Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3dc20ceb-e981-4a40-96b4-69aa25914776.roa
File: 3dc20ceb-e981-4a40-96b4-69aa25914776.roa (raw, json)
Hash identifier: gqfT6ccq9QOuFe6bZZ+Wb/nxj20DWcN59sFb9MkP77Y=
Subject key identifier: E5:83:F4:F8:CC:06:BC:54:26:FB:85:38:68:13:A7:81:9D:D0:64:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D8B9E53B1BD8879A3D8B1E1D9BDDBBAF3ECE866
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3dc20ceb-e981-4a40-96b4-69aa25914776.roa
Signing time: Wed 19 Aug 2026 01:00:06 +0000
ROA not before: Wed 19 Aug 2026 01:00:06 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8b:9e:53:b1:bd:88:79:a3:d8:b1:e1:d9:bd:db:ba:f3:ec:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:06 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=9703941cb077f8cd2fb5cfef6023966ae38cf06e6d75a202cea7d7f1a0f0def9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:90:0b:c8:b4:87:37:bb:c0:c5:3d:8f:cc:b3:
1a:25:91:f6:85:1e:da:94:95:9c:40:7b:bb:36:78:
00:cf:70:1a:4e:19:71:3a:85:86:05:c0:ff:a7:01:
a2:3b:08:54:fa:87:c7:bb:a0:59:6e:51:fd:8f:6e:
10:bf:c9:59:ee:d0:1b:ae:f2:e5:95:1e:c5:39:44:
88:ad:8f:66:65:82:92:cb:0d:87:f7:45:34:af:9d:
33:63:fe:9f:90:78:08:3a:f9:38:e1:b2:6e:67:e8:
c4:b1:94:4c:82:61:2c:54:86:1c:d0:5c:5f:3f:01:
73:17:ed:fb:4f:45:3a:c1:06:e5:23:01:d8:8f:59:
57:83:89:71:71:e0:91:8c:c1:c0:d2:36:3d:9e:59:
c2:09:ae:f9:87:b0:3a:5d:7c:bf:be:cb:c4:37:7e:
b0:1c:c8:7a:a2:64:d5:87:c3:96:da:16:e8:21:a3:
4d:91:0d:70:78:0a:92:8b:45:6a:a1:1a:53:2e:4a:
f5:d7:2a:ec:dd:5d:90:92:c7:bc:98:79:f7:fd:30:
6a:a9:02:87:21:df:0c:59:3f:9b:3e:16:09:f1:a8:
41:55:f8:ab:c5:2f:4b:71:06:98:7b:d6:9a:f4:9b:
02:cf:40:0a:b5:e7:a0:89:a3:2c:7e:fb:5f:6e:61:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:F4:F8:CC:06:BC:54:26:FB:85:38:68:13:A7:81:9D:D0:64:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3dc20ceb-e981-4a40-96b4-69aa25914776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
97:ac:40:43:0b:9f:a9:cc:f9:2e:0a:b4:e7:8d:11:13:75:24:
01:7f:b6:8b:53:a7:09:2a:74:ff:a7:ac:0b:3d:b5:69:cd:a2:
a4:d4:32:17:5e:4c:99:55:2b:29:04:5c:e1:43:fc:8e:61:9d:
d7:4d:d4:7d:7c:00:e1:0c:5e:fc:05:6f:1b:4c:88:17:ff:b7:
16:1b:9e:61:47:81:ac:28:5d:fa:87:99:d7:0f:02:6a:03:f7:
d9:21:71:83:aa:53:c3:35:60:ec:aa:87:c8:ca:4c:00:33:6c:
e3:13:de:2d:52:90:f0:1e:a4:38:6b:2a:36:6f:29:ca:9e:b1:
ee:4e:98:fb:c8:b6:f3:6b:8d:16:4d:bb:0a:13:ee:aa:c6:88:
dc:a4:30:b3:aa:dd:bc:16:66:b1:49:03:9b:c2:87:17:25:ca:
37:82:c5:0d:f9:b3:00:53:30:aa:d7:b6:bd:7c:9c:49:8e:89:
b7:ae:14:83:33:62:41:a6:b1:8b:e6:e1:a6:0d:6b:4f:f2:94:
da:e4:48:c8:66:f5:e5:83:bc:a7:9c:da:1a:1e:82:32:5e:e1:
34:b3:a8:45:c1:10:69:e9:d7:06:0e:be:20:41:6c:d5:6a:3d:
da:f9:e9:e5:4b:74:ae:2a:0c:01:72:81:e3:07:b7:12:b0:e3:
35:50:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:52 2026 by rpki-client