Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/418cb173-ee02-47e6-ac16-f6565c7a1855.roa
File: 418cb173-ee02-47e6-ac16-f6565c7a1855.roa (raw, json)
Hash identifier: uxvxzSjenG8iAbwHfRVlrAdqR/IFWsTpS5x343Eytqw=
Subject key identifier: A7:1F:25:4F:F6:45:18:37:AB:30:07:E0:8B:C5:01:5A:0B:1F:92:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01FFAF4937A26C31488DDF3E0203D4F0196FEF3D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/418cb173-ee02-47e6-ac16-f6565c7a1855.roa
Signing time: Wed 19 Aug 2026 01:00:41 +0000
ROA not before: Wed 19 Aug 2026 01:00:41 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ff:af:49:37:a2:6c:31:48:8d:df:3e:02:03:d4:f0:19:6f:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:41 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=684cedab0f47d80739b1cae39f929b4594310c45de643af735ae628020ce5e72, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:6a:00:96:c9:47:89:46:bd:3c:8a:6c:35:
eb:24:b9:37:c2:75:9e:d0:1e:a2:99:7d:13:ea:49:
e1:66:20:b9:5b:93:0e:72:52:c1:f6:1b:56:a7:02:
76:12:e6:23:16:cf:27:3c:d4:dd:20:f2:03:4d:32:
87:ff:fc:81:10:c1:ac:7d:85:5f:98:82:75:dc:08:
73:17:d8:e9:5d:26:e6:5e:fd:6b:b0:b1:58:0e:a0:
e2:38:2e:a8:81:fa:ff:8e:25:4e:c7:9f:51:13:d6:
05:28:5a:aa:55:ef:6d:64:c9:28:7a:62:72:82:98:
8a:fc:01:f7:4b:2a:da:b9:6a:10:43:5a:81:45:95:
39:e6:29:4d:0a:d1:dd:75:e7:b2:20:7e:ea:bf:9c:
78:b2:3a:ca:ac:f1:32:31:b1:e8:54:79:ad:a1:2b:
a4:07:01:b9:dc:47:ef:2d:fa:85:1c:cc:11:a2:01:
fc:25:15:79:8f:84:39:16:e2:3e:b3:e2:0c:96:2c:
c6:00:b7:c8:d6:ac:b1:59:f3:18:5f:a8:93:d5:78:
fa:cd:fc:48:db:5b:97:f7:f4:09:f0:69:f6:46:a9:
c9:37:97:d5:d2:d7:ca:3b:a4:c8:93:55:af:9f:87:
36:cb:1d:82:ad:e0:c2:23:09:2b:d8:27:5a:2b:52:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1F:25:4F:F6:45:18:37:AB:30:07:E0:8B:C5:01:5A:0B:1F:92:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/418cb173-ee02-47e6-ac16-f6565c7a1855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:9080::/48
Signature Algorithm: sha256WithRSAEncryption
c4:ec:c6:c6:b9:3b:f8:3d:d1:a4:01:34:8e:33:ef:f7:05:2f:
b7:ea:4c:a0:98:39:c3:ff:a7:49:a7:22:cd:ed:83:91:4f:26:
bf:6b:24:3c:69:16:d6:83:e1:e8:f1:68:a4:f9:b4:1e:84:6b:
1d:c3:4b:77:b2:f2:25:d6:43:be:de:2b:af:f6:cf:40:65:43:
54:24:25:4a:3b:b7:f6:aa:00:d7:c4:b1:ff:bc:41:d1:a5:d7:
2f:4f:6b:16:6c:82:a0:80:ef:32:90:dc:57:51:51:10:02:62:
0c:3c:73:85:bd:0c:48:48:89:0c:2f:83:b6:e8:b3:38:46:c5:
58:3a:f6:7e:b5:ce:7d:dc:ba:b7:6d:fa:5d:76:11:fb:fa:9f:
9e:51:c2:d9:c5:0d:42:a7:d2:85:c3:c3:56:97:95:ca:6a:74:
10:f3:5d:1b:3b:ed:f9:48:25:72:3e:5c:e7:60:24:f7:3f:b0:
72:34:a5:32:a7:d7:0b:6f:ed:bd:3c:d5:9c:94:25:b5:03:76:
d7:c3:c6:90:38:aa:d1:ea:fa:02:db:19:ff:df:ce:d5:09:f4:
dd:c5:db:25:41:24:f8:d5:e7:15:fb:18:21:80:59:6c:06:c5:
a3:82:e8:12:1c:53:fb:d7:27:8d:0d:9c:1b:fa:14:b2:f2:a4:
a0:f1:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:49 2026 by rpki-client