Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
File: 51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa (raw, json)
Hash identifier: FQPd/hSkbHvyKsb7Uhxq+3mTfsS6bYAbMmDz0rwzCO8=
Subject key identifier: FE:53:68:7F:0A:B6:CF:61:92:66:87:C8:73:6A:BB:FF:5E:8E:31:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28626A26CB11F18008BC0ADF142D6D65A196C511
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
Signing time: Fri 07 Aug 2026 05:30:15 +0000
ROA not before: Fri 07 Aug 2026 05:30:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:62:6a:26:cb:11:f1:80:08:bc:0a:df:14:2d:6d:65:a1:96:c5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=18a9f0f2724ed17d4b3df4f52f593b35fc7a79b8e7f40f0b683ce05823ced959, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:33:47:01:f0:03:e0:1c:77:8c:dc:ad:83:
4b:4a:a1:fb:24:4d:ac:d7:ae:0e:8a:15:2e:62:7d:
c3:54:07:c6:9d:f3:d7:72:19:86:6d:47:75:b9:72:
6b:1f:9b:d6:da:c3:64:b7:5b:87:81:65:69:fe:68:
f0:fa:91:3f:c0:5a:5e:3f:e1:cc:5e:da:42:b2:17:
68:67:81:93:6d:a6:a1:ba:5a:89:9f:80:8f:e3:c6:
01:70:bf:15:7a:db:86:64:a7:4b:3c:8e:39:d2:19:
95:b2:25:93:ae:26:9c:10:9a:e1:bb:c9:49:b7:a8:
bc:a7:16:ba:ed:09:e6:8e:e6:49:b1:e2:d2:d3:96:
35:b7:4c:de:11:fa:a5:b8:cf:c6:52:30:bf:e0:b4:
72:02:a7:cc:6f:24:62:eb:2b:07:c0:fc:c0:ff:65:
cb:74:7c:84:f6:02:b5:82:82:d8:23:fc:33:a6:b8:
64:fc:57:95:c9:e6:68:f2:aa:5a:80:65:79:3d:7b:
44:8f:23:2b:e7:92:14:3a:8a:14:50:14:26:af:f7:
ae:40:3e:dd:50:07:da:c4:40:3f:f3:a8:fa:2e:6c:
06:86:3c:b7:08:54:89:3c:63:9c:a2:e1:0a:6b:04:
b6:9c:55:bb:61:b3:39:04:97:e0:9d:91:97:14:41:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:53:68:7F:0A:B6:CF:61:92:66:87:C8:73:6A:BB:FF:5E:8E:31:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
56:65:06:03:9b:ef:02:fb:73:96:61:d5:c5:1f:9b:0e:5c:b8:
e6:d2:88:a2:a8:ea:f3:1c:bf:5e:27:75:d6:1b:35:e9:ff:ef:
d6:90:79:0a:fa:2a:db:46:17:c3:ee:2f:47:11:c4:aa:0d:93:
a5:99:d8:62:45:c6:f3:46:b6:44:13:b7:d3:24:09:59:ae:b3:
f3:8e:98:15:df:81:69:4c:9c:27:17:0f:ac:c3:3a:03:0e:06:
53:f5:bb:b2:97:08:8a:2d:2a:2c:c5:a6:14:52:10:2a:d0:da:
0d:e3:d8:67:b2:3a:27:96:b8:99:56:1e:83:69:4e:9d:11:2b:
4a:86:e7:c7:ec:ff:49:72:ed:dc:54:85:bb:97:51:6d:e2:3e:
ea:4f:0b:e3:c1:a5:17:b3:f5:a6:42:fa:d7:1c:e2:40:8d:e7:
7a:08:9f:cc:ad:d9:77:de:c6:84:4a:b4:2e:10:e5:2a:e1:1d:
d7:7f:c1:ce:b1:12:38:2d:81:2d:ae:4f:67:f9:b2:35:ee:6b:
0c:5f:91:c5:ed:31:66:0b:92:ef:19:74:31:39:fd:ba:3f:c6:
f2:33:70:9e:bc:34:30:65:0c:64:3c:4e:0a:96:a5:f3:b6:b1:
e4:3b:15:7a:ba:72:37:5b:0f:bc:cd:f8:73:fe:32:2d:8a:9e:
35:80:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:48 2026 by rpki-client