Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bde61a2-7506-48c2-8365-3447411d858e.roa
File: 3bde61a2-7506-48c2-8365-3447411d858e.roa (raw, json)
Hash identifier: zWjpqECyw+FRHgleMxm1YTMqZq4XEoSI5JtYtDmsp84=
Subject key identifier: DC:63:F2:47:83:4B:A5:86:8B:5B:2E:8A:AD:1B:0D:18:99:75:2B:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6743B580C7356D588264D953D4072496CA0C305D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bde61a2-7506-48c2-8365-3447411d858e.roa
Signing time: Fri 07 Aug 2026 05:30:15 +0000
ROA not before: Fri 07 Aug 2026 05:30:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:43:b5:80:c7:35:6d:58:82:64:d9:53:d4:07:24:96:ca:0c:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ebae390ffefcb20365a773cb4ced714861cb2c4f76868ce86de5e3ccb508cdc2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:61:57:f3:a3:09:6b:99:c7:28:9b:8b:89:
b7:1b:03:99:6f:05:b2:fd:21:fc:d0:8c:93:e0:59:
79:1b:31:d4:9e:8e:4a:33:b1:f7:8a:1a:02:26:a8:
55:26:6b:95:e0:2d:0a:8d:56:20:55:1f:b2:8a:db:
58:5f:a4:61:b9:fb:a3:73:81:eb:fd:6b:10:78:14:
95:97:be:02:4d:a9:bc:7a:8a:b0:e9:b0:50:16:6e:
ee:23:19:db:8e:b7:35:8f:e3:3f:63:b3:d1:37:bb:
0a:3f:1f:27:b1:82:11:9f:8e:ce:64:b0:ad:b2:20:
77:cb:18:ad:ad:28:b1:fe:68:89:42:11:ee:45:75:
d8:c7:66:0b:9c:a7:e0:ba:73:8f:5e:6a:78:70:90:
9f:f1:67:ca:d4:79:08:b2:6a:67:f8:8b:8d:05:b1:
3b:aa:e0:bc:d5:f7:fe:07:d0:b0:14:d0:4b:e9:83:
d3:78:91:00:ba:06:b9:d8:0e:54:50:6e:3b:db:6f:
c7:9d:b4:ac:f4:ee:6d:1f:44:4c:6e:71:5e:f4:94:
65:40:db:f7:36:26:40:ef:b8:9f:a5:54:6b:c2:5b:
d0:08:7a:81:dd:e6:3b:35:7c:71:57:45:4e:26:4e:
8e:c1:2e:24:d9:3e:3c:96:d1:1b:94:10:48:5e:af:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:63:F2:47:83:4B:A5:86:8B:5B:2E:8A:AD:1B:0D:18:99:75:2B:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bde61a2-7506-48c2-8365-3447411d858e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:5000::/40
Signature Algorithm: sha256WithRSAEncryption
14:e7:47:8d:7a:18:2d:d3:e9:80:56:60:f4:8d:11:44:6a:40:
7d:d6:fa:46:6f:91:16:f6:1c:9b:2b:55:99:29:3e:e6:7d:cf:
1f:c9:29:27:12:40:01:cc:dc:95:b2:95:64:42:e7:76:08:ce:
32:cb:b9:5f:06:87:09:47:5f:43:e0:b4:b7:22:3c:5e:1a:ff:
f4:c6:c1:a9:86:e0:7d:ee:f7:30:52:41:e0:52:44:e3:5d:7a:
e1:1d:24:43:6d:a0:be:72:6c:26:87:89:3d:78:3e:8e:6d:b6:
47:c2:9a:52:7f:78:81:02:42:3c:49:82:58:ef:63:75:d9:a0:
df:f9:55:5f:ae:b9:a9:7f:54:56:e8:30:c1:d1:6e:56:73:8f:
c4:fb:e5:52:1b:78:67:6c:7f:d6:eb:3f:4b:5b:28:ec:bd:0e:
26:f3:3a:13:8a:83:83:88:fa:92:00:82:04:6f:18:50:65:85:
2d:0b:b7:2a:62:05:93:7d:23:2d:d9:32:e9:70:a0:4e:3a:2c:
b2:6c:0a:7e:43:83:3a:3d:0a:41:68:e8:7e:7a:05:66:85:56:
79:5e:68:e8:0e:95:be:44:a9:21:6f:4e:80:25:79:fe:dd:d5:
aa:d8:7c:96:87:4d:59:36:4b:ab:b1:74:a3:70:2c:2a:b5:f9:
32:e7:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:27 2026 by rpki-client