Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
File: 3ef5e7b8-24ad-41af-8334-2eff292a769d.roa (raw, json)
Hash identifier: 4M65sUWoHqSupJWeuQx6OrO4fe3kYS1pheD+mMMBz9s=
Subject key identifier: 9C:9C:58:6B:0B:D9:89:87:3A:AC:6B:DA:B3:ED:53:A5:33:E8:18:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 759963494E283A3435C511A8F2A0B9DDDD2B78C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
Signing time: Fri 07 Aug 2026 05:20:07 +0000
ROA not before: Fri 07 Aug 2026 05:20:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:99:63:49:4e:28:3a:34:35:c5:11:a8:f2:a0:b9:dd:dd:2b:78:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=cc2b8ee302d620a35a9c92931b41e669e647aa6035c0a378b6e0bf464684e833, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:dc:c6:5c:41:b5:36:be:a0:fd:7e:4f:fc:
75:d4:48:a0:5f:0b:d6:fc:e6:01:da:ac:c8:47:26:
b1:33:9e:d0:0c:7e:ef:a4:bb:dd:a4:24:26:93:ab:
57:36:6e:4b:98:76:75:2f:a1:20:60:07:5f:a2:d3:
f6:5e:99:31:8f:d1:57:c4:eb:a7:a3:46:af:92:87:
f5:67:4e:ef:a0:8f:20:18:55:06:c9:5f:bb:e6:ca:
34:73:9e:93:2b:18:06:d2:ea:90:71:3f:67:05:ca:
c9:9a:e1:4d:ff:c4:20:87:76:72:db:51:77:84:fd:
fb:18:0b:a5:59:d8:35:a8:d5:34:06:fd:c5:0c:ea:
3d:8a:96:4d:13:1c:47:8d:a1:e2:76:69:3d:9a:59:
de:ca:03:4f:04:89:12:df:2e:3c:c9:95:44:0a:d9:
d7:1d:b1:47:ae:1d:9c:4d:9a:e2:fe:f1:ba:1b:fd:
d1:10:a2:53:36:f7:0f:ea:e4:9e:8d:0c:84:30:4c:
51:32:00:38:38:d9:70:f7:de:8f:c9:84:e0:fc:95:
97:55:7a:4c:04:7b:81:ab:fd:62:96:17:c6:56:4e:
2d:59:26:7f:00:fb:bf:61:6b:0a:55:3a:f4:a3:31:
af:66:3c:5d:3d:7b:26:3a:62:03:2c:de:ea:1a:5f:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9C:58:6B:0B:D9:89:87:3A:AC:6B:DA:B3:ED:53:A5:33:E8:18:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ef5e7b8-24ad-41af-8334-2eff292a769d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
95:24:aa:4e:53:a3:39:31:88:f2:4e:af:8e:93:03:d5:76:70:
b3:92:e5:63:5b:97:62:ee:08:8b:a8:0e:ed:84:dc:8b:9d:89:
cc:26:1a:6a:60:3f:da:24:43:30:e7:16:07:0b:b9:96:9c:f8:
35:bd:24:32:f0:aa:62:f2:fd:7c:d9:d4:68:c3:dc:94:28:78:
a4:7c:0d:24:ff:6a:85:23:23:b4:6e:d0:bc:61:91:32:84:5d:
c8:b3:1e:c0:3f:e5:72:e2:b0:9a:34:bd:6a:bd:14:01:1d:9e:
b9:0d:6d:8b:cc:20:52:bd:97:87:55:9c:6d:1b:5b:5d:2b:7a:
f8:4c:ad:a0:42:ba:91:3a:7b:54:1d:e0:0e:3a:91:9f:bb:95:
4a:b6:e6:ac:1f:96:38:58:78:0b:d1:44:ec:8c:04:c6:a6:68:
b5:7a:3e:8e:3e:82:56:b6:4f:0c:97:3b:b5:46:8d:e3:65:cd:
8c:2a:21:29:3b:a4:aa:a2:5d:1e:2d:6d:f2:05:b5:6f:f7:5f:
cd:d7:1f:67:a7:a7:fe:db:a7:2b:b6:c3:f8:28:38:de:ef:91:
bd:70:4a:c6:ff:ce:64:7b:f1:5f:01:53:23:10:96:21:03:20:
fd:e7:1e:31:08:46:1f:c2:63:81:48:e1:83:e4:47:55:80:6e:
ee:3e:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:12 2026 by rpki-client