Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
File: 4a3909fa-da3d-4cd8-918f-7755304d49d1.roa (raw, json)
Hash identifier: kLV3CjNsVfB9jv2wROsc0jryuzPVHZrAwZRmIsnnMUI=
Subject key identifier: 11:DF:11:5E:55:BA:5F:42:95:37:13:1D:A6:A2:04:6D:8F:4C:1D:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 695AC658AB4095ED5E8B44F67B211648D4078118
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
Signing time: Fri 07 Aug 2026 04:30:34 +0000
ROA not before: Fri 07 Aug 2026 04:30:34 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5a:c6:58:ab:40:95:ed:5e:8b:44:f6:7b:21:16:48:d4:07:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:34 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e700861cd46804e3f7a4728a6b8faf526f396b0b1ae5078e7dc016d82aa6521f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:2d:92:ca:1c:37:87:6f:64:c4:05:61:00:
b5:45:72:4b:12:34:2e:77:ed:7a:40:23:bc:98:97:
e3:8f:15:a2:3a:7f:e6:5d:20:83:4f:61:b7:0a:9e:
25:4a:ed:0d:e5:b1:bc:d9:aa:ae:98:85:93:7a:c0:
f3:62:c1:47:26:6d:67:55:2e:f5:a8:c2:f3:a9:0f:
fa:09:99:0e:b1:ab:07:11:95:2b:c2:80:4b:31:54:
92:6d:4a:9c:55:22:f6:59:a9:6d:8b:08:56:6b:22:
45:05:d9:ef:79:95:94:a6:88:a6:35:95:5e:c3:b8:
2f:3e:71:6c:2a:f7:33:47:81:d9:67:86:8b:75:79:
f2:2e:e2:83:19:f4:aa:58:84:42:c8:e4:b2:6d:8f:
f1:29:28:f1:8a:cd:6c:95:c4:98:68:9c:ae:a4:1f:
ae:20:2f:76:78:e7:44:7c:bd:53:6d:8f:95:42:cd:
45:d8:1d:50:ab:1c:a9:c7:e2:b3:89:d2:a9:6d:b0:
ff:5a:fc:bd:ad:0c:77:62:d2:9d:b4:3c:19:fb:1b:
b1:36:6e:62:17:ef:d1:97:41:b6:87:db:cd:49:e1:
8f:6c:f8:9e:23:a8:e7:f4:dd:28:53:4e:bd:4f:95:
e8:e0:00:de:56:af:99:ce:eb:58:fc:de:62:c1:7d:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:11:5E:55:BA:5F:42:95:37:13:1D:A6:A2:04:6D:8F:4C:1D:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a3909fa-da3d-4cd8-918f-7755304d49d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:9c:14:4f:77:fd:f4:29:7d:e9:79:5a:c4:e1:13:43:77:9c:
48:16:5f:f6:ff:7d:be:ef:a2:ad:e7:8d:19:6b:f5:60:27:9e:
73:1e:4c:d2:03:3a:dc:99:80:12:d7:f4:47:d6:5b:17:49:da:
6c:d4:73:1e:51:b3:77:fe:ac:ad:bb:d5:a9:1a:ca:18:7f:f9:
9e:6d:23:91:b7:47:9e:0a:91:0e:4b:5a:81:8d:e2:f7:11:8f:
0f:86:15:73:85:dd:f8:2f:48:c8:64:de:c2:50:12:53:e9:88:
88:6e:7c:d7:b0:ff:48:0d:05:05:18:ca:61:f4:fa:05:20:06:
45:e5:d9:4b:9a:fe:11:99:df:45:a1:44:b5:d7:1f:57:c7:9a:
c5:10:ad:dc:ab:39:e8:b6:d7:72:cf:46:f8:79:d1:95:93:36:
4d:df:88:e5:2c:2c:ee:02:68:be:d6:d5:25:e8:b5:d7:f3:1b:
72:93:ae:e4:d3:9b:ed:fc:64:fc:de:d9:52:27:a0:32:dc:a5:
3d:ad:9d:69:f9:41:7e:bf:83:14:4d:f2:ea:a2:8d:76:2e:93:
27:5d:aa:70:0d:3e:32:b4:83:eb:09:14:04:77:71:1a:d4:f7:
a8:4f:6d:31:33:9d:e5:ed:d4:fc:1d:71:38:50:15:fc:a0:a1:
6f:8c:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:04 2026 by rpki-client