Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
File: 4ee4d823-9869-449e-9541-10a647125e4a.roa (raw, json)
Hash identifier: s2y4+b85/7XMJvqd1vwGhpvZdCq+eZP5h5+XGOiHWVk=
Subject key identifier: 4B:F5:5B:EC:AF:E9:84:B0:F6:F8:E3:EA:26:EA:E5:84:64:44:3A:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CF876FB3E46D1214B615B52273E765FAF2D661C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
Signing time: Fri 07 Aug 2026 05:30:30 +0000
ROA not before: Fri 07 Aug 2026 05:30:30 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f8:76:fb:3e:46:d1:21:4b:61:5b:52:27:3e:76:5f:af:2d:66:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:30 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bc58cccaf58c76c9a5851f2a3220ddf12ea2a115b57b1f96313228744f963df6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:7d:2d:e7:c9:0e:ee:48:7b:41:2b:5b:06:
74:d4:bd:35:be:a3:2d:91:32:a2:6a:20:8a:f8:39:
82:57:60:d6:fb:a1:b4:62:87:54:87:b4:ea:a3:e2:
5a:74:36:29:31:d3:d5:31:95:23:13:2d:53:e2:5c:
83:1b:29:9e:0b:7b:f3:00:a2:ab:39:31:ae:06:15:
1a:0a:c5:80:82:02:ac:45:d2:e5:6f:d3:0b:c8:1f:
b8:01:65:3f:54:8a:8c:77:6c:ba:2f:b4:c4:8b:85:
b0:f6:1d:8b:80:69:01:8c:80:8f:04:58:a6:0d:e1:
b0:b2:1c:3e:32:56:11:43:d3:30:cd:4c:66:02:63:
d4:e5:4f:0c:73:5d:6f:59:bf:fa:38:d7:06:52:d9:
91:d3:cd:78:2c:6c:a0:5a:3d:12:b4:19:58:fc:b6:
2c:b3:16:7f:41:41:66:1f:33:c1:44:fe:63:b5:7d:
9e:33:1d:e9:bc:a9:98:1f:6e:84:a3:70:d3:7e:2f:
ec:9d:64:7b:0b:71:0f:e9:1b:da:9f:66:81:2a:7d:
aa:c9:8c:1b:be:e2:87:bd:cf:a4:4f:22:ad:56:a3:
bb:c3:fe:1b:79:4a:ca:4b:6e:3a:ca:34:8f:bb:b8:
2a:70:69:4f:04:d7:6e:9d:fc:63:92:98:6b:8f:87:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:5B:EC:AF:E9:84:B0:F6:F8:E3:EA:26:EA:E5:84:64:44:3A:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:d4:16:1b:09:eb:68:84:56:4e:a3:aa:6a:0b:73:06:c4:25:
71:bc:4a:f7:c3:ca:14:46:cd:08:66:f0:91:c3:36:b6:8b:b8:
60:a1:f1:ed:85:3f:bb:cf:8b:8a:d6:74:4b:4f:44:95:4a:1a:
a5:7c:7e:ed:d1:74:95:70:7d:33:ca:c2:05:a6:78:11:a0:d1:
88:04:53:58:50:e0:c9:a0:e2:2c:f1:97:50:19:fb:27:7c:ce:
f5:0f:cd:47:ff:f5:2f:35:37:e8:c8:e1:b6:c8:13:17:11:aa:
89:f1:5b:8f:de:b7:eb:c0:03:96:e9:94:d8:7b:bf:71:ee:a8:
be:a1:c0:14:3e:3a:40:73:76:3a:5a:06:40:b8:99:87:7e:45:
15:36:c4:c3:e7:b9:25:35:f5:87:e9:d5:27:d6:28:89:23:c6:
cf:41:e7:17:9c:52:56:43:78:a0:c3:33:13:bf:c9:2d:5b:08:
70:c9:6e:d7:c2:7a:83:15:d8:9d:e2:d3:91:dd:02:e2:8c:64:
7a:88:63:8e:ad:77:59:72:da:33:3f:7f:fb:fa:b7:b3:b4:3a:
e6:97:88:a8:bd:3d:10:5f:98:d2:0b:85:1a:0d:5d:ef:8f:a8:
6c:0b:58:31:02:86:70:71:c7:38:ee:f1:b6:7b:97:a7:93:c8:
97:d5:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:25 2026 by rpki-client