Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File: 36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier: pe6jPFikQoR7oCoQyCv9vG+ZA+xwWnqL5A04rnd1FOA=
Subject key identifier: B2:0A:2A:FD:F6:46:5A:1C:E9:F8:46:FB:61:C1:FC:79:B9:EE:39:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07450DABA5050CC1651EC7372160C61D63BE53AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time: Fri 07 Aug 2026 05:30:52 +0000
ROA not before: Fri 07 Aug 2026 05:30:52 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:45:0d:ab:a5:05:0c:c1:65:1e:c7:37:21:60:c6:1d:63:be:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:52 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=45a21d870e41fb9d8994350689a2f0fbc97a8e634cf5c42260d2e9fa349ba7ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:d4:cb:22:0c:d2:a1:43:79:d0:69:10:19:
4f:43:81:f6:80:c9:bc:dc:60:d6:b5:ef:f2:36:4f:
2e:d8:41:15:88:3a:2a:a6:a1:9f:bc:b1:6e:a7:c6:
e1:0e:f9:07:92:35:9f:8c:b7:3e:3b:be:8e:a3:9e:
02:3c:4b:ba:87:93:fb:67:8a:1f:7d:bc:82:c1:b5:
85:aa:99:35:4f:d2:c1:6c:4f:60:fc:b5:8a:b0:3d:
20:0f:b3:41:d3:ba:7a:b0:96:e9:0c:2c:e0:68:aa:
e7:44:2d:62:63:ee:27:d2:99:b5:f7:77:7f:d3:18:
10:5a:8d:51:6b:c6:ea:b5:e0:42:97:c7:92:4a:d5:
74:56:7b:22:14:25:55:a7:a2:71:0f:28:ce:42:35:
54:01:a9:30:99:ab:cf:7e:2c:76:72:c0:40:78:5e:
c6:bc:37:c0:aa:27:a8:ca:49:3a:76:e8:54:53:48:
5f:eb:6e:2b:dd:3f:6d:5a:00:8f:24:17:c7:05:2b:
56:57:96:9d:05:1a:45:b2:2e:9a:d8:cc:75:fe:61:
e0:b2:22:c4:b7:84:a5:c8:28:0f:15:77:ed:6a:e7:
2e:fd:28:ac:ea:9b:b6:b7:e3:e1:50:56:5c:e2:58:
83:87:bf:d2:14:7a:4a:10:ea:1d:f8:4a:4f:27:17:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:2A:FD:F6:46:5A:1C:E9:F8:46:FB:61:C1:FC:79:B9:EE:39:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a020::/48
Signature Algorithm: sha256WithRSAEncryption
2c:c4:82:a1:63:76:df:dc:9b:2e:0b:65:ec:2a:59:55:e8:83:
4f:4f:77:ab:c0:b1:90:ce:f2:17:e5:7d:0b:81:e6:04:5c:30:
29:6e:9a:32:8d:76:d0:02:aa:ba:93:af:5f:27:40:96:79:25:
07:65:a2:e5:38:21:01:8d:17:df:e8:2f:2b:c8:e2:09:ac:ee:
75:5b:f4:b2:ac:db:61:4c:5b:51:51:ed:62:dc:45:24:0a:49:
66:ed:4b:01:ca:17:b9:9d:33:68:50:5c:34:db:1c:6a:5d:e7:
4f:9f:d1:99:a6:ef:9b:b0:c3:ff:2b:eb:8a:34:cf:17:14:ed:
30:b7:23:51:34:6e:1a:15:88:60:89:81:30:0c:5b:0e:91:31:
e7:4a:06:5b:b9:ad:9a:20:02:d6:52:73:c1:b5:74:69:bb:8d:
ef:20:33:29:e6:c4:26:65:49:b1:5a:53:35:db:fb:60:4f:eb:
3c:fc:60:4f:fa:3c:44:91:98:e8:5f:80:fd:5c:aa:f0:8f:e9:
6d:16:1f:5f:a2:7f:7e:b4:3a:36:ac:8b:b1:9d:b0:34:3b:3b:
ea:67:01:e0:a5:c8:1b:7f:36:8a:45:89:fe:01:de:3f:21:01:
2b:93:2e:b8:e4:89:16:1e:91:93:ee:49:23:d3:0c:d7:49:1b:
5f:4c:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:40 2026 by rpki-client