Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
File: 3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa (raw, json)
Hash identifier: 8IxLjj10u/v4/7pSqRM7b+PcB4H9LIcN6lC2W+WJTnA=
Subject key identifier: 8D:4F:8F:CE:AE:2E:E4:91:A9:3C:05:D1:6F:8F:64:E8:4A:22:66:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D797DF1E455F754F55F083C23DF3E43CB060216
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
Signing time: Fri 07 Aug 2026 04:30:58 +0000
ROA not before: Fri 07 Aug 2026 04:30:58 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:79:7d:f1:e4:55:f7:54:f5:5f:08:3c:23:df:3e:43:cb:06:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:58 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8720b40f35accec7cb53b0de9a3a353ad0a800e2d6024b903efb22e0783b7618, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:d7:c9:a0:7b:2c:96:36:82:5d:3b:4b:42:
a9:9d:e4:aa:7b:51:77:af:72:f0:39:8f:b8:03:28:
45:d3:0f:d9:8e:ca:32:35:ee:02:d5:6c:de:6f:67:
82:22:eb:63:44:df:00:ea:00:32:27:fd:fb:de:6d:
00:95:c3:bf:18:b5:e5:49:f2:65:f8:67:77:82:92:
e7:75:e3:2e:24:64:b6:79:8c:83:ee:5b:98:43:c7:
14:34:c3:50:0f:6f:f7:7a:e9:fd:7b:71:17:ba:57:
14:b1:f3:24:0e:d1:0c:af:cf:5f:e7:4b:84:ac:b5:
78:97:ea:e1:be:7a:12:57:bd:ba:cb:59:98:2b:d1:
77:c4:39:73:3e:6b:0f:02:ac:2f:4a:ed:5c:b6:3f:
00:93:3d:02:77:62:f2:17:a2:0d:d6:25:5e:28:af:
e2:7f:d7:8e:18:ec:8b:26:58:c5:5d:e6:9c:70:32:
c8:08:c9:eb:06:2e:7f:e9:56:37:5e:da:c8:d1:30:
a9:f3:a5:f0:a7:d5:44:8f:19:02:71:80:61:1b:f3:
9a:44:c0:46:9b:ea:ca:81:f0:5a:cf:9f:f2:ce:3d:
9e:01:9c:c5:f2:b0:fe:08:ff:ce:5e:ee:e5:3d:2a:
89:58:9c:df:83:1c:f1:45:7a:d8:f1:06:c7:e2:e7:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:8F:CE:AE:2E:E4:91:A9:3C:05:D1:6F:8F:64:E8:4A:22:66:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
3f:4f:41:b4:c7:af:91:88:97:7f:ec:4d:ca:6b:cf:8d:68:49:
62:b0:66:2e:e1:05:eb:52:94:75:83:53:bf:5f:06:2f:6e:56:
69:9b:bb:9c:bb:8b:63:eb:28:1f:76:b2:dd:78:cd:ad:e2:f0:
44:11:ef:36:95:cb:23:22:a2:c3:46:0a:83:1b:49:83:da:04:
c6:46:4a:1e:ef:14:bc:cb:fe:c0:53:1c:96:92:87:28:35:70:
4d:79:63:0b:21:4a:d2:05:43:b9:94:83:4d:bf:7a:ee:b5:49:
9d:cd:db:3c:fa:fc:f5:12:07:7e:b7:44:82:28:61:77:21:8e:
f3:03:44:85:df:93:cb:c8:d1:8a:83:b8:af:86:4c:3a:c2:12:
5a:ca:b7:29:5c:63:a8:9f:2f:41:da:7a:04:2d:36:ba:76:61:
32:ff:97:b3:c3:9b:30:dc:af:c7:e4:2c:7f:09:3e:9b:a6:66:
f7:59:77:92:2e:87:fd:f3:79:4f:97:24:70:26:ae:22:b6:69:
af:56:66:17:74:51:7d:41:3a:84:7b:df:a3:fd:4a:00:a2:59:
d3:d2:ad:da:c1:47:d4:f9:2c:aa:f3:57:34:6f:cf:fb:c6:15:
94:a5:4a:68:25:ff:60:aa:37:bf:29:5b:8b:12:0a:15:37:50:
c4:7e:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:07 2026 by rpki-client