Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/441c3de8-fce0-49bd-8d5c-f962ecd6d36c.roa
File: 441c3de8-fce0-49bd-8d5c-f962ecd6d36c.roa (raw, json)
Hash identifier: mI9BAbzPb/ESc0RYDIi/0VODsVOvQ7JaWHtOuhOTz2k=
Subject key identifier: 59:C4:06:30:57:82:72:59:B6:F7:A9:9B:9B:39:19:F8:3E:40:ED:9E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 444CC6259682965143CF5C39CA27B941E7A9565F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/441c3de8-fce0-49bd-8d5c-f962ecd6d36c.roa
Signing time: Mon 10 Aug 2026 01:00:13 +0000
ROA not before: Mon 10 Aug 2026 01:00:13 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4c:c6:25:96:82:96:51:43:cf:5c:39:ca:27:b9:41:e7:a9:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:13 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=af9fd0fae3a00eaa0d4a5952de352b3d0bdaf79523829b2b99c6c82945f6b6a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:3f:ca:16:04:b6:33:e7:e2:70:8c:60:88:
d8:dd:8c:e6:f0:28:ff:c7:2e:c3:17:df:3a:64:cc:
27:64:b3:8c:2a:a1:6b:11:11:38:4a:0a:3d:2b:4d:
c2:d1:27:74:f6:4b:05:9a:b6:a1:7c:4a:55:d6:c0:
f3:1b:04:90:28:d1:33:d8:dc:88:05:25:1a:4a:2f:
fc:08:76:76:76:f8:2e:e5:b4:ff:66:a0:fd:8d:a6:
64:2b:3a:e5:52:c9:b6:60:9a:0c:37:95:f7:fb:ac:
aa:9e:f9:de:c4:60:1d:d6:05:a7:45:77:a5:c6:3c:
28:79:da:e4:90:67:7a:a0:41:bf:86:53:41:46:06:
a3:0c:ca:1d:8d:2b:0e:fe:a0:21:5f:c4:9f:7f:2d:
1d:9c:0c:b5:50:87:34:24:f3:6b:74:26:b7:80:97:
cc:96:cb:fb:e9:80:1b:b1:b9:94:35:b8:a4:0d:86:
ca:42:ec:37:65:8f:3d:3b:f4:06:8e:65:6a:13:69:
3c:96:79:fd:af:f5:b6:24:7b:23:2d:79:94:1f:dc:
63:e8:86:5e:36:a4:fd:3e:e9:78:f0:a7:b8:94:20:
8d:1f:e3:fe:a4:38:86:9c:9b:ab:59:a4:90:ac:7d:
dd:06:51:4c:6e:ae:50:3c:b2:a3:6b:a5:0c:ec:17:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:06:30:57:82:72:59:B6:F7:A9:9B:9B:39:19:F8:3E:40:ED:9E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/441c3de8-fce0-49bd-8d5c-f962ecd6d36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:2080::/48
Signature Algorithm: sha256WithRSAEncryption
a5:87:9c:5a:4c:76:24:38:6d:be:02:59:86:70:15:c8:a7:4e:
8a:67:f6:38:29:13:d5:6e:bb:e8:96:24:34:55:b3:38:84:0a:
f6:70:4d:e7:fa:df:e1:f8:b7:11:6c:fe:10:56:1a:b4:08:32:
46:1e:a7:9e:58:13:90:a0:ed:ab:40:11:13:05:c9:f2:4f:e2:
fd:e9:88:11:00:bb:22:34:d6:ef:be:4e:0f:83:aa:ad:a5:8a:
c7:89:e8:21:a3:ec:d6:ba:f7:c9:73:39:5f:ef:30:4c:fd:fc:
cb:50:af:27:2b:3a:58:f4:e3:f4:af:60:74:cf:bf:aa:1a:c9:
00:12:78:0b:31:67:e0:51:76:a6:f6:44:c7:3d:70:39:a1:f4:
a4:f2:0a:47:39:e8:9c:7b:88:fe:cc:3b:e9:90:e3:fb:8e:33:
f0:dc:00:98:de:f3:a7:e7:51:80:33:0c:57:3d:01:54:01:87:
08:eb:de:8e:0e:8c:94:0e:e1:ee:5e:66:3c:f7:a7:58:97:c3:
b8:c1:75:9b:1a:8a:c0:d0:09:61:14:3d:cf:4e:a1:88:99:26:
ec:5b:3d:89:75:c1:b9:7e:7b:33:48:cd:d2:4b:b2:f2:89:92:
9e:dc:98:f3:05:14:51:9f:ab:f7:3f:4f:9a:c5:44:9e:e4:e4:
8e:2c:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:25 2026 by rpki-client