Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54c143de-4c15-4c52-8cfa-bb92011dfa84.roa
File: 54c143de-4c15-4c52-8cfa-bb92011dfa84.roa (raw, json)
Hash identifier: FdBo8c1HiztF4y4H4TWhD4MwovGSsovuzDbRQb40PAI=
Subject key identifier: EA:00:16:56:D1:04:98:8C:23:78:70:4A:73:90:C2:68:3A:F9:F1:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C67874E313B47C6DEDCCA5EE1AC017DEB47352C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54c143de-4c15-4c52-8cfa-bb92011dfa84.roa
Signing time: Wed 09 Sep 2026 16:12:54 +0000
ROA not before: Wed 09 Sep 2026 16:12:54 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:67:87:4e:31:3b:47:c6:de:dc:ca:5e:e1:ac:01:7d:eb:47:35:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:54 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=0662c2b90934c92138bd4d660804910a2ed79ab865b8073191dfd50b1e18ada6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:9a:33:97:f6:3d:22:fd:aa:50:95:49:43:
57:b5:81:1f:3b:6c:3f:f3:b0:cc:aa:21:95:14:57:
ec:63:a1:6e:21:bf:bc:ed:99:a1:96:18:54:f2:ef:
0d:4a:97:c5:31:6a:d9:de:ed:a4:dd:d8:92:53:dd:
4f:c7:9a:a9:b2:80:44:18:e9:35:3f:be:89:7f:b6:
d3:82:22:1d:55:d0:52:ea:e4:40:57:95:5a:bf:ae:
58:5b:79:0b:ab:2d:12:a5:c1:1e:24:c0:fc:56:dc:
b7:87:ab:bd:8b:58:97:ef:d0:31:67:62:ea:88:93:
49:62:1e:ca:d0:7e:b5:fe:ea:86:24:a2:fd:7f:37:
86:f1:a2:9c:83:85:23:0e:35:8a:0a:f4:e5:33:d3:
35:3a:b0:ec:6f:45:87:e0:e2:3b:4c:19:b9:01:62:
e3:4f:0f:bb:ac:23:8f:46:e6:7e:f2:82:ee:6a:26:
b7:58:6e:e7:83:93:f6:d3:c3:84:48:fd:d3:27:2a:
e5:bd:e3:80:47:3d:69:a7:77:14:0e:77:02:8a:6c:
98:1b:c2:a4:61:9a:91:52:52:79:48:e3:b2:ee:c2:
99:c1:6e:0e:fb:d0:c8:91:aa:bd:a6:a1:83:85:a1:
be:fd:c6:41:1d:e3:5f:42:f8:52:5d:88:0e:98:44:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:16:56:D1:04:98:8C:23:78:70:4A:73:90:C2:68:3A:F9:F1:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54c143de-4c15-4c52-8cfa-bb92011dfa84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:1000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:ba:73:c4:4d:7b:6f:50:66:01:b1:08:23:77:0c:e3:f4:79:
2b:4e:69:f4:90:a4:1d:12:31:e5:4d:3b:f7:d3:0e:ff:c9:94:
2b:68:d3:02:29:1e:8f:f6:6f:94:2f:17:b1:55:2c:bf:26:91:
9b:bd:61:64:7f:fc:d8:85:d8:84:18:a7:ae:74:04:ee:ca:c4:
8e:11:a7:04:39:89:6f:e0:2b:a4:4d:e7:61:f7:93:60:8b:4d:
56:5f:35:09:18:2b:8c:81:15:63:9f:41:45:0a:8b:ad:d2:21:
56:91:0b:12:79:16:7b:43:d2:75:07:50:b0:8a:5f:3b:20:5f:
f6:98:25:84:42:fa:4d:97:55:87:a7:6e:e5:10:2b:e7:89:9f:
13:0d:ca:4e:53:7c:8f:bc:95:7b:ad:fe:68:c1:43:34:0a:d4:
21:32:3f:df:37:6b:e7:e8:56:05:6e:72:1d:d4:38:21:f9:69:
2a:4a:a1:3d:82:b6:b4:6a:a7:b7:30:0b:50:88:6b:27:92:ae:
df:78:fd:86:3f:64:c4:3d:12:d0:16:fa:ab:82:a7:84:c5:27:
a7:3c:9e:60:23:e2:77:8d:37:5c:ff:5f:55:a0:58:de:75:dc:
56:6c:2c:3f:ce:47:58:8b:96:15:06:fb:5c:8b:8f:4d:14:05:
de:53:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:57:34 2026 by rpki-client