Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/43e57be5-17c2-4e0c-9c72-4449f009da49.roa
File: 43e57be5-17c2-4e0c-9c72-4449f009da49.roa (raw, json)
Hash identifier: gD0c7a8m9ghvLQxPasod/xUM/jbZMMIch3ZUQJBPYzQ=
Subject key identifier: C0:A8:A0:40:F4:A6:C5:78:2F:CC:BA:5D:4A:90:24:6E:04:DE:24:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 775F89D8DF4B5FF00C5ABA3D94EEE30D71918302
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/43e57be5-17c2-4e0c-9c72-4449f009da49.roa
Signing time: Wed 09 Sep 2026 16:12:51 +0000
ROA not before: Wed 09 Sep 2026 16:12:51 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5f:89:d8:df:4b:5f:f0:0c:5a:ba:3d:94:ee:e3:0d:71:91:83:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:51 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=8833649490f26e14ba5c8cba2664bd30aab500c779b51f15a5457613c5dbcd66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:b6:b8:4c:4d:9e:bf:c6:d2:ff:a1:c5:74:
97:4a:d0:85:43:a6:45:fa:b8:14:92:1a:8e:5e:c7:
c8:e0:18:3f:8a:a9:2e:5a:78:72:dd:ce:64:45:57:
dd:f0:33:80:94:70:fb:7d:f9:7a:42:e0:4d:5a:dd:
4e:0f:0c:4e:f7:32:65:51:0d:1d:fc:b8:1f:bd:38:
dc:58:91:94:f4:8e:31:8f:14:44:00:87:73:32:3e:
67:eb:18:43:71:7e:2a:b2:da:47:d2:1d:1a:96:0a:
c6:b6:63:81:57:92:11:36:8f:ad:40:54:ea:6c:50:
01:b1:0b:12:75:58:c1:b1:f4:ff:ae:5c:ba:aa:f9:
cf:c8:34:b8:cb:5c:5b:d1:3a:4a:79:5f:b5:fa:a9:
af:2c:c6:7f:c2:84:47:24:a9:fe:d4:08:64:00:b1:
64:5f:5c:20:3b:a3:6f:90:eb:7c:25:01:e8:bb:fe:
af:66:91:87:61:2a:83:af:d1:f8:6b:eb:ad:12:ac:
9a:33:54:40:93:49:20:11:f0:75:84:ce:f5:1b:c4:
0e:2c:7b:4c:58:e2:d0:ec:89:31:63:ef:af:40:65:
77:79:53:e6:f0:39:54:13:33:61:b2:aa:55:72:90:
1f:3f:62:5b:15:77:0e:6b:d8:6d:60:4a:1c:68:89:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:A0:40:F4:A6:C5:78:2F:CC:BA:5D:4A:90:24:6E:04:DE:24:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/43e57be5-17c2-4e0c-9c72-4449f009da49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4800::/40
Signature Algorithm: sha256WithRSAEncryption
5b:2b:a1:97:76:3f:cb:86:e3:a1:75:10:cc:a6:eb:56:4f:5c:
2f:98:8d:fb:39:28:43:93:70:27:2d:96:a6:2d:81:8c:b7:bc:
8e:b0:4f:30:18:a4:35:2c:e8:7d:88:75:b1:b7:65:b9:a7:f2:
19:63:4c:06:3e:86:61:75:f6:eb:a6:23:15:e2:97:d0:86:cc:
46:36:f5:b8:c2:e9:cf:8b:4d:46:82:ee:48:5b:3d:3e:68:d6:
fa:ac:e8:bf:41:c5:e1:d4:82:fe:1f:11:76:94:5c:4a:3b:e8:
8c:b8:b4:01:b7:02:f2:62:a1:b3:ae:5f:df:6c:1c:3a:24:41:
7e:38:be:d3:69:fb:0b:d8:34:7d:39:22:6d:f9:91:d3:6a:84:
99:6a:fe:72:92:7a:87:ce:18:fd:3b:cf:4a:35:24:33:cf:01:
43:bb:a6:20:9f:74:76:d2:31:46:c3:aa:ea:49:45:3b:89:b1:
9b:29:b7:55:76:85:bd:26:32:4f:26:c4:21:21:f2:4e:92:87:
a9:f2:23:05:30:d4:b9:ce:cd:a9:9d:45:47:da:0d:73:5a:f5:
ad:20:e4:e0:17:a7:28:14:76:43:39:72:e2:f3:75:1f:a1:0c:
b4:55:cd:a8:9c:5a:64:17:40:4b:97:82:d4:dd:bc:10:f3:bf:
67:34:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:21 2026 by rpki-client