Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
File: 4aa6172c-f263-4645-8d7a-40a15aee233f.roa (raw, json)
Hash identifier: dHrS07CvO0TZBHFRvMN1DSGLQET7HEqjDOanlzan+Kg=
Subject key identifier: EE:15:23:D7:B6:5D:8E:23:BE:AC:F2:1B:9A:82:A3:18:7A:18:73:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68A49601CE29F607999E3A194ADAE559881618BD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
Signing time: Fri 07 Aug 2026 04:51:00 +0000
ROA not before: Fri 07 Aug 2026 04:51:00 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a4:96:01:ce:29:f6:07:99:9e:3a:19:4a:da:e5:59:88:16:18:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:00 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=af92d5a80bc543cbd9d72c87cdc0fdf0b86991b9dd276319040ceb67bb519389, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:bd:3e:51:80:3a:cf:9e:42:ff:4b:73:a6:
ef:77:22:6d:95:61:ec:83:48:c5:21:b1:56:30:a6:
f8:73:ba:b6:a9:a7:72:64:79:f2:4b:ed:e8:bf:6f:
fd:6f:73:f1:c5:13:5d:4c:4b:09:88:52:0f:12:fc:
91:11:e7:7d:5a:9b:5a:ad:d2:f1:25:a2:3b:a6:2d:
97:62:0c:6d:0a:55:75:9f:af:35:e5:b7:1a:70:da:
8d:2c:88:d1:e2:14:df:78:ca:e1:de:0e:f8:5c:3e:
94:61:5b:77:82:5c:6a:2d:92:f2:70:ce:01:f5:86:
99:c5:28:79:88:ac:7b:a2:0f:f8:d8:4f:cd:0b:8b:
3c:8f:f8:40:c1:eb:62:02:f6:5f:39:c6:c6:51:24:
fa:93:7a:54:64:04:48:de:25:85:36:7b:25:f3:57:
96:1d:98:73:49:84:ab:8b:e4:9a:7d:9b:5c:b6:a2:
14:aa:a2:19:bf:22:71:55:da:bd:30:85:ff:6f:a2:
50:cd:db:af:ed:ed:f1:f6:6c:70:f7:23:68:0d:fb:
b3:2e:d2:3d:ff:10:c3:fc:6e:25:24:c6:ca:fe:71:
d9:6c:5c:d3:00:0d:e5:4e:2a:29:96:43:86:b2:63:
0c:db:9c:45:54:72:5d:ea:63:80:4b:7a:ac:25:b1:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:23:D7:B6:5D:8E:23:BE:AC:F2:1B:9A:82:A3:18:7A:18:73:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa6172c-f263-4645-8d7a-40a15aee233f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:8000::/40
Signature Algorithm: sha256WithRSAEncryption
37:d2:ff:fb:72:1e:07:db:50:1b:7d:1d:ab:e0:7d:13:2c:82:
4e:00:3e:65:9b:84:17:08:b9:e4:b9:8d:c5:fd:b3:b8:bd:93:
8b:03:05:d1:49:72:46:25:5c:30:b0:09:54:b9:44:4e:cc:36:
14:17:c0:8b:96:a8:09:94:4a:0d:83:de:f6:c2:cd:62:9c:fe:
79:09:c5:73:20:26:b6:91:d3:da:d1:b4:55:54:68:09:e2:00:
41:af:49:78:e1:3a:ed:1a:57:f8:99:99:27:84:75:1a:14:be:
7f:94:a2:e4:2d:5c:2c:32:14:fa:17:c0:f6:5b:4b:6d:d2:41:
7f:b0:72:33:d8:7f:2e:f5:69:79:05:9f:22:6d:2b:2c:03:eb:
05:68:54:d2:6b:fb:f5:3c:b7:36:98:95:8b:fd:e7:35:c7:05:
dd:dc:64:2f:d1:41:93:e0:23:d1:20:92:7c:5c:d5:1e:e8:ab:
4c:0f:ee:d9:9b:5a:5d:9e:29:57:e3:26:e5:a1:c6:cf:0c:f3:
06:0b:b5:51:69:13:d2:3a:d5:fe:d9:82:18:10:0c:c1:5c:5a:
4a:bc:73:87:0e:03:bf:d9:a2:27:d2:37:93:1d:ae:3b:55:46:
a7:0f:72:4b:8c:42:73:46:88:df:f8:1d:f2:1c:35:ba:35:4f:
27:96:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:21 2026 by rpki-client