Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
File: 4408cd10-0fa6-407f-adbc-3a7a668523d6.roa (raw, json)
Hash identifier: YAhBVuyO/V/ls2DwyssjMrIf3bL4b1D1YHPQ0Ff1pzg=
Subject key identifier: A4:14:A1:DF:F5:8F:9A:09:D5:EF:78:06:5E:5C:6E:BD:70:B8:C3:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7278DE27BBA321E166D74CA4D1A70B490352A9D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
Signing time: Fri 07 Aug 2026 04:30:16 +0000
ROA not before: Fri 07 Aug 2026 04:30:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:78:de:27:bb:a3:21:e1:66:d7:4c:a4:d1:a7:0b:49:03:52:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c8dad0501a2191ccaaa92cd18f7f24c30546679518a574e88e7db74f747fb1a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:83:eb:2b:d1:45:ee:23:35:0e:cc:b9:4d:
24:92:e4:26:9b:37:a6:47:bb:f7:00:be:d0:d8:31:
b8:1c:8e:0d:98:98:a7:5e:ff:7b:a5:85:9b:29:73:
a8:70:59:92:4d:7f:7c:6d:1c:9a:07:77:71:47:5c:
2c:02:e5:2f:04:c5:7d:8c:a2:24:6e:5a:5c:b6:c3:
f2:f2:df:c0:98:1b:97:91:cd:94:53:15:54:73:ce:
d0:f1:59:91:73:50:ad:d7:5a:e3:e6:08:3d:9a:06:
53:5c:71:57:57:4f:5c:87:41:de:ad:b9:a9:85:36:
53:61:74:2e:6f:56:47:f9:b9:8c:03:7a:ec:7a:43:
9b:93:ea:7e:51:2f:28:e8:de:37:09:62:f7:49:fa:
77:c2:d7:16:e1:d9:bf:14:c5:32:56:50:c2:3d:77:
6c:06:e3:26:fb:de:71:c2:e2:b1:5c:b8:d3:72:02:
c1:a3:3b:5d:81:14:c8:c7:23:d1:45:32:60:48:ec:
23:b1:5b:9d:6d:d6:34:43:29:ad:f3:7f:ab:da:46:
6a:d8:96:44:7c:66:5a:18:1e:3e:39:22:b1:c8:fe:
b7:a2:5b:eb:21:3a:b8:1d:ac:b2:6a:05:8e:c0:36:
a9:73:84:99:72:4f:85:0a:35:4b:75:aa:d3:78:3a:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:A1:DF:F5:8F:9A:09:D5:EF:78:06:5E:5C:6E:BD:70:B8:C3:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1040::/48
Signature Algorithm: sha256WithRSAEncryption
55:48:39:0f:64:ab:60:af:ff:a7:60:ac:72:d7:1f:a2:66:c8:
cc:3a:ec:49:a0:22:79:f6:03:70:03:d3:cf:b8:06:c7:4e:0e:
1a:b3:15:9e:b2:e3:bd:81:34:58:21:29:5a:7e:79:37:06:91:
31:db:2b:46:38:c3:3f:24:bb:38:58:26:ff:6c:ee:b1:b4:ca:
3f:f9:04:40:ea:8c:f1:b2:fd:4b:bd:ec:ae:50:e6:4f:70:e0:
47:bb:4b:a6:16:37:e2:f2:15:d2:03:2a:48:3d:e2:ca:bb:30:
d3:c7:e3:24:81:00:2e:71:db:bb:bd:fd:ff:58:a1:b9:a7:7b:
e9:25:15:52:69:43:87:56:ec:06:8b:bd:82:44:2d:06:17:41:
33:ad:23:8c:27:12:c5:d8:c6:55:e5:e8:b6:b1:87:a4:84:20:
9d:df:57:23:be:f5:53:bc:e7:3a:63:2b:bf:8e:36:02:e3:74:
9b:0c:33:da:1f:3a:c5:4a:49:47:c3:ca:34:57:3f:9e:de:48:
46:12:e8:4f:71:3c:8f:77:e4:0c:cf:28:9b:08:1e:4f:b0:16:
17:df:90:c4:53:b9:11:20:e2:eb:ef:f1:c0:db:c5:2e:5b:d0:
b0:d0:50:c3:d9:d6:25:ea:52:e5:7a:e7:ad:a8:ad:13:e0:ff:
43:42:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:01 2026 by rpki-client