Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5326a6e7-9660-4ae8-a80a-996863be862e.roa
File: 5326a6e7-9660-4ae8-a80a-996863be862e.roa (raw, json)
Hash identifier: EzZrEeMlAb7jCIKguPNZ7lLlYvtT1l5SO3jkNfgjRDQ=
Subject key identifier: DE:A7:D9:19:0B:55:D5:75:21:8F:D5:77:74:AF:03:4E:E8:2D:84:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19D835400EE38E20C5E21EFB05512E320DAE39A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5326a6e7-9660-4ae8-a80a-996863be862e.roa
Signing time: Sat 08 Aug 2026 00:00:08 +0000
ROA not before: Sat 08 Aug 2026 00:00:08 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d8:35:40:0e:e3:8e:20:c5:e2:1e:fb:05:51:2e:32:0d:ae:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:08 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=3b2aeaf79f8c585ac1437fb9cec31ebb36cd5e696f2d30510bf8a953868bec2c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:e0:93:b2:66:63:ea:e4:22:61:58:57:fa:
d2:03:bd:86:20:6e:d3:f2:ec:c7:f7:1f:a1:e9:a5:
08:67:7e:55:5b:13:e7:2b:8a:4b:8d:61:38:fe:00:
4b:14:a0:44:2a:e8:09:e4:43:bb:a6:c7:a4:ea:fa:
3e:bd:3e:b6:d0:17:7d:dc:6c:c9:1a:48:cf:9c:b8:
b3:cb:20:d1:24:ff:69:6b:af:e0:84:bb:38:8e:9f:
ef:8f:ea:8b:64:13:30:d5:be:47:02:9d:1f:28:0d:
36:8f:1c:aa:a8:11:7e:f3:f9:d1:e1:37:ee:8a:3b:
2d:1f:2b:b2:de:96:20:bb:d0:8f:33:1d:6d:a4:72:
cc:dd:fe:12:77:cf:df:ff:42:80:c3:b9:f1:f9:a7:
98:d0:a7:e2:6e:42:5e:c9:6d:9f:da:f2:76:66:34:
7c:a7:8f:f3:f5:64:50:63:a6:3f:fc:2e:9c:6c:8e:
1e:b8:9e:b7:22:a0:c0:d4:f9:60:3b:40:7f:02:53:
45:b8:16:bc:b5:d5:28:2e:31:1d:9f:86:8b:9c:df:
9a:79:87:9d:f8:f1:09:c7:58:5d:b2:9e:f2:14:7e:
92:38:dd:be:f6:6f:30:fa:c9:a6:ed:c3:27:74:9d:
83:55:39:99:d4:52:bb:53:ac:86:20:83:97:be:51:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:D9:19:0B:55:D5:75:21:8F:D5:77:74:AF:03:4E:E8:2D:84:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5326a6e7-9660-4ae8-a80a-996863be862e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:93:68:9a:29:2d:5e:ae:e2:a3:90:35:6d:cc:6d:e5:6c:f7:
6c:2d:a6:3b:6d:8c:e6:fa:44:d7:b1:21:fb:47:c2:b3:cd:1f:
dd:96:94:98:a8:f5:05:c5:2d:95:d2:db:9f:0c:87:1c:e8:ea:
a1:9c:e3:52:7d:41:6f:90:4b:fc:fd:76:95:de:06:ce:93:d6:
95:a5:3b:ea:de:10:2e:62:99:2c:10:1c:b9:d7:19:9f:09:59:
1e:23:73:1b:4e:79:d0:4c:dd:2f:97:22:be:d6:46:9e:04:1f:
62:b8:3d:73:05:a0:14:76:62:64:49:ba:57:54:bd:55:d6:72:
38:32:f4:11:58:20:d5:8e:1c:be:d4:1d:e3:94:ce:cb:1c:84:
34:ad:0c:e4:aa:5a:16:39:9a:1a:da:7f:6f:57:66:6b:40:5f:
e2:07:24:63:d3:a0:fe:ac:77:7b:07:dc:c5:3d:ec:b5:ed:ba:
b3:70:4f:be:22:ab:7c:13:18:86:85:32:12:32:43:05:1d:6e:
1e:fd:f7:98:0e:0f:2c:dc:dd:13:c1:fa:64:27:2a:25:b8:c9:
ac:d4:c2:ed:08:17:22:c0:8b:0c:ae:78:96:f3:ee:b0:35:cf:
09:dc:45:7c:91:66:9a:3c:c9:8d:ba:ff:67:74:2a:27:d3:80:
33:ef:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:04 2026 by rpki-client