Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa
File: 3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa (raw, json)
Hash identifier: D7MvL9YcmvPo4cr9d3g1sqePXZpXwnA3a6Zh1KG4Syk=
Subject key identifier: E3:8E:E9:3E:AF:C9:21:27:70:7B:BF:BD:7E:F3:DA:EC:E5:FC:84:36
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 349CFC3E65F776453F175AFFA3F8C405165D3DBD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa
Signing time: Tue 18 Aug 2026 18:13:00 +0000
ROA not before: Tue 18 Aug 2026 18:13:00 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9c:fc:3e:65:f7:76:45:3f:17:5a:ff:a3:f8:c4:05:16:5d:3d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:13:00 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=0b365280fa9a2956c8253900381226070edbef722b98c401334fc999e5954cc2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:94:53:c5:64:8b:50:67:ec:f2:cd:ff:bd:
a9:0a:53:39:8d:0f:07:8a:28:3b:66:00:77:ee:c5:
64:7d:e3:f9:0b:f4:60:68:c2:15:0c:4c:aa:79:9c:
1f:e4:62:5b:bb:7d:84:28:3d:19:47:85:88:ba:c4:
3a:17:f1:37:21:47:2b:89:22:7e:97:48:0f:32:35:
c3:0c:32:8c:f7:67:80:d0:90:4a:a2:84:b2:48:bb:
0a:fc:23:a0:d7:8a:61:8e:ea:c3:4a:8b:7e:6a:b2:
d1:03:9b:95:d1:de:ef:82:5b:b2:cf:43:53:9b:1c:
bf:bf:db:95:90:14:eb:99:12:e6:6a:1e:ed:f5:22:
2c:d0:3a:38:a0:a3:a3:a7:ba:ff:15:2b:48:f9:f1:
d0:da:3a:89:4a:54:52:85:69:92:7f:05:20:6e:5e:
3b:27:02:0f:71:74:3c:36:6e:90:ee:ba:af:9d:ec:
ff:02:28:52:e9:54:84:5d:99:f7:68:f1:31:2a:db:
bd:86:34:6b:c8:87:e8:c9:ce:d9:a9:d8:bd:0b:30:
e9:c0:8d:df:17:bf:63:af:aa:b1:94:4e:f5:a5:51:
b8:2d:4d:c4:7d:27:dd:2e:b8:fd:97:23:ef:43:bd:
5b:a6:0f:34:06:75:d8:f2:a2:38:81:9a:ee:e5:a8:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:E9:3E:AF:C9:21:27:70:7B:BF:BD:7E:F3:DA:EC:E5:FC:84:36
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3e439f2f-7843-49bb-ad3f-5b5d85d32a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:57:ad:a4:17:6e:08:fc:d7:14:fb:24:30:22:bd:cb:19:a9:
e5:a3:f7:c5:1d:37:49:0f:71:bd:2b:62:87:34:3a:ab:01:a4:
2d:be:56:f0:cb:9d:05:c0:dc:68:2f:51:96:2b:cc:4d:fd:a3:
17:00:67:1c:60:2d:9b:e2:29:67:4b:9e:23:e4:a0:ed:58:da:
03:d0:46:fd:d4:16:13:72:a2:fb:7f:ee:ea:9d:8e:b5:1a:4a:
55:2b:da:5f:4c:40:9f:ab:98:ae:7c:3f:5b:9a:7d:2a:4e:29:
bc:e3:69:06:75:f9:9c:08:4c:c5:d6:55:1d:2c:9f:e5:54:d0:
07:79:b0:ab:3f:e2:c6:82:f3:f4:d9:22:94:c5:f4:fc:4c:05:
c5:89:13:0a:3c:4f:6f:21:a4:c0:f5:22:1e:cc:7e:01:cd:b0:
7b:ef:e2:7c:48:52:a3:0e:34:02:97:ab:47:9e:54:2b:78:f0:
cf:d0:f9:db:b1:4e:3d:6d:98:4b:21:6f:fd:ed:0d:5f:2f:c4:
5c:38:3e:56:ad:24:30:bd:d8:45:90:4c:9e:9c:8b:db:f6:cf:
bd:da:7a:e4:c7:2d:b7:1f:eb:5f:6e:7c:c2:27:0b:8f:07:2f:
34:56:b5:ba:bd:15:cd:31:02:f5:58:a9:b5:07:79:50:e7:49:
dd:81:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client