Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/317c0616-b89e-4a04-85d0-e35bf74803ae.roa
File: 317c0616-b89e-4a04-85d0-e35bf74803ae.roa (raw, json)
Hash identifier: 30bzx+ig9efh5a648VElf5DFvoT2wXrjf7oXHlKlUu4=
Subject key identifier: 03:22:A7:A9:7F:3F:B2:63:D3:FF:B2:82:F6:15:14:55:CF:46:5B:F1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6244CB3F548ACAD7682190B57A03F2332C79FE8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/317c0616-b89e-4a04-85d0-e35bf74803ae.roa
Signing time: Mon 10 Aug 2026 01:00:28 +0000
ROA not before: Mon 10 Aug 2026 01:00:28 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:44:cb:3f:54:8a:ca:d7:68:21:90:b5:7a:03:f2:33:2c:79:fe:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:28 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=12744e23989511907d1d4a214c5a433027f6db04d050d46ee02baaae5cf68c1e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:b9:c3:83:20:99:7f:c1:d3:cf:d3:3a:a8:
c5:35:32:d9:50:0d:43:b6:2f:54:97:27:46:9c:31:
44:38:ba:0e:11:72:55:6f:ec:c3:fc:ee:e4:1d:77:
6d:1a:70:c4:28:d8:2d:78:12:87:34:68:f8:3a:e1:
2c:ac:67:e3:42:b4:1d:93:ad:3f:ce:0c:8d:04:e7:
75:e1:69:a6:78:1c:cb:39:54:48:23:ef:3c:c1:94:
6b:5e:ae:86:91:f6:21:0d:6d:8b:1b:ad:16:d9:54:
c0:cf:f3:84:b2:93:59:ae:02:2c:21:c5:32:e3:31:
91:6c:96:c9:e3:85:2a:14:c6:3a:5d:3f:7a:b1:25:
69:c0:95:be:10:92:a3:34:b3:fd:da:bd:e2:02:8a:
ce:c7:1f:04:cf:f2:df:b2:2d:9f:07:72:32:b6:3c:
53:cb:f9:5d:ef:59:2a:92:7e:2d:c3:f1:3f:c6:b8:
65:fc:46:7d:8c:80:36:aa:1b:30:5d:28:c4:5a:26:
f6:d8:3d:7a:53:53:c6:25:dc:71:a7:49:08:4f:cf:
37:38:8e:94:b7:e9:8d:eb:ed:d2:53:01:ba:0a:79:
af:82:c3:44:fb:29:3b:1f:af:f4:d0:93:d5:8a:3b:
58:eb:fc:0a:fe:96:56:ed:53:bc:83:be:ac:fe:c2:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:22:A7:A9:7F:3F:B2:63:D3:FF:B2:82:F6:15:14:55:CF:46:5B:F1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/317c0616-b89e-4a04-85d0-e35bf74803ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:2040::/48
Signature Algorithm: sha256WithRSAEncryption
51:13:2b:ed:52:57:90:b0:36:7d:bf:9d:cb:4d:b3:59:b5:ce:
55:4c:b5:fc:db:a9:a7:f8:c2:c9:74:65:15:4f:5e:86:d9:61:
b0:b7:18:4b:42:ec:d6:76:ff:e1:83:d0:4a:0a:10:ca:1d:ee:
7d:4a:93:e0:22:19:80:36:19:72:ee:92:26:fb:2f:d2:63:5f:
14:97:50:fc:ee:07:cf:2f:b6:44:b0:c0:44:98:ef:fd:71:83:
b9:16:a5:be:6e:3f:f2:40:08:65:3a:ff:bf:8b:f1:f7:f1:8c:
63:98:2c:1b:1b:c1:e5:bc:cc:51:be:68:ab:ea:6b:3f:e8:79:
6d:f7:35:ed:ba:13:ea:68:8f:be:03:0e:5c:0d:6a:26:e3:f5:
f2:6a:33:23:38:09:05:03:b9:6f:c7:a2:2b:ac:00:5b:0f:7f:
90:80:e8:eb:00:bf:56:63:da:a3:eb:6e:ba:7e:3d:8a:c9:4e:
49:ef:c2:41:24:d4:d3:8f:92:bf:b8:fc:95:cb:fa:c2:84:92:
0d:af:a9:35:f3:58:0d:ac:f7:59:82:9c:23:f6:af:b5:8a:ad:
7f:9b:37:30:57:20:9a:a8:56:af:aa:57:be:4a:2f:12:43:6d:
f3:44:16:cc:47:85:a2:70:ba:f7:57:e2:f9:7e:f0:d3:32:d0:
96:ee:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:11 2026 by rpki-client