Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
File: 431d8e22-a384-419e-9218-32a80c0ce0e3.roa (raw, json)
Hash identifier: yQjSuyBRAfV2F/N4hWWr8VYlrb+X26y4oOsmhDQE880=
Subject key identifier: 8A:F0:D1:0C:42:A7:33:35:64:AD:D3:7E:DE:8F:55:96:5E:D8:4E:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63E08E658C75E0852CCB93045495A0A3E42FCD8D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
Signing time: Tue 04 Aug 2026 01:10:07 +0000
ROA not before: Tue 04 Aug 2026 01:10:07 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e0:8e:65:8c:75:e0:85:2c:cb:93:04:54:95:a0:a3:e4:2f:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 4 01:10:07 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=49dce2f27e8d5bd1771158e0ec749fce38d375b18fa3317f252e85d929b75373, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:d8:2d:fc:e0:bc:60:17:87:28:b4:b5:11:
0c:7f:56:8c:e3:57:c0:ec:d5:56:24:bf:58:c3:7b:
67:c4:fd:d1:83:8c:c0:46:be:cf:c7:95:e8:bb:73:
46:5d:31:e1:c8:56:7c:4e:d0:b2:88:36:9d:d8:32:
39:bc:2d:17:2a:d3:a6:13:7d:67:18:e7:af:12:64:
83:e0:a9:63:18:1f:c0:37:d6:44:12:25:ef:f7:ea:
87:4a:ee:8a:6d:1b:7e:c1:50:a6:cb:8c:7a:be:6b:
eb:2c:7c:6d:bc:44:80:f7:80:a7:36:74:8c:58:00:
2e:b2:33:81:50:c2:5b:d0:99:47:d4:24:eb:d0:54:
80:86:9d:ff:4c:57:e5:90:46:46:0a:22:a6:5b:72:
24:42:09:73:94:24:54:7a:77:c6:c6:4a:43:ae:aa:
bb:44:38:fa:ce:b3:f4:77:e5:30:e4:82:79:70:e6:
6e:79:b4:b6:3f:ff:84:ad:61:11:66:84:d2:0a:44:
79:c0:69:f9:50:dc:a6:de:19:1f:01:35:96:65:74:
f9:7e:a8:d5:7e:3d:85:7f:a7:53:f3:c4:e5:c8:20:
a2:98:77:a0:bd:cc:0b:54:b1:c1:72:a6:fd:00:6c:
d1:3b:1a:21:f6:e4:5c:27:3c:3b:a8:25:f1:63:f3:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F0:D1:0C:42:A7:33:35:64:AD:D3:7E:DE:8F:55:96:5E:D8:4E:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/431d8e22-a384-419e-9218-32a80c0ce0e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:e000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:a6:96:75:0d:7b:a3:3b:51:5e:2b:a5:22:b3:80:ef:18:a6:
19:7c:32:2a:88:2d:d8:1b:5b:1a:4d:2c:2a:64:ef:cf:56:4d:
5d:fc:77:44:04:86:25:7f:2d:1e:a9:11:57:1b:67:57:9e:7d:
4b:dc:b2:43:a6:e7:fa:91:c0:a0:48:3d:36:c5:cf:01:92:08:
78:b4:9d:77:68:fd:98:dc:1b:36:b2:9b:a9:a5:0f:6f:71:7c:
3c:4e:52:03:28:fb:f4:c8:82:20:f6:c8:8f:ec:32:07:da:11:
8c:15:5a:01:7c:87:a0:ae:33:26:c8:58:64:f9:99:f2:60:c9:
ea:a3:39:ba:04:82:22:1d:ed:5e:0e:c1:dd:7e:52:4c:6b:16:
81:5a:14:cc:09:b3:a3:f3:d4:49:90:94:9a:ff:1b:b8:83:02:
7a:dc:52:96:48:9f:3c:90:51:41:11:a1:0c:87:5a:31:fa:84:
12:e3:9d:28:60:19:42:63:b9:24:7b:ea:2b:46:46:64:b2:20:
3b:4f:03:9e:87:c1:80:9b:16:35:e3:40:56:da:86:e8:43:b1:
72:48:c7:60:9c:a8:37:c5:56:29:65:35:a4:53:37:c7:f5:7d:
97:96:0f:d1:09:d4:d1:ee:9f:b2:84:e7:b9:42:5d:34:55:e5:
c3:44:ab:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:26 2026 by rpki-client