Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f5d86b-4894-4bc7-bf99-e825306ed26a.roa
File: 53f5d86b-4894-4bc7-bf99-e825306ed26a.roa (raw, json)
Hash identifier: VlRf0Yuut9DiuGHPeI2taevp7vSDW4YqTIUUraFIjuY=
Subject key identifier: B5:C5:2F:18:19:2A:72:E3:57:99:7A:EF:A0:1D:84:1B:9C:7C:45:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 101F6E5A013CD02ADF0184ECFE31D0B68B5B7F2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f5d86b-4894-4bc7-bf99-e825306ed26a.roa
Signing time: Wed 09 Sep 2026 16:12:53 +0000
ROA not before: Wed 09 Sep 2026 16:12:53 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1f:6e:5a:01:3c:d0:2a:df:01:84:ec:fe:31:d0:b6:8b:5b:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:53 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=3c082c353ec94b22c87625053386b69c7e4059198f72a50e4bf5a82f01dfb31a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:b5:95:1b:03:53:ba:05:4b:1b:ca:25:d4:
45:1a:42:a3:8c:d3:ee:e9:75:f0:3a:5d:3e:68:0a:
da:b5:3b:60:06:44:d9:a4:9e:fa:74:9c:f5:4e:5d:
31:92:31:ac:bd:90:1e:50:60:59:75:93:82:b8:95:
ac:29:a1:bd:bd:e2:45:e4:4a:98:e7:b8:c9:35:9a:
40:31:f9:3b:a1:b8:1c:dc:b5:a1:0f:a0:dd:e7:f6:
9c:75:2a:44:03:60:91:4f:c4:87:f4:40:0d:9b:06:
b9:f8:92:33:0f:24:67:92:d6:05:30:b6:3e:04:d3:
53:35:a3:57:32:80:6d:d8:96:0c:0b:09:e6:08:3e:
2c:6c:9c:be:f0:9b:f3:44:60:4f:56:f0:28:6d:f1:
cd:48:78:84:51:50:6e:70:03:ba:9e:6a:6d:3e:78:
a7:8d:31:e8:f4:12:6b:54:65:a8:5b:cc:7e:c2:ff:
fa:e8:e3:81:b4:1a:c4:18:cf:af:2e:9f:eb:a1:db:
5c:af:51:4f:61:b6:43:2a:9d:e9:24:67:72:c8:5a:
fe:10:46:fe:34:47:8f:86:45:6e:e1:eb:8a:ea:18:
5c:bb:54:8f:fe:00:af:44:13:c4:89:7f:0d:dd:41:
97:63:58:f2:18:00:3f:9b:b6:6b:3c:38:00:6d:09:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:2F:18:19:2A:72:E3:57:99:7A:EF:A0:1D:84:1B:9C:7C:45:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f5d86b-4894-4bc7-bf99-e825306ed26a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:4800::/40
Signature Algorithm: sha256WithRSAEncryption
26:b6:6d:a5:d7:44:a1:79:c0:c9:66:4e:ec:9e:fd:ef:70:0f:
27:a7:32:5d:22:0b:60:9a:b8:c2:5d:fb:22:8f:7c:d1:f5:6e:
4c:1d:e0:bb:e7:f3:d4:c0:b9:25:98:3f:02:a2:9d:fb:b6:4c:
6e:49:3c:a4:87:82:1e:7d:8c:9c:55:81:b3:2e:37:95:e7:99:
f5:57:ef:47:5a:5b:32:91:4d:e2:7b:34:63:bf:f3:35:bc:84:
65:12:b2:68:34:2f:9e:33:4a:26:e4:dd:4a:f3:e3:2b:5c:d2:
c8:bc:59:10:be:09:55:c8:4b:70:fe:88:57:be:b1:c6:5b:86:
9c:66:42:a9:33:fc:96:78:e7:54:ce:1e:c4:9b:3e:41:48:07:
3e:8b:b8:24:f9:f3:5f:06:51:99:16:fc:75:b3:15:d8:94:c3:
7a:e9:b6:cc:d4:bf:bd:c6:64:29:1a:ee:ac:93:5b:68:39:1b:
88:82:fc:2c:04:48:88:cf:ea:ce:e0:c1:49:4e:e0:fc:f3:81:
52:7f:14:41:80:a2:cb:71:65:35:6b:78:29:03:6f:a4:f4:dc:
46:0f:8d:20:ca:53:84:4c:5b:e3:4a:a7:3d:cd:a7:a4:0f:80:
38:94:a2:4d:3d:90:6b:38:fc:a4:f1:ec:df:a1:b0:68:cb:40:
55:c8:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:28 2026 by rpki-client