Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a5500db-5de7-4247-8c53-c6529cc8f6b9.roa
File: 3a5500db-5de7-4247-8c53-c6529cc8f6b9.roa (raw, json)
Hash identifier: iKNhhXwouqzq2ImjcwZ9eCOpGV4sY4v2RY6QPScizvE=
Subject key identifier: C2:98:A3:F8:01:4F:9F:B8:5C:99:99:0A:B7:C2:89:3E:DB:D5:05:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30A88A5A3B03ED58D72A8FBE0330834118258CC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a5500db-5de7-4247-8c53-c6529cc8f6b9.roa
Signing time: Mon 10 Aug 2026 01:00:33 +0000
ROA not before: Mon 10 Aug 2026 01:00:33 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a8:8a:5a:3b:03:ed:58:d7:2a:8f:be:03:30:83:41:18:25:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:33 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=c4a4f927185eeb9b072494bea8f001f9fdafe19892f4823f279995bef8715242, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:b7:ca:93:d8:91:41:3e:52:a9:f1:d9:fb:
f9:04:eb:4e:65:d2:7e:9b:e9:72:7e:77:43:62:26:
d3:34:8f:8e:8f:06:7d:93:37:fc:02:51:32:ae:9e:
2b:33:b2:5d:aa:d3:68:50:e0:d1:67:c8:6b:43:26:
41:e6:27:f3:97:a4:59:36:e6:d9:c4:14:31:14:6f:
34:c8:d2:a2:5e:1e:35:3e:7a:ba:c8:47:64:ca:88:
cd:ec:72:2c:59:c3:29:02:23:26:cc:e8:01:18:82:
3c:d1:59:c0:9a:24:37:80:a5:ed:3f:83:14:e9:8d:
a8:81:55:36:8f:a8:63:48:fd:10:81:8f:66:71:f2:
59:8a:fa:6e:23:8d:94:96:89:f2:d9:3f:36:79:62:
a4:3d:17:d2:32:a6:5e:6c:76:b1:c6:b1:42:cc:e9:
3a:e6:db:1c:f5:84:2e:32:48:ab:32:aa:1c:06:d8:
d1:4b:b5:69:b6:6b:8f:b7:11:b3:e1:55:d8:1b:23:
5c:a3:4a:89:5d:0a:a5:bd:70:1d:27:36:75:07:89:
50:c2:2f:ab:ff:43:08:b2:0e:ed:cd:81:0d:ac:9d:
11:b4:0c:cd:2b:ad:e0:16:a9:87:83:3f:28:a2:70:
1a:73:09:7c:68:37:01:6c:c2:1e:6b:34:9c:03:7f:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:A3:F8:01:4F:9F:B8:5C:99:99:0A:B7:C2:89:3E:DB:D5:05:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a5500db-5de7-4247-8c53-c6529cc8f6b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
ba:10:99:eb:34:b8:1a:9a:d6:d1:25:46:19:c3:33:b6:ba:c5:
57:10:03:73:fd:c5:5f:0d:5e:ca:63:0e:f3:a3:e4:1a:e2:3e:
b5:c6:7c:d5:41:e1:2a:bb:ad:55:c4:61:a0:db:3e:d0:7c:a8:
cb:01:8f:81:4a:ab:70:9e:0c:a3:13:e1:c8:80:75:54:89:65:
65:2b:4c:e9:8a:99:9d:b9:ad:11:c2:91:bf:db:83:29:d0:fe:
f6:2e:bc:9f:65:27:8c:16:b8:73:8b:9b:04:fa:a3:8c:80:0d:
e8:de:ee:97:56:57:e0:a3:d8:dc:5f:3e:70:df:9f:29:6a:bb:
04:1e:a9:d9:48:3d:97:a5:d4:b4:a7:d8:c1:cc:61:9e:c3:02:
ca:2b:81:06:87:43:fe:4c:49:04:13:a8:e8:1f:58:7c:4d:77:
6d:13:87:3a:b8:cc:70:03:5f:d2:28:6b:28:d5:68:f4:97:d0:
4f:9a:c3:97:e8:ce:df:b2:e1:77:56:71:63:5d:a3:70:b6:38:
9b:a5:b4:f4:e5:65:83:13:d3:f2:32:c6:49:50:fe:cd:df:c9:
87:a6:3f:2d:b1:6e:8d:e5:68:b6:ac:58:b3:39:ce:bc:83:ba:
57:dd:22:49:59:fe:72:15:9d:89:75:8b:35:f3:0e:a9:a9:66:
0f:cc:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:03 2026 by rpki-client