Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492ed8ca-efa4-4041-ac8d-b0a78ef05308.roa
File: 492ed8ca-efa4-4041-ac8d-b0a78ef05308.roa (raw, json)
Hash identifier: h5gqcIJIsnOT1n4YXcEMtNDhwgRGCtoSi/sqq+ROmRA=
Subject key identifier: E6:56:0A:11:B4:55:F4:06:DC:D0:B4:84:E2:82:C8:83:74:76:68:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F6032436E99C391018351F642AD05B2970F7A41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492ed8ca-efa4-4041-ac8d-b0a78ef05308.roa
Signing time: Fri 07 Aug 2026 05:20:07 +0000
ROA not before: Fri 07 Aug 2026 05:20:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:60:32:43:6e:99:c3:91:01:83:51:f6:42:ad:05:b2:97:0f:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f3625280a649cffe42ffdbb40544b6f2307a24615f664ccbf1c4c1d1b05b6e38, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:11:99:b3:0c:39:9f:4d:02:1c:02:32:4c:
39:ae:21:8b:70:96:c6:fb:fc:44:78:2c:68:bf:cd:
87:54:34:c5:57:8c:54:5f:73:4c:38:ca:f5:81:29:
4b:21:54:8a:32:b4:34:ae:6d:cc:08:c2:c6:ee:5d:
1a:60:57:8c:af:58:7a:ab:97:9b:d3:6c:29:7d:b0:
b0:36:5c:61:84:3f:3f:c2:e6:c5:04:45:77:a1:e9:
4f:95:2e:de:97:07:f9:08:c1:ab:1b:11:51:14:f1:
2e:84:38:42:87:24:2f:1e:8e:69:31:1a:cd:82:cb:
e8:d7:2c:48:dd:f2:8b:13:c8:ad:3d:f3:7e:14:83:
8c:d4:75:1c:67:51:eb:88:ed:f9:fa:55:15:ec:92:
da:b0:05:68:42:cf:93:03:e3:07:c6:1a:35:c0:7d:
5e:82:be:6c:18:f7:7a:e4:6e:b2:08:27:73:f4:dc:
ef:ec:02:cc:ee:f3:12:40:aa:a9:66:36:91:c3:e3:
d2:79:a7:a3:a6:37:97:df:01:8e:02:81:9f:63:d2:
8c:9d:eb:aa:58:ae:5e:76:00:8e:2c:87:95:01:f5:
b5:a6:65:39:53:50:8a:8f:cc:6e:43:15:a0:df:5e:
b7:4e:d0:2b:6a:9d:46:a5:09:c6:7d:1e:fe:f1:c3:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:0A:11:B4:55:F4:06:DC:D0:B4:84:E2:82:C8:83:74:76:68:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492ed8ca-efa4-4041-ac8d-b0a78ef05308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:ef:d9:db:bd:18:49:c0:a7:84:6a:da:2a:61:df:58:72:8a:
a3:75:7d:60:f3:ed:2e:1e:1b:c9:8e:df:14:b6:57:cf:15:a2:
08:92:6f:0f:6d:c0:b0:af:ee:e5:ba:2d:fb:83:84:0d:dd:ee:
9c:58:0f:17:0d:75:34:f8:b8:b9:d8:c4:31:3d:c2:7c:62:66:
29:19:c2:ce:dd:c7:5d:71:b6:34:3f:e5:92:ad:9f:f9:cd:9a:
ef:95:2e:ec:88:1c:e0:eb:7a:2f:27:b6:16:04:ff:8e:a2:b3:
f1:93:37:6e:d1:a0:71:64:4b:a9:64:62:0d:a9:f8:1b:12:ab:
9b:69:b5:26:e7:52:2e:51:a1:1f:11:4a:1d:6a:75:34:37:9a:
64:e7:21:2f:63:f4:8c:7d:55:5d:17:02:cc:32:2a:1d:b9:bf:
4b:c5:10:1f:c2:f6:6a:18:25:8b:b8:c0:94:55:4e:67:cd:7f:
7e:b4:bc:eb:47:c1:4e:69:44:c2:18:c8:16:0a:c6:19:6e:a0:
6c:db:5f:2d:ea:a1:8f:c9:26:12:30:ed:a3:bc:05:ba:c8:b6:
af:6d:97:c0:fb:49:be:2f:dc:01:0f:67:95:43:65:68:1d:70:
7a:74:b9:08:6d:3e:80:ab:6c:85:77:b3:5e:c7:df:5f:69:4e:
25:7b:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:56 2026 by rpki-client