Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455a2efe-3411-42cf-a196-73c25845d48c.roa
File: 455a2efe-3411-42cf-a196-73c25845d48c.roa (raw, json)
Hash identifier: GzWQc4l7vG7p3CYftPSAbpTs55ermsQ01my7FL+zt8o=
Subject key identifier: 49:68:63:E6:08:4A:67:F4:81:CD:3C:CA:A3:D6:83:56:1D:64:D2:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F217C8F201BCD5252645E297B5337DB1B50CB01
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455a2efe-3411-42cf-a196-73c25845d48c.roa
Signing time: Fri 07 Aug 2026 05:20:46 +0000
ROA not before: Fri 07 Aug 2026 05:20:46 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:21:7c:8f:20:1b:cd:52:52:64:5e:29:7b:53:37:db:1b:50:cb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:46 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=766e133e1cdb42cde63a314e960f03250ae25e65f5583345c494fdf7ddbd080c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:76:26:e3:29:71:c7:dd:1d:b5:31:f8:a0:
ed:50:62:70:a2:93:67:d1:a6:bd:04:5d:b8:82:08:
38:b4:1e:26:44:9b:24:28:06:77:d8:08:df:79:4e:
e4:a4:96:e6:51:79:77:78:d0:0b:60:d6:95:96:15:
e6:da:51:06:cf:b9:99:70:1d:5a:13:c6:6f:f7:d2:
4f:9f:98:1c:d8:40:fe:fe:c3:a9:50:1a:65:9a:61:
f1:24:13:6d:34:5b:c9:0c:e6:f4:ef:11:3f:91:11:
87:c9:29:d7:de:b8:18:a0:20:95:35:35:86:23:f8:
38:32:27:e4:cc:42:9b:dc:8d:40:62:0a:64:2c:72:
a5:e6:5e:d2:35:6b:b9:db:9b:99:fd:41:33:6f:84:
35:77:41:44:ce:5a:d1:dd:d8:17:1f:85:d1:d7:f5:
e1:a6:5e:b7:4d:0e:06:fc:a9:31:ef:41:73:b2:83:
84:90:bf:9a:df:81:4e:47:22:80:e8:0e:2f:14:61:
14:62:41:f2:04:f3:b7:03:ce:c7:f2:ee:d8:a5:b8:
5f:06:61:8c:75:48:ab:45:18:cc:8f:47:85:bb:ab:
9f:f5:b8:10:2f:93:0d:3e:72:48:49:49:57:70:f7:
c0:c4:f0:00:a0:85:26:5f:f7:5f:c6:f6:d8:46:82:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:63:E6:08:4A:67:F4:81:CD:3C:CA:A3:D6:83:56:1D:64:D2:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455a2efe-3411-42cf-a196-73c25845d48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:2000::/40
Signature Algorithm: sha256WithRSAEncryption
74:e0:23:3e:47:26:6e:aa:24:ed:60:c4:e4:60:12:34:2d:da:
b9:57:c8:8a:af:2d:84:33:fd:97:18:93:ae:ad:70:36:61:f5:
39:0b:84:c1:e1:2c:8b:41:6d:2e:29:1a:3f:1a:09:38:6b:49:
7f:ed:76:7c:56:92:96:93:24:52:81:41:30:be:bd:9e:57:3f:
f5:6a:08:ee:e3:65:48:17:7a:cd:05:20:3a:54:33:e6:1f:c0:
66:99:81:d0:c5:2f:4f:35:b5:2c:15:1c:13:6f:75:0f:9f:ce:
11:b7:d4:a1:a9:1e:a6:18:c8:1d:09:a7:e2:e5:a3:61:b6:b0:
cb:fc:6d:ed:26:d7:f4:fd:e3:be:f7:52:04:9c:58:98:73:8d:
a4:be:15:98:52:a3:57:ae:2b:9b:39:95:aa:80:18:e0:49:08:
8f:f9:11:10:0d:c4:fc:34:09:59:43:32:f2:81:11:56:1e:d4:
8b:98:d1:6d:de:87:56:91:71:58:e3:39:d1:8f:64:26:ee:58:
aa:f2:c8:07:cb:38:ae:fc:85:ad:74:39:c7:e2:c3:79:54:dc:
a0:a9:18:d0:f0:e8:a6:c2:5e:b5:db:ad:83:c7:a5:77:8d:71:
55:21:ad:1b:4c:86:9b:4a:cd:de:68:ca:ce:d6:99:2f:33:ba:
5d:c8:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:57 2026 by rpki-client