Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa
File: 470f3c02-20c3-480f-a788-60d7378cea9b.roa (raw, json)
Hash identifier: gD16C2KQki0l06kqsJ9syFVcmXpjhUaZHsQX/vRXXm0=
Subject key identifier: B0:4A:D1:3D:F5:ED:90:89:0D:50:55:BC:3F:16:CB:CE:CE:F9:74:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59E5C3BB167FA6917A05034E7925AAF0080A7825
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa
Signing time: Wed 05 Aug 2026 02:00:07 +0000
ROA not before: Wed 05 Aug 2026 02:00:07 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e5:c3:bb:16:7f:a6:91:7a:05:03:4e:79:25:aa:f0:08:0a:78:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:00:07 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=7cebe892821ab87042074062a6d01ce8fb7d0d8d4b0a48d912bbf106fd3d1d92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:71:d6:81:89:30:c8:8a:68:f3:05:b9:fc:
d6:36:ea:33:e2:92:e2:91:e3:e6:f4:ba:68:e4:43:
85:5d:b1:5b:18:17:02:36:27:c1:04:20:9e:24:00:
84:d2:26:ff:d7:e5:4b:df:e0:89:47:96:19:5a:91:
ee:6b:16:ff:ab:06:57:72:e3:a4:87:78:0d:86:82:
4c:d5:14:33:37:a7:3a:30:18:3b:66:11:c7:ac:1d:
52:4a:2c:1a:8e:94:05:2a:7b:ba:b6:90:79:fe:3b:
32:c2:b3:de:c6:a2:1b:32:52:68:34:5f:b3:25:57:
ce:0f:ab:30:6b:50:e0:57:0a:7f:70:fe:80:5a:76:
2e:d8:83:ec:cf:2a:c1:68:ad:53:29:f2:aa:98:22:
24:35:b9:a9:68:fb:ab:45:79:d8:61:af:ae:64:5b:
45:3f:98:af:a7:80:7b:9e:be:6f:c5:6b:8b:52:71:
6c:d3:d6:22:ef:d6:0f:23:e7:35:ef:8f:6b:22:a7:
85:e3:2a:55:12:48:18:b7:72:36:18:52:e5:d2:2b:
b2:e5:78:c2:12:25:15:8b:55:75:b1:68:ae:a3:14:
a8:54:5f:a3:16:18:12:37:6e:cb:75:01:9e:1c:b2:
d2:a1:46:d2:f4:21:82:c1:bd:f7:38:64:ac:3f:e7:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4A:D1:3D:F5:ED:90:89:0D:50:55:BC:3F:16:CB:CE:CE:F9:74:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:880::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a2:54:85:bd:30:ee:13:6a:0a:1f:a6:1e:04:40:2f:6a:cd:
51:e4:0c:69:bb:d2:c4:8e:94:3e:68:66:3b:f1:ba:d4:e9:32:
5e:be:af:01:9b:67:44:2d:e3:23:98:17:01:8a:f0:08:1b:dc:
49:ec:e7:10:a9:d6:5f:79:99:b8:3b:c6:49:20:df:45:12:34:
31:8d:59:ef:41:8a:2e:11:41:40:99:02:29:ce:60:85:e8:b9:
7f:30:94:b0:c8:62:a7:eb:89:6e:c2:05:51:67:49:17:5c:88:
74:69:90:fe:10:16:0b:e2:a4:05:9d:8e:7e:1c:77:d2:23:c9:
55:93:6f:5b:5d:f7:82:22:3e:24:e7:00:b7:2d:64:ca:c7:c0:
25:8e:77:e1:15:3b:5e:93:69:d2:15:da:08:ea:22:93:30:1c:
0e:5b:1a:b2:c8:69:cc:dc:ab:e3:c2:27:ec:39:a5:bb:c7:83:
e0:01:2e:d4:92:76:f5:2b:a0:16:e6:88:70:8e:2e:79:8e:7c:
9b:90:31:e8:8e:fa:68:d8:32:c6:d7:41:83:f6:9b:a5:a2:22:
3c:3b:69:d8:f8:0a:a0:e4:3c:7b:e1:94:e6:84:a1:14:d9:0f:
ab:f3:bb:b8:0e:d1:95:5c:99:5d:79:fe:04:42:d1:f7:52:e1:
fe:db:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:01 2026 by rpki-client