Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa
File: 4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa (raw, json)
Hash identifier: cu/zDXWSSW8MxBMHXj2zihmMYpKeTnn+6PKnhld6YtE=
Subject key identifier: A9:C4:0D:07:6C:50:13:D3:AB:E4:0D:B9:AB:1A:C5:27:9C:C1:5D:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E326615DB0B3FC828A85E8BA2B373288CEDDA71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa
Signing time: Mon 10 Aug 2026 01:00:33 +0000
ROA not before: Mon 10 Aug 2026 01:00:33 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:32:66:15:db:0b:3f:c8:28:a8:5e:8b:a2:b3:73:28:8c:ed:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:33 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=69a623b746b08bda6abe9d4c53c2e1a354b1a22636daac9cbf0e17b449d60258, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:fb:ab:b5:78:62:04:39:fa:90:c7:10:8f:
bc:fb:b1:bd:b1:70:25:66:ad:cf:25:a4:0e:a1:3b:
13:e0:78:24:f9:92:bd:86:da:73:2a:df:dc:b8:a0:
71:fa:7f:22:a3:51:59:fd:c1:c5:21:ff:a8:d0:6a:
c6:f0:dd:9a:61:71:90:fb:e6:7d:31:b7:8b:e9:3d:
28:26:6f:75:72:5f:82:90:9d:b6:42:5f:87:27:d4:
0b:a1:8d:82:22:77:12:a6:33:d9:53:0d:e3:fd:26:
3f:67:fc:81:e2:dc:5a:08:f9:10:94:18:3e:4b:8b:
69:6e:7f:b3:bd:66:f0:d2:38:5a:43:3e:d1:a1:fc:
91:ce:19:4f:39:fc:78:99:2d:5a:e6:7c:e4:0f:b7:
ae:5e:36:85:f3:24:8b:cf:56:76:1f:91:99:7b:53:
d3:05:16:31:9d:e1:11:ea:42:d0:12:8a:7e:ff:f7:
fb:ec:e0:73:ae:ff:ba:4f:81:d0:45:94:d0:e9:c7:
bf:7b:af:db:18:66:02:32:e4:17:f9:79:be:71:29:
4c:7d:ee:0b:86:8c:da:e9:02:1e:2f:be:21:bf:29:
14:6f:49:7a:06:a3:b5:8a:c5:cb:d2:33:91:e0:6f:
d6:65:79:1f:73:1a:b5:5c:4d:ef:a7:f3:34:24:ee:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:0D:07:6C:50:13:D3:AB:E4:0D:B9:AB:1A:C5:27:9C:C1:5D:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a2ea2d4-68ad-4fb5-b224-eca22adcaf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a000::/40
Signature Algorithm: sha256WithRSAEncryption
3b:9c:e7:bb:d5:13:68:43:17:83:aa:e8:c4:fe:78:29:5e:0b:
21:b0:77:7b:09:1f:8a:9a:10:5f:ce:d5:f0:e5:38:b2:9b:e8:
08:8c:71:7c:85:bf:7f:09:f6:46:35:0d:73:68:a5:c4:54:e5:
07:dd:14:fa:69:d8:bb:4f:12:9e:11:02:91:6e:e7:01:46:7e:
17:da:34:2a:c3:00:10:01:fd:f0:cf:15:0f:db:e6:38:dc:d7:
ae:2b:1d:1b:3c:a6:79:5f:f1:15:e3:ad:b9:2e:65:79:b5:e4:
e5:69:43:d8:76:11:27:15:31:42:e3:8d:25:88:f1:e2:2c:03:
68:e1:45:ea:f3:5b:ae:e9:bc:b1:5e:94:10:a6:f6:b6:04:fd:
86:0f:50:d4:60:9a:ca:66:32:5e:32:3f:d3:0d:b5:91:d4:47:
42:2a:29:99:98:f8:aa:10:64:6b:51:cf:65:f2:ab:2d:c9:19:
3a:eb:eb:7c:fe:7b:37:6a:f7:e2:3e:8c:4c:12:bc:98:c6:01:
34:35:ec:04:cc:29:b9:24:d5:ef:9b:58:f0:7c:aa:00:ef:33:
31:22:34:ff:d8:be:23:a8:0b:c3:82:06:53:22:02:48:34:19:
42:80:33:a5:38:60:8f:a7:bf:89:a6:bc:df:ff:a0:7e:e2:51:
61:a7:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:44 2026 by rpki-client