Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
File: 4cf83881-74f7-4033-977b-362e08e8d6d2.roa (raw, json)
Hash identifier: OOuw8BTHuL1RtFpXz7bAo7AVgn7QXgdHJKiO7mGjkvo=
Subject key identifier: 79:F2:10:A5:87:DC:F0:6B:49:CF:24:3A:69:78:3F:74:F2:F7:55:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C1A97ABC09908CFB3A611A73931E8A71771555F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
Signing time: Wed 05 Aug 2026 02:10:08 +0000
ROA not before: Wed 05 Aug 2026 02:10:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1a:97:ab:c0:99:08:cf:b3:a6:11:a7:39:31:e8:a7:17:71:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:10:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=0a8053b4c6d878169cadc8b74e755337115165c477292f09c76ca4e57082f864, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:c8:f0:74:51:71:42:67:c6:53:d4:fc:9d:
19:74:97:26:93:3c:59:b1:1a:19:38:50:2a:c9:49:
ba:17:87:29:6b:8f:eb:19:21:30:58:5a:ea:a1:c2:
5e:34:4e:49:4e:d3:8b:8c:ee:f2:73:10:c6:19:2f:
c3:60:fa:e6:4d:47:fa:7d:ad:8a:29:83:57:b7:f2:
4d:b9:f7:fa:95:80:e9:21:c2:89:15:9e:7f:f4:c7:
75:cd:47:55:16:60:f6:b2:bb:ba:b6:2f:29:a6:24:
93:b4:16:88:77:cf:e2:48:29:0a:f6:f6:9f:4c:8b:
7c:5d:ff:3a:d7:d2:ed:3e:4a:b3:40:2a:46:96:0a:
d8:09:ef:23:aa:51:da:7c:21:0f:c9:5f:22:ed:9d:
2c:36:86:95:bd:50:57:cf:11:75:12:a0:f4:4d:cb:
47:ca:3d:f5:db:c8:7f:83:c8:66:7b:11:8b:a5:8c:
d7:19:b1:50:7f:82:d7:df:25:55:03:6b:98:72:1f:
95:9c:3c:f4:df:39:ea:2b:00:fd:ae:77:41:91:a5:
20:05:32:72:cf:b9:5d:8b:a9:83:b0:d1:b0:f6:37:
e4:a1:77:21:a8:16:8f:7c:f1:41:0c:91:ae:2f:62:
1f:ff:af:09:f5:68:23:bf:32:30:3f:36:08:78:d9:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:10:A5:87:DC:F0:6B:49:CF:24:3A:69:78:3F:74:F2:F7:55:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:840::/48
Signature Algorithm: sha256WithRSAEncryption
9b:18:05:01:4a:e5:98:aa:a3:d5:87:d4:83:97:ed:76:b7:f6:
fe:a7:dd:25:fa:7f:5d:a8:28:da:ed:04:0d:79:15:fe:1d:b7:
9e:3c:41:dc:5c:68:7c:2a:73:eb:59:4e:f9:1a:d8:26:fc:e6:
c6:b0:f7:d8:f1:97:8d:e9:00:68:4e:52:03:f8:6d:a3:e2:e5:
e5:21:c1:6a:fc:c4:cb:a2:19:1c:51:27:45:b4:31:c8:bd:e7:
5b:cb:12:36:aa:58:1f:dd:1a:47:10:c6:eb:63:85:ea:4b:7a:
ba:ac:c1:e6:bb:9c:61:5e:3d:ef:bd:b9:f4:45:ff:71:9a:9e:
c7:82:2c:53:d0:1f:5d:17:03:01:83:71:51:77:12:39:2b:f5:
44:9f:37:0a:b0:8e:31:be:82:d4:08:7b:4d:6f:69:94:e1:34:
2a:aa:52:19:e3:81:86:cc:a3:88:45:6b:63:f0:09:0d:d8:07:
f2:c6:2b:36:75:ef:f7:d5:6e:58:74:95:10:5d:c4:6c:17:9d:
d9:1b:40:52:7c:38:bd:5d:8e:fa:f8:b5:7d:7b:64:99:65:4b:
51:07:60:68:1e:79:55:c4:dc:7a:0c:63:74:0c:5a:0d:2d:ce:
c4:01:7a:34:92:2a:b9:b2:3f:15:a2:18:15:80:30:72:0c:08:
bc:27:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:24 2026 by rpki-client