Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/304afa07-08cf-4abd-b55e-949deeea1591.roa
File: 304afa07-08cf-4abd-b55e-949deeea1591.roa (raw, json)
Hash identifier: UkBpgSuKTMcEdPXSVuwlls8udIgDdS3jxZ//KLlDRMM=
Subject key identifier: D8:E4:0C:3A:6E:50:C1:38:1E:12:3C:A3:A3:0C:66:44:E7:78:95:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08C2630A635FCE9C49C05CA41AECF1F467B95BAA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/304afa07-08cf-4abd-b55e-949deeea1591.roa
Signing time: Mon 03 Aug 2026 01:30:18 +0000
ROA not before: Mon 03 Aug 2026 01:30:18 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c2:63:0a:63:5f:ce:9c:49:c0:5c:a4:1a:ec:f1:f4:67:b9:5b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:18 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=4f4c4e77decbc917a6cd9172a39e74893a7d5fa84c3eeef93c2af34dc05af14c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:d4:fc:0a:7c:f6:d1:aa:70:5c:f5:1a:e8:
5e:6b:ad:f2:d7:63:91:41:e1:2d:97:ef:92:38:4e:
b1:82:51:38:32:6f:01:1f:e3:5c:44:fc:61:68:90:
af:93:85:e6:d9:5d:5f:5d:3e:c7:7b:02:ad:27:95:
a3:6f:91:77:ff:75:b2:83:74:2f:ff:e1:eb:15:10:
c6:cb:76:8a:3e:13:39:4a:89:cd:0e:b2:c0:db:65:
c8:0b:bb:a6:5a:c2:fe:2d:bf:f9:36:35:4d:6c:ae:
72:c9:62:54:53:6a:d4:2f:98:5f:d7:0d:5c:68:45:
ca:41:a0:b5:4c:51:01:04:a8:b4:55:cb:d8:fa:35:
bb:bc:40:c5:1e:85:fa:4a:8f:89:f5:5d:42:aa:5e:
92:ca:b3:57:1c:f7:ae:0a:59:51:56:86:d0:b9:38:
3c:b5:d9:77:e8:86:38:a7:71:10:f3:82:a9:0f:22:
4e:ae:d7:82:9b:23:b7:cd:91:ca:11:a7:68:91:d0:
7f:55:fb:5b:97:ca:92:1f:b2:49:e0:c1:67:ab:ec:
f4:be:a3:af:f3:84:3d:37:bb:49:d6:ce:ec:1a:98:
c6:6a:3d:fe:72:4d:89:27:9c:d3:ce:ae:03:ad:4e:
f6:19:b1:9c:a0:bc:65:b7:ff:4c:c1:44:61:cd:59:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:0C:3A:6E:50:C1:38:1E:12:3C:A3:A3:0C:66:44:E7:78:95:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/304afa07-08cf-4abd-b55e-949deeea1591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:5000::/40
Signature Algorithm: sha256WithRSAEncryption
30:f6:36:c2:f9:3f:19:eb:ae:25:ce:41:e8:03:d0:68:df:ab:
71:4b:d3:a9:91:19:29:45:71:e0:71:fb:07:83:b8:f2:3d:f6:
10:48:d0:97:9f:06:f7:5e:8b:77:5a:97:55:58:24:c4:61:41:
d5:b3:11:b8:4d:a3:a6:65:7a:37:15:07:74:23:d3:45:61:51:
ad:6e:03:10:03:31:5b:a3:3f:28:6a:70:05:b3:11:18:d6:85:
6e:11:90:5f:5b:46:81:9c:8b:1e:2a:2f:3b:7a:f2:6a:bf:00:
ab:2d:a1:ac:8f:d3:28:60:dc:01:f7:8c:fa:88:bf:28:66:8a:
58:e4:45:4c:35:32:05:35:8d:de:1e:a6:b8:b9:2c:aa:71:07:
80:01:8c:79:14:62:65:be:e4:2f:f5:0a:d3:b8:ca:ee:c7:8d:
39:90:43:14:ca:25:a7:34:be:a8:18:83:b6:3d:33:4d:19:f0:
60:ca:6d:cb:98:1d:a6:90:ae:73:4d:4f:3e:fa:fc:80:a1:6d:
2b:a1:26:7e:19:ec:02:ab:85:3b:cc:23:08:25:28:78:0b:74:
ba:8f:10:29:72:03:5f:9c:91:3d:32:84:23:b0:34:ee:29:28:
2f:56:a5:a4:f7:c0:11:91:4b:52:b7:d5:69:30:52:1c:0e:0b:
f4:fc:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:54 2026 by rpki-client