Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ac6b308-ece7-4f5b-86a4-76d0b3c9073d.roa
File: 4ac6b308-ece7-4f5b-86a4-76d0b3c9073d.roa (raw, json)
Hash identifier: 8cNrdi0bQkAY6GmODCjrXSOLeclwJDbst4b7/tUuO1g=
Subject key identifier: 01:1E:91:0E:A7:60:89:A4:74:F1:AF:89:2F:03:93:B2:6C:B5:F3:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6555841C98505541BE76B272F113C30A82291E75
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ac6b308-ece7-4f5b-86a4-76d0b3c9073d.roa
Signing time: Wed 09 Sep 2026 16:15:18 +0000
ROA not before: Wed 09 Sep 2026 16:15:18 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:55:84:1c:98:50:55:41:be:76:b2:72:f1:13:c3:0a:82:29:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:18 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=09e84c4641277eb8c8ec3ead4332cf7a955e5a92c99a6890fc63eb3007f94fc4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:70:43:81:93:d0:4c:69:6f:56:6d:e3:3f:
4b:d7:7f:ba:5e:e0:26:df:81:5b:2b:53:33:e2:18:
15:a4:61:a4:c4:a0:02:dc:25:89:b6:eb:c3:ec:10:
63:7f:55:a0:1f:88:7b:4b:3f:68:ce:fd:07:db:40:
93:65:96:cf:ae:08:c0:52:62:15:13:b6:51:53:f9:
fe:d4:0f:b5:9d:c4:0b:ab:59:33:9d:eb:91:80:7a:
01:42:42:72:e6:4a:06:12:6a:f0:ba:bd:34:d6:c2:
09:a4:89:2c:49:61:21:e0:88:ac:7c:2a:5b:b3:33:
22:5a:3f:02:26:d7:7b:9f:66:f1:ee:7a:a2:ce:b2:
81:61:c2:77:9d:f5:9f:16:31:bb:2a:21:6d:25:f5:
94:03:ae:97:7c:ac:c2:aa:ec:0a:72:11:9d:ed:2e:
9e:d8:87:49:29:f8:4a:52:17:10:69:56:2d:71:53:
bb:b9:ac:0d:1d:5e:26:38:40:e4:e3:e1:8e:91:42:
b9:c2:52:1b:2d:af:a2:44:cd:ed:6c:71:8d:12:58:
80:e7:f8:5c:e2:bd:d0:d6:b1:da:88:fc:d4:15:d4:
ee:da:3e:a7:89:00:ef:56:1b:90:3b:47:4c:8a:a6:
0f:3d:fa:bd:91:8c:2f:a8:e2:f1:1b:58:28:57:68:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1E:91:0E:A7:60:89:A4:74:F1:AF:89:2F:03:93:B2:6C:B5:F3:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ac6b308-ece7-4f5b-86a4-76d0b3c9073d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:8800::/40
Signature Algorithm: sha256WithRSAEncryption
74:07:8e:79:5b:7b:59:39:fa:aa:ce:35:12:9f:f5:82:f0:af:
5e:40:fc:cb:37:05:8f:e3:3c:13:6c:9e:0f:08:b3:e5:84:8a:
5c:fa:64:b4:6f:fc:90:be:45:85:f6:49:01:35:29:4a:26:62:
37:cf:86:15:a7:2a:41:e9:d4:e3:68:32:e7:f7:b4:df:6b:a0:
1e:05:02:ee:80:9d:75:1d:07:6c:de:fe:34:91:17:15:3b:b2:
d3:16:cc:a2:83:b6:2b:36:45:73:0c:5d:20:d9:f0:d0:a7:63:
92:bd:ac:3b:4f:b8:77:20:34:52:d0:bc:20:e6:93:39:65:e2:
73:2f:48:44:7e:8d:2d:9f:8a:e4:b9:63:7c:88:f9:b0:c9:51:
de:f7:30:21:f0:94:fb:e2:27:d2:33:e5:e5:61:aa:10:18:86:
fc:18:a9:74:97:ac:f4:8c:50:18:05:17:e9:16:b6:99:2f:7b:
d2:7d:57:17:6a:3a:bb:5a:77:e2:28:de:5c:19:ae:04:ba:2f:
af:fb:3d:95:e0:11:b1:a6:68:b1:95:73:76:5a:9e:b9:25:82:
c8:c6:f8:52:a1:c2:4b:1f:cf:e1:19:90:a6:b5:b0:32:35:3e:
23:03:a4:4c:72:6b:6b:cb:82:3e:e3:85:45:af:b1:eb:35:4e:
fe:40:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:16 2026 by rpki-client