Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408fc879-4db9-446c-bdb3-37bf4ee28c97.roa
File: 408fc879-4db9-446c-bdb3-37bf4ee28c97.roa (raw, json)
Hash identifier: QxUPyFiu5CqQSMHU9xeXlYhMDirpvd0b0kcOBCafwb4=
Subject key identifier: 42:AC:43:F0:CB:56:47:C6:86:89:D8:42:1F:7E:87:3A:DE:7B:E6:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2338DB68C3DAF2D786130AE5BA8F7C6CB037EFCC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408fc879-4db9-446c-bdb3-37bf4ee28c97.roa
Signing time: Fri 07 Aug 2026 05:00:44 +0000
ROA not before: Fri 07 Aug 2026 05:00:44 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:38:db:68:c3:da:f2:d7:86:13:0a:e5:ba:8f:7c:6c:b0:37:ef:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:44 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9132accfe8c948b91a4ff1b615173f28b886550657b2f238870c9380a99c0b86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:6b:00:76:f0:fa:4e:84:6b:59:65:0c:0e:
27:a2:65:a8:6b:8d:86:be:1c:3f:97:06:ae:50:42:
d1:11:18:d2:a4:02:7e:29:67:27:71:89:88:64:74:
bb:68:0d:16:fb:1c:12:cf:a4:d3:b4:54:94:92:20:
fd:38:29:cc:9e:a2:9f:76:23:78:e3:3e:92:d6:6b:
61:3d:ba:c4:97:b8:49:5a:33:f6:f1:0c:fd:1f:b3:
70:b5:50:e7:92:7d:1d:88:3d:64:fa:72:53:42:88:
c0:69:d9:95:ff:95:87:ae:8f:fa:0f:67:07:c2:fa:
2a:e2:2e:8e:b0:1c:6a:7f:59:07:fd:61:25:9e:45:
f3:f7:72:97:f8:48:62:52:21:14:5e:16:36:68:52:
cb:e2:dd:62:bb:c1:e4:1a:a6:12:99:8b:93:a8:49:
e5:8d:14:ea:a8:99:53:13:39:19:ea:17:a7:8c:ec:
cc:35:de:92:b0:4c:21:5e:3f:99:6a:73:ef:a7:4b:
5e:4a:15:34:d5:61:ce:18:e9:eb:b7:2d:11:1f:90:
3f:51:f4:42:18:ab:f8:bd:cd:3f:d8:0a:33:61:84:
5a:8f:4b:f7:d5:0f:f2:48:56:98:61:55:0d:7e:7c:
4d:9d:84:c9:b8:ac:b0:be:f9:59:14:d1:71:99:15:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:43:F0:CB:56:47:C6:86:89:D8:42:1F:7E:87:3A:DE:7B:E6:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408fc879-4db9-446c-bdb3-37bf4ee28c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
17:a8:10:7a:56:26:b4:34:df:c0:8c:f7:54:94:f3:d0:25:cf:
73:5b:30:01:0d:4c:cb:b8:5c:61:1d:0b:31:1c:77:4c:ef:3a:
ba:5e:9d:d5:10:fe:e9:59:54:9a:eb:bb:c4:72:d3:75:d6:63:
e2:39:e7:21:29:89:25:35:af:38:54:c4:82:15:bf:7b:05:1e:
8d:da:57:83:7a:e5:3c:c7:1c:13:1f:f7:44:e6:c5:7f:bc:dc:
bf:71:23:36:a4:0c:a5:62:d9:fc:e9:c3:72:d5:5c:d0:0b:be:
2e:10:58:e2:fc:ac:81:a8:36:51:5d:e7:00:fb:9d:00:cb:f3:
ec:be:6f:36:e7:bb:68:22:55:bb:96:b9:fe:ba:68:e2:a2:2f:
ef:4d:b6:3d:f9:03:85:ed:67:3e:7e:41:ee:64:57:ea:2e:41:
31:c9:54:d4:7b:58:6e:dd:26:ed:b6:70:00:e4:6f:ef:49:d5:
fc:71:2e:da:72:67:d4:c1:d5:29:c9:2e:fe:5b:f4:ed:b9:e3:
6d:cd:6f:64:d0:ee:33:8f:aa:5d:df:3f:6a:2b:ea:bc:f6:ac:
d8:12:39:c2:a8:90:78:e6:52:27:ff:8e:79:dc:33:01:df:08:
5e:6a:89:38:62:e9:30:f5:35:6b:b0:06:ac:dc:7b:b1:f3:92:
5c:f9:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:53 2026 by rpki-client