Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
File: 45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa (raw, json)
Hash identifier: rg8NjxCDr6k0YSdFL+8euvpbLvh1TTT2pAk46vUhA2A=
Subject key identifier: 26:6A:EF:89:9D:2D:F2:44:D2:0E:6B:6E:C0:61:A7:3D:1D:15:C3:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 552F3BC1EAB20ABF611DDB075CCFC0AFDBE6D756
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
Signing time: Fri 07 Aug 2026 05:10:37 +0000
ROA not before: Fri 07 Aug 2026 05:10:37 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:2f:3b:c1:ea:b2:0a:bf:61:1d:db:07:5c:cf:c0:af:db:e6:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:37 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6c9e33ef2090ae2020cda31298f3d677c025d2b3f66d8a434174b075d48469d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:d9:c3:70:24:56:2f:21:3c:c9:e0:3e:54:
b6:32:80:55:4e:b8:ad:ff:76:32:8a:df:82:5e:c2:
80:b0:00:6f:8e:f8:40:a3:ac:2a:33:67:12:3a:26:
60:7f:d2:f1:57:0a:15:12:c1:22:5f:a7:4f:e8:e7:
d4:b2:ba:3d:ab:87:fc:82:da:c9:50:62:80:fe:cb:
27:e5:7f:4b:33:b5:3f:a4:1d:13:4b:20:71:96:1c:
60:02:06:6e:73:5b:6e:6f:2a:7a:ee:75:2f:3a:63:
2a:bd:87:cd:c5:82:01:c9:27:36:2e:00:a5:16:87:
b4:50:ee:52:c3:db:12:34:d0:34:1c:b8:26:55:4a:
9d:a5:be:28:e4:bd:81:52:e6:f7:5a:86:91:b8:80:
b0:66:30:13:f3:ce:1f:11:1d:d5:7b:25:97:96:5d:
a9:8c:c8:85:9d:47:dd:23:90:79:54:b6:2f:27:94:
ba:64:be:89:ab:6e:36:4b:7e:ef:25:8b:2b:58:06:
7c:20:e2:c8:23:8e:9b:7e:f4:2a:e5:54:31:cb:59:
99:02:08:3e:79:5d:1c:b4:d4:99:80:e8:73:92:37:
f7:91:8a:26:33:ec:07:6b:76:7f:62:52:ac:d4:88:
04:76:be:fa:e3:f3:9b:8b:fe:f1:27:47:c4:79:2d:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:EF:89:9D:2D:F2:44:D2:0E:6B:6E:C0:61:A7:3D:1D:15:C3:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:e000::/40
Signature Algorithm: sha256WithRSAEncryption
59:94:92:0b:c8:59:ff:f6:5f:93:1c:ef:3d:b4:8d:b8:c0:c9:
53:ca:48:38:14:cb:c6:e9:da:2f:82:fd:07:7d:05:8c:70:9a:
31:96:18:32:dd:5d:54:dc:ca:34:25:4c:25:42:b2:66:92:86:
d7:71:af:2d:f2:86:c5:e9:28:48:47:3a:77:99:84:14:66:2f:
99:71:78:b8:36:2a:cd:c3:cd:e7:ec:ad:a5:8f:c6:87:11:bf:
65:08:86:87:0b:dd:b1:f2:69:9d:c6:2b:87:c8:c5:5f:fa:ee:
7a:70:de:c5:e1:3b:79:e9:39:14:a1:07:e5:7e:b2:02:bf:4c:
fd:06:81:92:ef:45:fd:a6:cc:92:8b:58:42:44:91:d4:d2:2e:
34:f6:23:87:2a:98:3e:84:7a:d4:a2:94:1f:95:5e:8c:98:ab:
33:0e:66:be:51:3c:78:83:85:5d:a0:c0:c7:6c:80:16:7f:6e:
c8:32:ff:77:c8:23:fd:20:da:13:c5:c3:47:4a:47:2c:60:d0:
4e:ff:76:78:83:8d:a7:2c:32:88:67:f9:b4:6c:f5:5e:f9:dc:
b0:59:84:03:b7:20:0d:56:90:71:d3:d3:34:75:ab:f4:ad:59:
49:c6:65:a0:bf:36:f3:53:65:8b:0b:0a:97:82:07:ac:87:b5:
df:67:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:18 2026 by rpki-client