Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53ea7bf3-f9ab-4c06-bef3-b3df57ffbbb7.roa
File: 53ea7bf3-f9ab-4c06-bef3-b3df57ffbbb7.roa (raw, json)
Hash identifier: gZXLD4e1T/3ZQO582+HaXeP76dyUmG96J59wi2KS8Vg=
Subject key identifier: 3E:F7:4D:AB:81:6F:8E:9F:1A:62:8A:AA:41:0C:4B:50:4A:B5:6F:5C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53AB16619F88785765579816BE604540A6063EA5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53ea7bf3-f9ab-4c06-bef3-b3df57ffbbb7.roa
Signing time: Wed 09 Sep 2026 15:12:37 +0000
ROA not before: Wed 09 Sep 2026 15:12:37 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ab:16:61:9f:88:78:57:65:57:98:16:be:60:45:40:a6:06:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:37 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=e382ea821ea77206637463ca87d0612819c4909a9854e236b8684db0f3ad71fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:04:fc:0f:b4:d3:6d:97:41:65:48:b5:81:
20:b3:0f:44:68:62:58:af:d5:69:f7:63:85:ea:ac:
cf:c3:97:b4:0b:d2:c7:23:d4:19:1b:5f:3c:a6:ca:
88:6c:da:20:12:a9:97:af:ad:cc:30:5a:fd:4d:79:
4a:4c:25:d2:eb:55:b1:c2:93:7b:1c:78:8f:fa:f5:
89:dd:9b:4b:a2:c6:f8:00:4b:33:f9:d4:ca:7b:79:
08:43:fa:86:b3:f2:22:15:0e:17:37:8a:4a:42:62:
dd:ff:f6:c3:6b:b5:27:d8:39:3f:b4:a1:35:19:48:
99:f7:53:10:cb:6a:65:3e:cf:e9:35:de:cd:30:7d:
c9:9b:01:ca:43:15:d0:68:a0:7e:14:f3:01:67:35:
7e:7f:cb:96:cc:b9:52:0b:d3:78:63:07:ad:69:66:
30:3b:c5:3a:61:be:01:d8:b1:b4:c1:83:0a:2c:08:
5a:1f:21:3a:ad:08:e1:de:83:1e:df:05:a5:89:5c:
c4:50:b4:e6:79:2d:ac:d8:81:15:3a:97:52:89:c0:
3c:ac:43:fd:67:7a:49:31:d3:d2:a7:f7:be:b6:7b:
58:a5:fa:3a:d1:ce:a6:dc:ba:e6:1e:19:d2:1a:56:
f7:ca:a4:23:8b:7e:33:c0:be:48:31:cd:2e:df:ff:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:4D:AB:81:6F:8E:9F:1A:62:8A:AA:41:0C:4B:50:4A:B5:6F:5C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53ea7bf3-f9ab-4c06-bef3-b3df57ffbbb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4880::/48
Signature Algorithm: sha256WithRSAEncryption
50:5f:b2:c7:1f:5b:58:d4:3a:a8:63:85:05:6f:ba:70:17:34:
6e:4f:ce:f3:04:9a:ba:00:51:9c:01:f3:9b:c4:8c:e1:83:37:
8b:3c:49:b8:9f:0b:ea:3f:d5:8a:60:61:18:ea:e9:08:1d:45:
29:05:10:e3:c3:d5:d2:2c:70:f4:80:85:45:25:bd:30:01:8c:
61:d7:07:08:39:c2:3b:bc:94:0c:3b:e5:c9:39:4b:b5:33:e3:
57:1d:ac:e8:05:4b:9b:38:16:3b:06:9a:c0:92:9f:14:1a:75:
a3:05:57:13:39:1c:a9:94:5f:d9:40:bb:08:f8:5a:56:12:36:
4c:93:24:73:b2:f9:99:37:0e:d8:75:af:3d:80:46:88:51:cb:
19:b1:31:0d:ed:af:d3:6c:02:ff:1a:64:0d:69:dd:45:98:ee:
00:67:50:41:39:76:73:55:46:b0:05:b9:6f:0e:d2:6d:22:24:
d0:db:9a:d7:83:29:47:e7:1a:0a:59:40:d1:67:53:c7:59:ee:
55:7c:94:f1:7c:c8:75:4e:70:5c:2e:9f:a1:cf:7e:93:92:b2:
f7:b4:5d:4c:3f:58:02:c4:d3:94:b7:22:e7:28:0f:54:24:15:
8a:bb:94:f1:9e:e0:7e:e3:3e:60:40:09:fd:a8:31:41:66:46:
94:09:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:35 2026 by rpki-client