Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa
File: 515f7e85-9223-47e5-be2b-42ec6a12a88b.roa (raw, json)
Hash identifier: 1Dmn2+sERyCvsIiYGdgZbmDjVuF4H5o6lOvKTuwMNqk=
Subject key identifier: 6A:6C:32:D8:FD:29:70:1C:49:F4:CB:1E:56:77:3E:E5:E5:51:99:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 590DE60D37268CEF1CF90C8AAE54CB70AA65C8A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa
Signing time: Fri 07 Aug 2026 05:00:14 +0000
ROA not before: Fri 07 Aug 2026 05:00:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0d:e6:0d:37:26:8c:ef:1c:f9:0c:8a:ae:54:cb:70:aa:65:c8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ab2bd7452b2a7dccd425201ace00ad2bc5194bb302be5671f95d48c7ad3d7849, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:95:5e:75:72:28:72:26:4a:c3:41:d2:f9:
1e:00:b4:59:81:cc:a4:56:97:cb:89:ca:8d:4e:66:
8e:7f:d3:9f:76:ee:47:75:d9:74:ab:e2:48:b7:a4:
63:ed:97:33:d9:ec:1e:63:24:12:c9:3a:96:bf:fa:
35:42:eb:ea:38:f7:dd:52:52:60:80:ec:85:f9:7d:
1e:94:8b:4b:c4:c0:29:4e:d0:a9:28:90:0e:4b:26:
8e:1e:95:b3:c6:5e:59:a4:66:8c:7e:6d:87:33:84:
0d:27:b5:0a:88:6f:a2:9c:8f:79:9f:59:a9:fa:cf:
bd:70:f0:64:b2:22:6f:cb:09:4d:ba:e0:01:38:73:
dc:e7:29:57:f9:13:60:ac:b6:fb:1b:fa:a3:ce:93:
45:1f:46:68:70:d6:fd:48:75:28:96:7e:68:10:b6:
53:27:78:6e:e4:47:b3:cb:e9:88:a0:7f:64:49:43:
ef:ec:14:f9:51:bf:21:52:fa:6a:a3:11:c5:05:7e:
a0:cb:f5:3a:8f:94:6c:ca:78:ed:7a:9f:69:c3:1d:
be:48:cf:0f:7f:a4:7e:44:14:a5:19:ec:72:62:84:
2b:e3:49:e7:f3:aa:ed:15:38:9a:23:8f:73:bd:9a:
44:d6:e5:5d:00:a7:fd:2e:23:41:53:10:8f:df:74:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:32:D8:FD:29:70:1C:49:F4:CB:1E:56:77:3E:E5:E5:51:99:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:9000::/40
Signature Algorithm: sha256WithRSAEncryption
88:a4:a5:fc:bb:24:d0:17:e6:88:ab:98:c1:30:a9:e8:15:d6:
d2:d8:41:1c:c7:0c:e9:56:1b:e1:07:35:fe:eb:4b:5c:d9:28:
66:fc:65:6c:a3:2d:0c:e4:cc:a0:d3:a0:f6:2c:78:7b:62:84:
a6:4e:d5:ff:3a:c4:3b:4d:b4:7d:1e:ff:68:49:b1:da:02:3f:
79:99:a0:68:c5:30:57:81:e7:87:06:c2:25:af:64:77:78:4d:
11:77:8d:48:4b:ae:81:55:18:04:a5:08:5e:6b:ad:20:44:76:
38:09:ff:9e:ce:01:e0:2a:eb:0e:3b:8d:7c:f4:7b:27:ae:4d:
0d:e9:b2:cf:1b:4d:a1:4e:42:37:da:65:ae:82:10:eb:83:52:
56:63:db:7e:0b:bc:60:c1:12:f6:83:1e:8b:a1:62:68:6a:c8:
db:0a:9b:40:6c:a6:f5:87:09:58:c2:fe:b3:ad:ef:c0:d4:ca:
0c:ac:08:7c:66:28:c0:7e:bd:94:7a:09:37:cc:55:3f:4d:f8:
31:39:eb:93:7f:57:19:f7:04:da:55:0f:e1:28:fe:3e:a8:fd:
6a:8a:f2:80:b4:4e:b9:9d:26:8d:16:86:75:b4:dd:e4:15:c3:
66:96:61:4c:13:d4:90:71:55:a9:8d:1d:2c:7b:a4:c8:10:64:
b5:28:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:14 2026 by rpki-client