:6d:a3:e1:ce:78:31:ed:e3:e8:5c:b8:69:80:fe:
81:5e:c8:1d:dd:5a:e4:1c:cb:d9:9d:a7:9e:c3:14:
98:2c:ad:1a:71:c4:ff:21:85:e1:8d:a1:c8:1d:3e:
fe:11:dc:04:d8:47:cb:07:0f:99:13:50:b7:2e:99:
0b:e3:18:9b:b0:3c:c5:17:81:6b:c9:e9:59:5b:8c:
4c:ae:8b:5f:20:b7:bd:aa:be:87:2b:6a:f6:d7:a6:
af:ca:cf:f1:21:39:d0:16:bb:59:e3:97:c0:65:7b:
a4:dd:08:68:16:65:a7:22:4b:bb:96:1c:a3:79:67:
4a:c2:6b:ac:6a:ab:8c:1f:36:5e:52:a3:f1:13:10:
0b:55:a8:b2:04:6d:61:6a:6b:e1:1f:fa:9c:13:21:
68:f1:23:64:5d:34:a8:dd:dd:79:60:32:4b:b6:a1:
7b:90:f1:fc:b5:5a:c3:84:02:22:fc:73:0c:5f:3f:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:12:A4:0F:26:53:83:91:94:FF:14:83:1F:35:E8:AB:88:5A:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8040::/48
Signature Algorithm: sha256WithRSAEncryption
af:c9:cd:02:fd:f7:ba:1d:bb:91:0b:e4:4e:86:31:a5:8d:2a:
39:b9:8e:24:4f:4d:e8:a2:31:e7:04:34:d3:ab:cb:d2:16:b0:
98:ed:5e:1b:0b:73:a3:fa:0e:e3:cb:a2:64:c3:71:b8:c0:b7:
73:74:e9:a0:13:fa:10:37:a2:ad:a2:55:b1:d2:0f:e3:e7:83:
a6:57:25:b1:35:66:41:bc:ed:e6:25:1b:2f:ff:d1:bc:62:92:
69:67:c3:39:4c:79:1d:b4:f4:b9:0b:6b:be:fe:66:c1:f7:71:
58:35:ff:75:d0:d2:15:59:93:f0:48:23:c3:32:72:5a:15:bb:
2e:62:30:db:6b:5b:a5:10:3d:4b:4b:0e:f8:a2:ac:66:3d:59:
b7:bb:6c:cc:43:6c:52:4b:85:1d:24:56:31:f4:64:e0:85:d3:
b3:67:1d:4c:f8:72:d1:f9:d5:11:86:50:01:e9:fc:5d:ff:ec:
1d:36:1f:d6:d0:03:e5:d8:36:bf:b9:28:0e:db:44:9e:11:ac:
ba:3b:87:72:58:ad:53:6c:e1:79:77:33:aa:ff:60:fa:eb:20:
97:38:3f:25:b7:23:1c:46:88:a5:c3:fa:91:0a:a8:94:64:fc:
d6:bc:d1:c9:51:0c:27:6b:b5:75:8b:61:c4:a1:11:d2:44:f0:
5b:80:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:29 2026 by rpki-client