Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49ef0075-fa35-4b59-aca2-7f9bdc58149d.roa
File: 49ef0075-fa35-4b59-aca2-7f9bdc58149d.roa (raw, json)
Hash identifier: gD/j6kp+r6O9X6f4rJi0FCevJ7wCVqxSWSxH4TLS+3w=
Subject key identifier: FC:A0:22:02:2D:7A:2A:73:14:28:AF:7E:66:CE:87:F4:BC:CA:23:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21A915180B39573742448187DB2631A180AD9F9E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49ef0075-fa35-4b59-aca2-7f9bdc58149d.roa
Signing time: Mon 10 Aug 2026 00:50:28 +0000
ROA not before: Mon 10 Aug 2026 00:50:28 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a9:15:18:0b:39:57:37:42:44:81:87:db:26:31:a1:80:ad:9f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:28 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=c816a07f050e323ffd2c5591abedbd3929160cf24c5131512c751266a0704f01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:da:3c:82:5d:47:04:1e:36:cb:c8:72:16:
98:29:09:b4:2f:8f:2e:ad:e0:44:ca:ba:5c:8b:1e:
49:0e:f7:9b:bb:9a:4a:1a:47:1c:a8:e7:6e:d2:d7:
c0:ab:88:bd:19:fc:0e:ed:12:9a:04:67:7d:53:38:
30:35:10:68:8f:85:7b:18:5e:3c:68:9f:06:18:f8:
e4:ca:57:8c:94:9c:ca:e1:49:e8:c4:c9:3e:b3:21:
41:eb:9a:c1:3d:8b:44:a7:99:2d:bb:0c:b4:5c:ad:
01:3c:1e:e8:cf:f3:ec:90:d5:f9:9e:f9:32:e1:4f:
84:75:2f:2e:d0:c3:65:2f:56:b0:df:79:b1:0f:74:
3b:02:7e:22:79:b8:07:0b:52:10:10:0d:52:dd:cb:
03:be:40:0d:29:d4:94:78:8b:76:78:47:c8:a8:00:
6f:9d:cc:e4:8b:d9:4a:16:e5:f4:c2:24:fb:bf:23:
68:85:5f:ab:b9:0f:65:6a:7d:32:7c:45:2d:a9:c2:
05:c0:98:02:1f:7a:25:55:00:75:fc:a1:70:d9:11:
5a:14:12:30:6b:7c:95:cb:ec:ba:7f:96:58:c8:a6:
ab:d1:ad:67:73:ab:4d:56:6e:43:16:6b:e7:dc:44:
1f:28:85:45:70:9e:ec:df:5d:0a:5d:c2:fa:5a:96:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:22:02:2D:7A:2A:73:14:28:AF:7E:66:CE:87:F4:BC:CA:23:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/49ef0075-fa35-4b59-aca2-7f9bdc58149d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:5000::/40
Signature Algorithm: sha256WithRSAEncryption
88:58:6c:79:a7:c5:6d:41:b9:08:aa:96:2e:1c:3e:1f:b7:b3:
8c:2d:bd:52:e3:ab:5f:72:7f:75:87:29:02:4b:4e:0b:1b:e5:
fd:d0:e7:b7:ca:12:e7:01:28:aa:11:15:a1:81:fc:c1:4e:48:
bf:f8:6c:ef:89:04:2f:ae:fb:e5:61:c6:63:9b:9f:3d:9e:9e:
98:d0:98:7a:51:39:6a:39:2e:0d:83:e4:cd:de:85:e6:42:d8:
2b:bf:3c:63:22:70:7d:1d:28:07:db:c8:32:d8:25:4a:b4:d9:
d1:d3:1b:e3:03:35:0d:b1:aa:e2:54:3a:53:17:e9:e7:9f:aa:
30:e5:1d:ff:8b:db:b6:62:86:85:7e:ee:12:7d:cb:b5:4d:72:
c5:7a:b8:63:e5:60:c2:f5:e1:ac:5d:7f:80:9f:3c:cb:6e:fa:
c7:a8:61:82:0e:ad:c0:eb:73:98:6d:90:91:f4:63:07:f4:26:
f3:d6:db:f7:ba:f4:6b:a6:e6:f5:4d:f2:21:a9:b8:0f:cc:f0:
b2:a9:0a:27:aa:c8:f4:5b:52:e6:bf:3a:cf:56:53:ee:13:75:
41:35:9f:34:b6:ce:6a:e1:70:7a:d4:41:78:1c:f6:62:6a:f3:
8d:82:1e:81:49:18:e4:d6:69:f3:04:17:83:ae:51:7b:b4:e2:
5e:50:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:34 2026 by rpki-client