Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa
File: 35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa (raw, json)
Hash identifier: p7Ewu2Mo13xrqpM+v0B3TI2J6a1MS+3u9s6tFPuIMkk=
Subject key identifier: F5:1D:E4:C5:BF:DF:FF:8C:08:5D:BA:C0:C4:B1:DF:BA:BE:78:05:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14D7F62B37EE9114145CC2FC28ECBFDC72ED49E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa
Signing time: Fri 07 Aug 2026 05:10:06 +0000
ROA not before: Fri 07 Aug 2026 05:10:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d7:f6:2b:37:ee:91:14:14:5c:c2:fc:28:ec:bf:dc:72:ed:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=476b42dcd4a5f7afc70e11e1074c07fb0200e8e2910ba7f68e8566354a809c69, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:07:5f:bc:9c:dd:76:b2:7f:55:63:09:35:
8d:c1:41:f7:bb:0f:0e:f1:21:0a:6c:f1:d6:9c:33:
63:eb:f6:bf:b2:cd:aa:39:91:ef:5a:dd:0f:1f:f1:
b7:b9:d1:b8:de:ae:dd:6e:85:1d:54:d9:a9:f1:8a:
6c:df:91:f4:b2:65:75:fb:e7:f0:1f:f9:cb:b8:77:
16:17:3d:e1:27:4e:e8:aa:c4:e8:8d:d2:3a:90:70:
9b:1a:29:af:20:36:26:3f:38:50:07:77:ba:31:f6:
1c:37:d5:fa:8a:90:37:c0:1b:53:65:ed:09:4c:15:
46:3f:57:13:a6:0c:8b:18:fd:ed:6c:1a:20:e8:f3:
78:2b:10:44:1c:1d:82:48:07:43:57:a8:93:4a:f0:
ee:97:3d:56:cd:9c:4e:4a:2e:0f:22:59:de:87:41:
ca:a2:4a:06:94:60:49:aa:e1:16:3f:3a:bc:72:81:
39:41:ef:83:32:d1:96:13:ca:a5:f2:d1:7e:06:d4:
7f:c1:9d:90:40:d5:aa:02:2f:6e:cf:ce:bd:dd:e2:
0c:19:e0:a4:2e:55:3c:ac:87:6e:06:ac:3f:e8:78:
55:71:d0:50:9d:57:4d:dd:e5:cf:ee:80:7f:1b:0c:
0f:fd:c3:14:a5:3f:b3:a7:ed:ac:29:cf:09:78:f2:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:E4:C5:BF:DF:FF:8C:08:5D:BA:C0:C4:B1:DF:BA:BE:78:05:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35bb0da5-0a2d-4b80-aafe-af7e74cf5869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019::/38
Signature Algorithm: sha256WithRSAEncryption
1a:1c:b5:cf:14:33:ec:fd:6f:15:b2:b7:fd:ee:6e:62:b8:4b:
f4:a0:d0:e4:66:12:86:99:71:f9:90:92:a7:1c:20:59:62:c5:
72:c5:4b:32:f6:3f:21:64:40:ba:08:f2:11:9b:a6:07:cd:16:
1a:89:37:58:58:19:c8:62:5e:0a:ff:6e:8d:e9:b8:da:f7:82:
13:a2:5f:e8:39:e9:d2:63:a5:90:ae:c6:2e:4d:ff:54:38:c0:
09:3f:fb:9f:3c:61:95:06:ff:d4:18:4f:c0:4b:ac:11:4a:cb:
13:9b:6e:51:84:f3:35:fd:e3:12:6e:be:6d:0c:10:9b:96:99:
ba:33:a1:af:d7:46:5f:c7:62:87:f8:30:23:8a:18:12:d3:0d:
6b:fc:88:35:cc:18:75:52:56:a2:67:81:03:b3:4f:8e:80:3e:
ad:0f:81:18:a7:da:08:6d:8d:99:8e:51:1b:33:96:6e:0c:c2:
8c:cc:cc:84:c8:50:a0:ec:d6:e1:16:80:e9:25:5d:3a:b7:63:
8d:ea:f1:74:ab:2b:91:a2:1e:dd:a2:13:41:55:a9:28:6d:a7:
31:69:17:91:a1:8c:5a:7f:cc:32:f3:cb:b8:eb:2e:6c:82:9c:
75:85:07:48:3a:4f:b9:05:a4:8b:c2:a1:a9:2d:c6:dc:65:4d:
9e:a6:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:52 2026 by rpki-client