Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
File: 4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa (raw, json)
Hash identifier: NK/6SmnLLHySk3pa38yiwnZt7h3dwCzxz385n48ziM8=
Subject key identifier: 07:21:C3:B9:C8:AE:A2:35:F5:83:E1:6B:BF:C5:44:A3:E1:F4:E2:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7150CEF33D8F0FF4E5E2AB0D928B9966B409C404
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
Signing time: Fri 07 Aug 2026 05:31:09 +0000
ROA not before: Fri 07 Aug 2026 05:31:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:50:ce:f3:3d:8f:0f:f4:e5:e2:ab:0d:92:8b:99:66:b4:09:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=dcf3f0d50bffa461aa01ba205a7a1c5cc7483b51553ce455c63300a6e2570b36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:c4:c2:2f:f9:32:0e:dd:cf:fd:c7:61:31:
7e:1b:16:5c:ff:70:90:82:b8:10:0a:3e:b8:4d:ed:
1c:f0:86:05:ee:33:ea:e7:50:17:c9:79:db:2e:36:
fe:92:6e:d0:a1:23:51:e3:6a:69:84:36:e7:e9:4d:
11:87:fa:93:84:db:7f:80:f0:9a:bc:f6:16:80:25:
96:27:33:3b:e3:71:68:d3:08:0b:d0:49:d6:92:b7:
13:39:07:7b:e7:39:86:5b:5c:07:05:8e:54:6d:18:
c3:18:be:c9:8c:2b:83:88:4b:b2:db:bb:c2:0b:a0:
c7:65:88:3b:8e:31:7c:80:11:20:bf:e8:76:1d:ed:
92:d5:b0:ce:df:fe:0b:cb:cc:23:2a:b2:1a:7b:16:
35:82:6c:ea:05:17:02:6c:0d:ac:9e:86:c0:92:2d:
af:a4:31:26:e0:f2:f4:d7:36:3b:00:2e:44:4d:f2:
57:06:4e:3c:da:fb:33:7f:34:ac:8f:da:e6:05:d4:
17:31:09:45:44:0a:91:f1:fc:a5:66:24:66:ce:6c:
17:46:f5:79:7f:95:63:b1:61:f4:a1:91:6c:19:a2:
be:64:a6:f8:b4:d4:3f:9e:16:26:86:55:92:d6:d1:
37:c9:45:9a:ee:47:07:95:71:16:54:22:fd:fb:e0:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:C3:B9:C8:AE:A2:35:F5:83:E1:6B:BF:C5:44:A3:E1:F4:E2:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:400::/38
Signature Algorithm: sha256WithRSAEncryption
98:50:c6:93:3a:26:84:88:a6:22:f8:da:dd:ce:d2:d5:f1:3b:
57:52:e0:f9:97:dd:21:8b:d3:5e:c9:ac:e2:96:01:c9:2d:97:
09:5e:19:18:6e:43:68:63:96:ab:c2:7f:34:82:b8:43:58:d5:
1a:fd:4c:5d:0a:d0:a8:a2:27:d9:86:ee:ac:eb:09:41:ca:74:
e7:cf:0f:c8:8b:dc:36:fa:e9:b0:8e:88:4b:5c:43:04:05:99:
4d:be:d4:c3:7f:f2:a6:e0:f3:05:3f:a8:74:5b:56:d8:3f:05:
0d:a0:00:a9:e7:be:ec:91:ae:ba:33:fe:3b:ed:5c:06:f0:57:
ed:af:f7:00:84:ed:7d:25:f7:90:6b:fd:d7:24:0d:83:96:2e:
1b:89:0f:d6:17:36:3b:6b:33:18:09:50:56:25:de:4a:4c:08:
12:2f:5d:21:84:5c:94:97:bb:da:0f:a1:98:9f:bd:92:74:d5:
dc:a0:5a:16:ca:4e:3e:ca:4e:99:f3:c5:6d:8b:45:e8:98:9f:
2f:9c:a6:7b:ca:55:da:d6:36:b7:65:65:82:06:15:97:cf:56:
b2:54:11:08:44:6f:a2:f6:4c:de:26:c7:34:62:9d:26:d7:42:
54:85:a6:27:78:13:1a:9e:f7:9e:4c:af:73:92:02:7e:b0:2b:
4a:dd:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:50 2026 by rpki-client