Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File: 4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier: Oysyn5WLp/dGZXgPX880Ik8Dj2yDqKM/XA0v9XEhACc=
Subject key identifier: 96:CB:6A:01:A4:54:2F:46:14:01:9C:BD:CF:CE:38:27:CA:C0:AE:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67C64A749F43DABE32926566DF07BC9CB78427F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time: Fri 07 Aug 2026 04:40:26 +0000
ROA not before: Fri 07 Aug 2026 04:40:26 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c6:4a:74:9f:43:da:be:32:92:65:66:df:07:bc:9c:b7:84:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:26 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8d7d0fcd06824b6a0fa0048efdde617395edbbd0066d1b72384d6fada9976175, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:2f:98:2d:e2:d2:a1:33:78:df:dd:32:21:
b5:bc:4d:73:38:9d:9a:7d:3e:e5:51:af:9e:83:80:
ec:e1:5c:b0:70:c3:56:dd:94:36:32:9b:3e:a6:cf:
d6:f8:80:51:5d:63:ce:b2:9f:cf:41:98:dc:bc:b6:
e1:4b:32:8b:01:b7:ef:71:21:0f:43:67:23:f0:03:
e4:a6:56:9f:30:18:38:7c:dc:dd:85:2e:a8:90:e6:
23:59:50:a0:e2:28:4c:45:f8:50:be:01:c5:a6:18:
dd:4f:2c:0b:03:d7:b4:7b:aa:62:7b:02:25:79:52:
c6:ab:91:91:a6:10:a2:a8:a1:f0:69:d3:2c:9b:b1:
e2:c6:38:b3:0b:b4:c8:a6:83:1b:0b:f1:5d:09:12:
5b:20:93:d0:1a:eb:91:a6:e4:ae:60:3d:73:0e:23:
c0:12:4b:b9:de:a7:1a:81:da:58:22:6a:c6:10:e9:
0e:f1:e5:28:81:54:28:02:30:97:3f:73:12:d3:48:
31:f1:ab:d9:d0:5a:47:da:bc:b1:10:b4:54:59:c6:
18:be:98:b1:4a:68:6a:c3:ec:55:c5:51:e5:a9:a0:
a8:16:98:4f:c2:fa:94:65:e7:61:60:e3:a8:1e:dc:
4f:cd:e7:87:01:04:a4:9a:a7:4c:e0:99:21:51:31:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CB:6A:01:A4:54:2F:46:14:01:9C:BD:CF:CE:38:27:CA:C0:AE:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a080::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c7:39:96:b3:3e:ca:5d:1f:13:2e:57:fd:0d:c9:9f:72:d3:
0d:aa:56:cb:b2:2a:ab:02:8e:39:ec:92:f6:d0:8e:e3:f2:36:
33:84:9a:02:56:0a:a1:13:4c:b0:4c:4a:d2:72:72:0a:fa:e4:
3e:20:42:a9:7f:22:68:23:70:25:1c:93:9f:fe:ee:e0:8b:ce:
b9:98:94:ee:93:21:a6:39:f3:a1:cb:95:8d:60:0c:2e:68:31:
f5:1f:d2:82:57:8a:ae:4e:3a:69:b0:19:93:16:8c:55:aa:c0:
75:35:f4:61:70:06:95:61:b7:6e:c2:ad:50:57:f2:98:6f:eb:
11:40:dc:9e:46:6b:3f:99:e0:58:34:dc:9e:bf:4e:82:82:43:
ed:59:0d:99:8a:4d:f4:1f:21:04:df:14:b9:c6:7f:6a:63:50:
db:35:91:f9:02:24:58:10:82:3a:6a:e5:f4:05:c5:cd:53:e5:
98:53:e7:2c:fa:fb:47:b1:7c:52:55:5c:84:b2:98:e9:6a:b0:
3b:db:89:a8:32:f1:e2:b3:c6:1c:9e:5c:f1:d8:d5:3f:4e:83:
91:47:ac:f8:dc:e6:67:d5:b4:48:96:0f:28:b9:63:59:ca:92:
7a:0e:1d:b4:2e:24:28:70:f0:9d:c5:c3:04:d7:6b:e6:5b:c5:
0c:4d:9a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:58 2026 by rpki-client