Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3db66c88-0bb0-44d6-b6a0-ad7dd0873c56.roa
File: 3db66c88-0bb0-44d6-b6a0-ad7dd0873c56.roa (raw, json)
Hash identifier: HEorzGHojIB3TcxbHGoZXDjfNHxEZONB5H/hhGvQQYY=
Subject key identifier: 02:2A:8F:62:F1:30:49:97:0E:36:3B:59:41:B4:B6:32:1A:B0:ED:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2616D10D74F496ED312FEDF8C5C6F10C9F4470A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3db66c88-0bb0-44d6-b6a0-ad7dd0873c56.roa
Signing time: Fri 07 Aug 2026 05:00:45 +0000
ROA not before: Fri 07 Aug 2026 05:00:45 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:16:d1:0d:74:f4:96:ed:31:2f:ed:f8:c5:c6:f1:0c:9f:44:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:45 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=66d897effb168952d22f7b57572c3de327c1254cc0c73a82e2775ce7de1aae16, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:d2:29:ce:43:53:27:c4:e1:38:d8:4c:80:
6d:6a:f8:67:c0:43:bc:6d:b5:be:62:e6:77:fe:db:
31:58:4b:65:a5:19:f8:47:5d:fa:4f:ad:10:10:a5:
b9:02:6d:71:c6:b0:e0:47:be:cd:d7:87:d5:94:79:
43:d6:e3:02:3f:46:dd:a7:3b:f9:9f:4c:08:39:19:
41:38:f5:6b:30:96:2f:e9:36:99:ac:09:3f:7d:2a:
9e:59:c1:3c:57:f1:ec:63:f2:4a:6b:ce:b3:28:2a:
b1:35:44:82:c8:35:73:ef:45:0c:79:ee:8c:82:bf:
9d:1e:df:5f:6f:8f:4e:b0:55:9e:b4:f7:56:ea:30:
65:c1:c6:d1:36:c9:73:70:14:6c:b4:f5:bd:ad:a8:
98:56:88:c4:c1:34:c1:1b:34:93:0f:c4:f7:65:7c:
00:03:30:d4:8a:59:6c:69:c6:14:a0:60:80:6e:57:
59:f1:78:7f:3f:78:e3:76:be:21:c2:82:78:65:cf:
25:1d:b1:c2:ab:ce:61:67:9b:00:43:f1:d6:10:ff:
fc:ec:3c:18:e7:c5:c4:40:82:da:9c:f6:0d:05:ba:
63:7a:d9:1a:1c:95:18:82:d7:3f:6a:84:a1:46:54:
ea:26:f6:48:38:cf:52:8e:5d:96:ed:1d:aa:76:76:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:8F:62:F1:30:49:97:0E:36:3B:59:41:B4:B6:32:1A:B0:ED:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3db66c88-0bb0-44d6-b6a0-ad7dd0873c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40a0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:b3:f6:a1:ee:ce:80:ea:d9:89:f0:10:9e:7d:92:03:5f:89:
11:b8:bf:e3:24:29:22:92:3b:1e:b3:b1:ad:ff:ba:8a:96:eb:
26:c6:c0:d8:dd:3d:cd:27:30:51:a4:47:84:29:b5:74:6d:b3:
da:57:81:21:63:e7:95:7a:de:f2:26:38:34:ed:2f:3c:90:89:
93:fa:31:0b:f4:08:6d:29:7a:02:84:26:c6:8b:2a:76:0b:fe:
65:2f:d4:fe:56:9a:2a:91:d0:12:13:bb:65:0a:5b:da:34:81:
91:25:49:4a:fa:aa:80:c6:e2:e7:2d:27:4b:0c:af:1a:51:3f:
21:82:e5:9f:47:ca:69:00:14:eb:8b:2a:30:39:71:01:9b:7a:
de:c9:38:13:4b:4d:75:f2:1b:df:80:b4:16:98:9b:b9:48:e0:
0f:a0:97:d2:37:1b:3c:a7:76:ac:cf:19:52:3c:b9:a7:08:b6:
a6:92:e2:2b:1f:66:a0:a2:43:f1:6d:0a:e2:8f:3c:d1:64:90:
cd:b1:39:d1:66:aa:16:e3:6a:f0:df:d9:1d:e1:fc:43:eb:4b:
64:07:4b:33:f7:35:17:f2:73:cf:a0:42:15:aa:17:ef:5d:3d:
6d:ad:e9:1f:2d:3c:30:52:ad:07:d0:0f:25:0a:fb:ab:74:bf:
f1:be:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:45 2026 by rpki-client