Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bdf0546-1572-40f3-92c7-5a06ce6af441.roa
File: 3bdf0546-1572-40f3-92c7-5a06ce6af441.roa (raw, json)
Hash identifier: fzEISpEWTpzJUPNCDQCjg6cUlI/LZjyqrHN3RQA135g=
Subject key identifier: A6:75:CE:03:65:72:9C:DC:F8:56:04:C7:2E:96:F7:0C:CC:8E:EA:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27E988386AFE0F3EF14D9CE1647FA30FA8BEBCB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bdf0546-1572-40f3-92c7-5a06ce6af441.roa
Signing time: Thu 10 Sep 2026 02:40:39 +0000
ROA not before: Thu 10 Sep 2026 02:40:39 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e9:88:38:6a:fe:0f:3e:f1:4d:9c:e1:64:7f:a3:0f:a8:be:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:39 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=1f5c1fa51b9aff310486a07459637f31d3abd4a6d943cb96a90db85f871dbac3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:9a:12:bf:9b:f8:a0:a2:46:1d:e9:2c:b5:
de:c4:2c:01:e0:ef:18:af:71:9f:9a:a9:1c:88:23:
6a:28:5f:08:3f:18:24:8d:af:c0:b7:6d:ff:40:30:
1b:43:28:6f:09:66:72:46:f1:25:f5:cf:0d:f0:f2:
31:dc:3e:e9:b0:7c:39:1f:12:77:e5:29:b2:e8:98:
0d:db:12:c8:66:40:7c:f6:51:50:26:15:a6:d8:9e:
08:f3:69:f6:6a:84:df:8f:f9:25:c3:ae:86:a3:fe:
1e:5e:08:da:94:87:75:07:89:c8:0d:c1:4f:28:18:
7e:a8:71:0c:26:cb:e5:a9:f0:15:b0:91:0b:93:c0:
56:c2:1a:73:34:ca:d6:39:1f:26:77:f1:8c:45:85:
f3:b0:47:80:24:11:b9:8d:f0:b4:a6:49:53:9b:8c:
02:f4:99:47:67:7d:fb:24:22:6b:1f:8d:df:13:da:
7c:01:bf:e7:9c:57:9f:92:64:45:4e:f6:eb:04:9f:
93:8b:e7:03:5f:0c:74:ed:71:c7:f1:8a:d3:3e:80:
33:61:b5:cc:d4:aa:19:59:0d:c2:16:56:12:82:dd:
56:70:3c:44:ca:e0:8c:bc:7e:a2:88:f7:37:32:dc:
1e:5b:db:ef:30:9c:f9:cb:cb:5d:b9:3a:ca:9f:3f:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:75:CE:03:65:72:9C:DC:F8:56:04:C7:2E:96:F7:0C:CC:8E:EA:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bdf0546-1572-40f3-92c7-5a06ce6af441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:9000::/40
Signature Algorithm: sha256WithRSAEncryption
8b:11:20:68:f4:cc:18:68:a5:c7:4e:24:71:30:d7:0e:24:03:
b7:aa:3f:0d:f7:cf:93:d4:b9:3b:92:cd:e0:ee:8c:41:8b:53:
e9:d6:a3:c1:fe:55:05:01:a8:7d:c8:11:9e:be:04:6a:2d:aa:
d7:14:70:17:35:6e:26:e9:9f:74:ac:c8:fd:c1:15:b9:38:29:
2c:b9:f5:34:d8:3c:70:1b:70:32:0c:ec:41:80:fd:d9:57:36:
d7:e9:28:74:d9:5d:1b:c6:e6:ac:60:fa:dc:6a:dc:5c:27:90:
83:8b:ec:c4:bc:54:53:0a:41:e4:1a:20:35:85:4a:99:b9:1d:
13:34:ed:23:a3:d7:e0:d6:90:24:b2:c3:2b:69:13:6f:dd:e4:
77:cd:5a:c2:47:2b:ab:59:55:ff:35:85:a6:70:43:8f:1b:a8:
ab:65:e5:0b:bb:48:1d:bc:d1:31:5d:02:7b:34:6c:a7:fc:2b:
9d:5b:d3:2f:3c:08:12:18:68:08:27:7e:de:50:f6:c2:e6:d5:
d5:00:dd:53:c7:97:62:0b:b9:70:07:b0:87:cc:cb:70:f3:00:
27:e4:4d:b5:71:75:16:e0:6c:f6:ee:ba:f2:88:03:6e:0c:fe:
0f:87:1d:0c:da:36:e7:5d:d9:04:09:97:53:87:a3:35:ee:0b:
e4:5c:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:54 2026 by rpki-client