Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa
File: 4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa (raw, json)
Hash identifier: 0tEIjRURVVx/wWGGrSRonE4Zq2SmNI6JitVGoiYcQS8=
Subject key identifier: 5D:DD:04:34:25:77:3B:B0:4D:E9:85:3F:04:EC:DA:D7:78:C0:71:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D132766C7293CBD28D0CEF2B1698DAE84354C70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa
Signing time: Thu 10 Sep 2026 02:40:12 +0000
ROA not before: Thu 10 Sep 2026 02:40:12 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:13:27:66:c7:29:3c:bd:28:d0:ce:f2:b1:69:8d:ae:84:35:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:12 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=c36bc80af5891f636ffe6299b1c7af993b9cb5b2c1db089f7f4449f0356e3a83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:14:c0:40:d8:cf:d6:71:02:4b:7e:29:55:
36:1c:19:83:fd:b2:58:9c:f3:97:29:4a:7c:70:a7:
59:6d:a6:27:9f:87:4a:a0:32:3b:52:72:e6:9d:44:
8d:fc:c8:53:c7:a7:15:1c:b3:0c:ae:77:54:d4:22:
4b:d0:44:ce:8e:bf:17:94:0f:d3:08:4a:c1:ff:26:
ea:6a:cf:e8:4f:f0:17:5d:2d:79:f8:45:63:f0:40:
80:cf:a1:5f:f3:b8:1f:35:2a:5a:2d:ec:52:17:88:
72:30:b4:00:20:b1:f6:da:cb:fb:4b:87:3c:f2:65:
3b:46:c5:21:8e:a9:47:e4:2e:8e:cc:7e:c3:1b:5c:
72:71:b1:a3:4b:f6:c9:ea:cf:3a:ab:bb:05:5d:3e:
3b:81:2f:37:26:ac:ef:69:71:4b:7b:12:4d:f3:aa:
fd:55:8c:eb:d4:3d:ce:8f:49:36:58:e7:94:3a:f0:
a1:46:4d:b0:18:08:b9:b8:96:bf:8c:c7:65:e3:2e:
75:b1:d1:da:cf:d3:69:3a:57:ac:b2:01:24:ff:ad:
67:54:09:af:1c:7d:ee:fa:07:87:7a:e0:3f:c2:6e:
ff:45:88:5f:75:1d:0a:57:3d:1d:df:7b:c5:69:ff:
2d:23:3b:5d:23:1f:cf:73:21:71:3c:15:1a:64:0d:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:04:34:25:77:3B:B0:4D:E9:85:3F:04:EC:DA:D7:78:C0:71:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:c080::/48
Signature Algorithm: sha256WithRSAEncryption
80:b4:2b:fa:4a:76:fe:df:40:2f:53:bb:3e:00:7c:24:85:0b:
8b:81:40:9e:b4:0b:00:53:13:5f:69:14:fe:b7:c6:23:dc:e3:
e3:89:39:c3:59:8b:0f:01:1a:4a:62:cf:3c:b5:f2:18:1f:6e:
c7:0d:f0:3e:ab:5f:6d:41:6e:b8:d0:6d:bd:8f:2f:66:72:20:
42:8b:d8:05:b9:e5:9a:e6:eb:1e:d3:4f:8e:ca:9f:93:39:41:
2f:eb:a8:fa:c8:63:70:a6:6b:13:29:fa:48:c4:39:32:59:de:
5f:cb:38:69:e9:99:05:db:ba:b6:dc:f2:20:7f:96:0a:4b:09:
33:29:c1:a4:54:97:69:95:c0:2d:9e:8b:71:77:83:81:0e:06:
cb:66:c2:09:36:a3:e4:6d:b3:28:b8:24:f3:ff:db:d5:d5:24:
bf:02:76:5e:0e:ac:4c:ca:43:cf:7d:a0:06:8d:50:dc:da:2f:
00:b2:ea:ee:87:8f:ed:49:0f:7c:ce:2a:b9:9d:f3:89:df:fa:
17:74:c1:1d:a0:e7:5e:08:7d:ab:33:61:76:ce:89:44:ae:0d:
27:7c:61:18:65:36:e2:ba:f3:ee:37:4f:fa:53:38:20:b1:a3:
29:64:3c:72:28:2d:76:d7:c3:ba:d8:8b:90:ed:23:cd:8f:41:
ce:6e:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:45 2026 by rpki-client