Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5533a994-b020-45f5-9140-2d9640829e05.roa
File: 5533a994-b020-45f5-9140-2d9640829e05.roa (raw, json)
Hash identifier: qvMlkWp5U8KCbdsQlo8v45xJNaTFLWNlBo46BJwMOKM=
Subject key identifier: 36:95:39:E7:05:08:90:52:5E:8D:9A:18:66:E5:7D:AC:FC:67:CF:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F432DAB41806323C03DE4EE5882A891668D3BAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5533a994-b020-45f5-9140-2d9640829e05.roa
Signing time: Wed 09 Sep 2026 16:16:34 +0000
ROA not before: Wed 09 Sep 2026 16:16:34 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:43:2d:ab:41:80:63:23:c0:3d:e4:ee:58:82:a8:91:66:8d:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:34 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=d296cecc00f5d3709df63f191e648933213bb88462001cb6a51ef088fed3911d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:12:0f:dc:23:81:79:e9:4d:b4:7d:09:df:
05:77:81:53:0d:fb:28:11:cb:89:fc:ce:78:82:b1:
97:e0:2f:c0:3f:28:d0:52:22:a4:a7:2c:d1:b7:71:
98:d2:e1:6e:df:b2:d3:70:5c:56:46:7d:b1:ea:9a:
8f:91:57:4b:16:18:92:5c:35:7d:8c:6e:92:fd:0e:
9e:8c:9d:ec:d0:8c:9e:18:f6:31:4b:57:60:55:72:
2d:8e:fd:27:93:34:f2:04:d2:74:45:a2:e8:30:0e:
7f:3e:09:86:0b:eb:66:49:cf:47:c1:fb:23:3d:8a:
81:9e:44:48:77:7f:5b:f5:ce:04:c0:54:7f:5f:31:
15:ec:5b:1a:48:7d:97:e4:1b:c9:fa:17:8e:a8:52:
6c:41:95:5d:3a:62:7d:2f:dd:a3:08:bb:75:e1:06:
ff:0d:c4:ec:09:a8:a0:df:92:52:90:be:94:c1:98:
de:56:f5:aa:20:44:39:47:9a:48:3b:2a:d9:73:50:
f8:41:98:f4:e0:fc:55:fd:18:6b:76:b7:3c:23:6e:
68:e8:da:80:8b:30:2b:14:04:bc:f0:a5:ba:20:6b:
89:8e:8e:f7:44:62:12:4c:b9:6b:5b:65:dd:fe:db:
68:70:a6:b1:45:c8:65:85:94:ea:c9:64:27:af:2d:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:39:E7:05:08:90:52:5E:8D:9A:18:66:E5:7D:AC:FC:67:CF:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5533a994-b020-45f5-9140-2d9640829e05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8800::/40
Signature Algorithm: sha256WithRSAEncryption
88:0b:8f:7c:9f:5f:94:fa:58:65:ad:ac:8c:40:0c:59:cc:d1:
58:a6:95:53:93:0d:70:a2:b3:68:d2:b5:fd:9d:35:8c:5e:ce:
8e:f9:64:28:16:54:13:1e:7e:52:1c:b4:92:5b:5f:10:36:62:
5c:26:46:40:b2:f6:fc:7c:63:4f:ca:55:31:ad:6a:52:1a:08:
b3:42:1d:76:ea:d2:cd:1f:2e:74:ba:ea:7b:54:42:e5:9f:f9:
75:d7:d6:d8:c3:ff:97:91:de:2a:c0:93:b8:37:5e:60:d9:ef:
a6:b4:30:96:a5:f2:15:43:49:25:09:61:fc:88:17:b6:b7:94:
ce:45:d8:90:bf:cd:0a:67:f1:31:4f:a8:26:f2:c9:dd:02:62:
aa:20:a6:75:06:ac:4a:d3:f1:6d:d5:82:7c:80:ec:fb:7a:b9:
56:26:2d:28:08:cc:87:68:ae:6c:17:1b:90:4d:e4:f3:5c:8d:
6c:9e:6a:ae:8d:dc:bd:c2:ce:0e:b6:82:71:b0:ed:b8:b4:85:
1a:c5:24:7f:37:d8:9a:73:2e:59:4c:55:6e:93:49:81:fe:0c:
a9:a3:ef:e2:97:5a:0c:8e:26:1c:c4:5d:98:d0:a1:12:36:66:
b1:1e:9c:27:85:3f:49:1f:12:2f:f0:c3:85:0d:20:48:44:71:
c6:82:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:35 2026 by rpki-client