Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
File: 376b2c73-f092-42ef-b7b3-ff5650209feb.roa (raw, json)
Hash identifier: uDftEQB/LduaA5w+IntzwuHQbf9OqZ0zUVAPGzUuTeg=
Subject key identifier: 15:3B:39:B7:49:EA:05:46:D0:0C:49:81:89:C4:13:56:49:94:CC:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6104600FEB7AF40CBD6FA33FA41529FF1F882B6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
Signing time: Wed 19 Aug 2026 01:10:24 +0000
ROA not before: Wed 19 Aug 2026 01:10:24 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:04:60:0f:eb:7a:f4:0c:bd:6f:a3:3f:a4:15:29:ff:1f:88:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:24 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=7dc446233ea6aec86a4a896e97976705a3c03b0c63ed50565a50cb97c9ed46ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:c9:e4:f8:d7:19:15:3d:98:f4:3a:43:ae:
fb:e5:43:57:2d:06:a6:88:fa:52:9b:74:17:21:41:
70:ed:ab:f0:fc:be:16:24:56:23:e2:ae:66:8c:4b:
8a:ba:02:c9:d1:c6:9d:50:32:fc:0b:8d:88:1f:81:
32:63:e4:a0:b3:ae:bd:03:bd:9e:57:44:aa:c2:e7:
53:13:73:c0:53:92:8f:5e:45:1a:0a:9d:34:ff:05:
0a:fe:42:91:64:54:1e:12:e9:bc:33:5b:3f:f1:33:
0f:c8:db:e2:3a:7d:c0:e1:41:d9:7a:7c:ac:47:e7:
2a:45:19:ef:45:1e:2e:c1:a5:b3:5c:47:96:ae:0b:
1a:95:32:65:11:09:55:45:22:5c:93:93:69:9b:b7:
a1:9d:e1:8e:59:de:88:1f:74:83:92:b6:b6:f8:59:
c0:6a:ba:ab:0f:a5:43:61:23:ff:22:bc:a5:75:f8:
8b:f5:6b:fd:8f:99:04:8c:da:99:e4:62:cd:b4:19:
b0:d1:9c:05:63:1c:51:0a:02:2d:e3:04:61:b3:dc:
e6:8f:ea:3a:c0:16:db:cd:23:dd:40:bc:c6:1f:e4:
ce:fa:87:1f:a0:95:3b:ba:d8:6b:3f:87:52:62:55:
9c:6f:de:dc:c7:41:12:32:ac:d9:73:17:e0:9b:cd:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:39:B7:49:EA:05:46:D0:0C:49:81:89:C4:13:56:49:94:CC:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376b2c73-f092-42ef-b7b3-ff5650209feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4080::/48
Signature Algorithm: sha256WithRSAEncryption
12:af:57:29:a7:4d:27:4e:86:ee:93:ab:58:ec:ab:98:00:f7:
e6:79:df:8f:07:92:ef:d8:f6:b2:4a:eb:39:89:1d:ee:1f:9c:
2b:33:71:ce:51:00:0b:55:e5:29:c8:be:9c:2a:c8:4b:72:a9:
59:99:eb:55:18:cb:23:59:f2:d6:0b:49:71:6d:2c:e5:a0:5f:
19:9d:87:b5:9c:7a:a3:b7:bf:88:54:6e:98:5a:b6:41:56:b2:
3b:c4:47:8d:c9:dd:ba:6b:b3:95:9b:6d:03:20:30:eb:6f:ca:
69:6b:25:46:93:b8:7c:ef:f5:5e:de:fd:24:9c:5c:9c:d9:e7:
69:e5:fd:b6:00:2d:2d:d7:97:fe:8c:4e:dc:79:39:d8:64:e1:
52:20:7f:34:81:4a:2e:21:cb:d2:20:85:f5:79:e3:5e:94:7f:
be:22:4e:1c:ff:07:0b:5e:91:6c:29:50:b2:c3:26:02:e5:eb:
81:a1:a9:e4:0f:23:81:99:9b:06:b9:18:db:57:86:24:22:88:
69:f3:b2:79:20:5d:b5:1d:7f:7b:e3:36:ec:ee:71:55:4c:a8:
fc:63:c8:48:b4:74:dd:22:85:1c:b8:06:13:61:62:a6:19:25:
62:97:81:75:99:f6:7c:48:c5:51:42:29:94:49:15:b8:34:01:
00:47:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:49 2026 by rpki-client