Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c7968ef-1015-430b-a859-7169a7bf960b.roa
File: 4c7968ef-1015-430b-a859-7169a7bf960b.roa (raw, json)
Hash identifier: o6eoy8HHgfOBLGAiVzlEy8/COaArigxjWALpl20Xucw=
Subject key identifier: 6F:23:98:15:A5:E2:ED:6E:31:60:B5:5B:3E:4E:BE:E3:5E:06:CC:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A62D78F0F34B67583E1B827AC5B461B76DAC7E4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c7968ef-1015-430b-a859-7169a7bf960b.roa
Signing time: Wed 09 Sep 2026 16:15:15 +0000
ROA not before: Wed 09 Sep 2026 16:15:15 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:62:d7:8f:0f:34:b6:75:83:e1:b8:27:ac:5b:46:1b:76:da:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:15 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=5b3d509a79485009592f1bd880f6fa2b0b15c374818f0518a3f2982eac4f6cf1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:80:d6:9b:8d:67:4b:22:cf:58:ce:e3:6c:
a9:8d:e9:3d:e5:e4:ac:9b:d8:df:69:ed:62:a6:61:
2d:c0:17:fb:1b:dc:27:9f:e4:20:34:94:d1:ea:0d:
44:ae:5a:9a:2f:43:f9:ca:28:10:e2:6a:08:53:87:
fe:7f:db:92:3e:72:bf:c1:ec:c3:bf:79:30:34:03:
6d:d8:bb:61:60:00:33:aa:cb:ed:4d:70:ad:61:25:
1f:08:48:55:c9:ef:9b:71:b4:e6:9c:9f:76:16:2f:
d0:c0:33:32:b3:c7:89:67:06:a3:39:a9:ed:99:75:
da:c0:93:cc:f2:4e:18:62:b4:c7:c4:cd:24:51:d4:
bf:a0:de:ce:cf:60:09:89:3a:91:e7:2d:f6:7d:e4:
1c:ed:fb:d6:ce:56:2f:c4:c7:eb:71:d3:44:5a:5f:
ab:b2:12:31:1a:56:a1:de:e6:48:33:dc:fd:4b:4d:
3b:25:66:c1:ec:25:62:6b:b7:6b:b6:a0:c7:18:21:
bf:45:f4:ba:2a:f8:4c:e3:2c:28:56:2b:49:fc:81:
5e:eb:e8:3a:dd:eb:aa:e5:60:5f:7e:b9:a6:c9:74:
56:0b:5f:cf:68:a5:10:55:5d:64:b5:4a:61:14:ce:
97:6c:4a:dc:b2:90:c7:91:73:34:4c:8c:80:b1:09:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:98:15:A5:E2:ED:6E:31:60:B5:5B:3E:4E:BE:E3:5E:06:CC:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c7968ef-1015-430b-a859-7169a7bf960b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:4800::/40
Signature Algorithm: sha256WithRSAEncryption
b3:fc:ea:5b:d9:f1:a0:4e:15:ab:46:7c:77:d7:6c:08:08:3b:
e3:b1:87:66:3e:5c:5c:97:06:3a:1d:79:4a:bd:bf:2a:7f:7f:
36:a5:75:9d:b4:63:b0:61:ce:0e:46:03:f2:4c:e0:82:46:7e:
5f:c6:5b:2c:3e:83:00:a9:94:ca:17:92:44:db:eb:10:18:8e:
ae:8c:47:b8:5e:83:8d:cb:2f:6c:4d:3d:3e:c5:25:d4:3f:99:
44:35:ac:cc:93:04:d4:6e:2d:79:bf:1b:37:f0:ab:bd:ce:6b:
dd:54:6d:3f:e1:00:b4:e8:4f:9d:d8:c1:0f:6e:98:f0:ab:ea:
7f:a3:7f:e1:b7:fe:b0:7b:ef:1e:af:92:cb:06:d3:88:bb:31:
a7:7a:8c:00:7a:0f:2c:1a:ab:4c:1b:93:ed:35:a2:4d:c8:3a:
9d:30:eb:01:15:db:a6:9d:ff:a8:1e:c4:b9:1d:7d:58:58:4f:
f1:42:84:97:8b:4f:d7:83:52:d7:42:16:36:4b:3c:0e:48:ab:
c4:b2:6e:c5:23:e9:df:7c:76:18:e9:f1:21:31:88:93:7a:b6:
6b:49:c0:9d:f5:7b:dc:ea:98:33:99:ee:db:15:af:5c:05:a8:
f4:6f:be:15:ec:1f:39:19:1b:72:a8:c5:6b:d8:d2:eb:a5:88:
82:8e:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:21 2026 by rpki-client