Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
File: 404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa (raw, json)
Hash identifier: Zc8pIerv1M7rUT/Qhk+V1c6MDoVEt/jkqlCeodyQV6E=
Subject key identifier: 0E:CB:68:CB:4B:91:61:E7:DA:B2:14:21:48:64:FD:82:A0:B8:CD:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3283ACF9ACED910EA9C72570D52172B2A6CCD8C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
Signing time: Fri 07 Aug 2026 05:20:12 +0000
ROA not before: Fri 07 Aug 2026 05:20:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d017::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:83:ac:f9:ac:ed:91:0e:a9:c7:25:70:d5:21:72:b2:a6:cc:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6c761132eea718a7a520b22ffa2bc7986a2b54fcc7eca1ebe457c2b7d5d7c5b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:df:66:42:ce:fb:81:a3:8b:40:d4:3f:4e:
a3:cc:41:7a:2e:8d:4e:07:95:8c:c9:d1:37:f2:b0:
71:f2:fd:c9:41:67:ac:7a:bf:f1:48:67:be:96:37:
0c:45:be:9e:34:74:cf:7d:0d:0b:6c:3c:04:d5:86:
6c:94:d2:79:7c:d2:eb:86:06:f1:3c:b5:82:62:ed:
97:f0:32:ca:02:d1:a4:d8:6e:55:e0:b0:03:b3:91:
3d:c1:0d:d7:c2:6c:5c:b8:d9:1c:02:1c:75:c0:5a:
5a:bd:bb:47:a1:bf:26:6a:92:4e:95:33:0e:44:cd:
b4:a2:5d:05:7a:a0:9b:40:b3:44:40:44:50:1e:a8:
23:ac:1d:31:c3:98:3e:87:d3:40:40:6a:8a:dc:4b:
a0:64:48:cb:dd:62:76:e4:0f:69:32:1a:bf:e1:87:
33:f7:28:d2:56:72:1f:8c:59:b1:95:49:6c:c9:25:
b6:a3:ba:83:09:db:0f:a2:a8:05:9e:11:04:68:52:
91:93:ed:1d:cb:d4:9e:51:68:c2:ed:ff:39:a2:a1:
ab:92:09:fd:4d:49:11:db:05:1f:d8:e2:0b:ec:52:
32:30:3e:7e:a0:fe:b5:52:a4:10:e9:30:f3:9f:f1:
0e:eb:f2:b7:fc:ca:37:dd:de:69:28:e7:cf:e6:49:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:68:CB:4B:91:61:E7:DA:B2:14:21:48:64:FD:82:A0:B8:CD:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d017::/36
Signature Algorithm: sha256WithRSAEncryption
95:96:d0:f5:02:5a:5f:2a:f4:97:73:ce:e0:a9:10:45:3e:be:
cd:93:11:85:9a:e0:e4:31:78:49:87:e5:92:4d:b8:5e:95:69:
76:b3:e4:cf:67:62:65:db:28:d2:46:9a:d9:8b:92:8a:f7:38:
67:89:09:9a:83:7c:4d:fb:30:50:2f:6e:fd:84:2e:25:e4:bc:
d2:e0:6d:36:e2:70:1b:4c:8d:fb:a6:64:11:a2:94:a8:4b:a1:
6d:1e:1c:86:60:98:e3:23:e8:3d:2a:1c:6a:fa:f2:03:e2:d9:
27:13:87:71:91:cb:23:da:48:b3:23:b8:a6:af:23:02:98:32:
57:86:36:63:47:8f:48:ab:65:a3:96:14:79:11:cb:27:b3:ec:
67:a4:64:b4:b5:ec:f6:29:8a:2e:d2:ea:c8:d5:94:a0:6d:ce:
9b:fc:cd:0a:ad:9a:5a:ca:cc:89:4e:0d:d8:14:9d:42:7b:ed:
6f:d8:30:ea:03:51:68:b6:9d:22:a8:00:35:56:a0:37:62:20:
8e:98:8a:c5:25:0a:45:21:81:67:d0:64:51:a6:3d:30:25:35:
66:80:a9:af:8a:2f:02:a6:af:42:34:01:9e:3b:30:40:7d:24:
1e:d7:6e:ee:f0:46:65:bd:b4:ed:0e:62:69:87:10:4f:18:1d:
fa:77:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:38 2026 by rpki-client