Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/392507bd-8372-476e-b1ce-108755ef83a0.roa
File: 392507bd-8372-476e-b1ce-108755ef83a0.roa (raw, json)
Hash identifier: IU31R1OcERGWODEg1hXGTslRSbGE3aiuZnJH3Rw2q9M=
Subject key identifier: 6B:F9:3D:26:AF:7C:2D:EF:F3:A8:36:93:8E:3A:85:8A:C9:CD:60:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 631C29C0F46D4C54F29CB24C0BAC0CCF052A3A27
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/392507bd-8372-476e-b1ce-108755ef83a0.roa
Signing time: Mon 10 Aug 2026 01:00:35 +0000
ROA not before: Mon 10 Aug 2026 01:00:35 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1c:29:c0:f4:6d:4c:54:f2:9c:b2:4c:0b:ac:0c:cf:05:2a:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:35 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=ba795d2b6e09faaa14874d690308be016fa8730d3f674c91ce827e4a14c915a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:70:f0:7e:f6:cd:9f:1b:d5:35:76:eb:18:
92:8b:9d:11:10:7d:3a:ac:97:1c:6d:fd:cc:de:bf:
8d:3e:a8:8a:5e:6e:4c:e6:92:39:16:1f:81:2a:ee:
5e:5a:f7:2f:74:e3:da:18:d6:cf:23:01:4a:18:af:
b8:81:b0:f5:ab:d2:b7:82:9e:43:73:f8:25:60:49:
80:d4:0b:1c:f8:aa:55:a2:b4:7d:02:08:09:9f:f1:
d9:08:85:4d:ff:4e:cc:e0:a2:48:b2:f5:d0:08:da:
55:d8:d1:33:46:c5:01:55:ce:a5:ce:65:7a:04:68:
a5:e9:7c:c5:72:b0:31:73:82:00:11:a2:60:d5:f3:
a9:d0:3e:94:45:d6:70:51:cb:79:ad:1b:a1:da:c9:
49:28:1b:73:e1:f1:27:72:93:68:57:6b:d7:3b:12:
31:dd:94:b5:60:ea:69:cf:75:3c:1f:14:92:38:bf:
47:82:63:08:a2:7f:62:29:89:99:94:75:7b:3d:0d:
99:18:96:4b:b4:43:86:ac:45:58:da:c2:b5:9e:c1:
12:6b:10:65:eb:fb:94:4a:d0:1b:1a:36:7b:05:bd:
65:13:99:ab:27:f8:2b:71:c9:d9:67:17:75:8d:c8:
59:03:e6:9c:c7:47:4c:cf:5a:f4:5c:f5:de:25:66:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:3D:26:AF:7C:2D:EF:F3:A8:36:93:8E:3A:85:8A:C9:CD:60:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/392507bd-8372-476e-b1ce-108755ef83a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a040::/48
Signature Algorithm: sha256WithRSAEncryption
5a:e1:a1:36:df:86:e1:cd:38:44:cc:aa:5c:3c:89:b8:85:2d:
c8:9e:50:6a:e9:68:bf:38:e3:21:82:a4:55:69:81:06:ca:f6:
93:c8:8b:6c:c7:37:75:76:af:8c:81:30:44:ff:97:2a:a0:4b:
00:6d:d3:be:fe:27:5a:fd:5b:73:f9:b0:27:ff:a0:3d:8b:a8:
d4:e0:f7:f9:ae:74:1b:df:5d:c1:a9:dd:98:2b:de:b4:e4:2b:
cd:e7:3c:31:7e:7e:d9:0e:0f:d2:42:a8:af:62:8e:c6:93:16:
e6:b6:86:62:99:2c:69:c7:3c:51:75:7e:0b:31:ac:01:2a:86:
8d:85:1a:4b:85:7f:a7:96:83:f9:57:d2:2a:9d:eb:9d:6e:05:
53:59:0b:a5:dd:98:29:48:a8:6d:86:73:4d:67:43:14:b6:90:
3b:46:ce:25:46:49:94:26:a9:f6:7b:fe:22:93:ae:40:67:08:
e4:48:53:a8:42:81:8b:59:4c:cf:bd:76:b6:8b:b4:23:53:6a:
f3:72:ec:ff:21:92:4c:5e:72:6d:5b:65:4e:a4:68:ad:b3:26:
3d:ce:85:3e:e6:70:ba:36:7c:74:7f:d5:ff:70:19:54:1f:49:
b7:ce:ce:a2:6e:ed:99:71:08:bd:cc:42:cd:6d:15:36:cc:29:
c9:4c:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:33 2026 by rpki-client