Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56e77a57-14d7-4009-8458-2fe89aefb18e.roa
File: 56e77a57-14d7-4009-8458-2fe89aefb18e.roa (raw, json)
Hash identifier: VFByBTM8DiRuSpcYLyQG3PbmjZsWR9/nEIDW8JASlXQ=
Subject key identifier: 56:FE:FA:0A:9B:B3:95:93:36:96:46:10:32:39:9D:4F:30:44:8D:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 660A9E46103832D5E69A4293081646738FC4BE89
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56e77a57-14d7-4009-8458-2fe89aefb18e.roa
Signing time: Wed 09 Sep 2026 16:15:22 +0000
ROA not before: Wed 09 Sep 2026 16:15:22 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0a:9e:46:10:38:32:d5:e6:9a:42:93:08:16:46:73:8f:c4:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:22 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=b58c9facfb491fdea99394236daa11c08254097706921dadf54f9b6644894ebb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:0b:14:61:ad:3e:bd:01:5f:23:08:45:4c:
6e:0d:29:eb:e0:15:17:c9:1a:c4:7f:57:b8:8d:9d:
3e:e4:22:e9:f5:60:62:98:a5:73:92:03:8e:3b:ca:
50:23:cf:1b:7f:66:32:21:75:01:dc:32:8e:8c:61:
86:1a:4c:8e:16:f8:2b:64:98:f2:1a:de:00:d5:38:
36:8d:8b:49:12:57:a2:b1:74:02:1a:26:38:6b:b6:
74:33:24:d1:d3:29:7f:83:28:d6:e3:ed:2f:35:d7:
09:c8:1a:a4:d6:85:45:bd:5a:cb:a6:1c:fd:cd:d8:
f9:94:cb:70:85:99:1d:4d:fd:51:38:e8:6c:f8:a5:
e7:1d:38:11:e2:a1:3e:a1:ff:26:9c:f3:b0:82:ed:
8c:eb:d1:1f:a3:0a:0b:12:e7:5c:22:fc:70:7d:84:
83:bb:2c:48:7c:3a:05:71:e9:3d:10:57:df:ef:17:
b1:5f:38:09:79:9a:0f:3a:e6:f2:e5:83:0e:ab:59:
57:15:3a:fe:0f:4a:4f:df:d7:6c:2a:88:e3:55:61:
d2:6f:53:1d:3e:59:02:c7:05:6e:bc:72:50:29:a8:
a5:f3:8b:5e:94:9b:87:ba:9b:0a:c8:cf:9f:f2:61:
31:62:20:c2:80:40:b9:09:f1:8f:b1:22:57:71:f1:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:FA:0A:9B:B3:95:93:36:96:46:10:32:39:9D:4F:30:44:8D:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56e77a57-14d7-4009-8458-2fe89aefb18e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4800::/40
Signature Algorithm: sha256WithRSAEncryption
51:3d:06:b2:84:17:fe:a0:98:33:78:17:78:7c:04:b5:a8:f9:
65:b2:43:b3:fa:13:23:f4:b8:4e:e9:5a:ee:89:0f:0f:52:e8:
da:a2:71:9f:df:c2:df:51:58:eb:97:e6:16:d3:b1:ee:54:eb:
6f:88:12:1f:1b:cd:12:5c:4e:19:25:ae:50:b6:f0:9d:54:e7:
8e:98:86:02:82:d4:a2:af:89:9b:58:ba:03:f6:18:e0:fc:a9:
cf:6a:77:97:a9:4f:96:05:86:05:d0:e6:fe:28:bb:76:49:99:
b9:cf:b2:09:d0:c5:f2:e1:4d:0f:25:de:08:12:81:fe:c9:e5:
f5:1d:77:0a:eb:fc:cc:8d:dd:61:7d:e0:cc:74:1a:d3:37:7e:
54:0e:e0:33:51:ae:a6:fc:eb:a6:0c:66:56:26:7c:e9:39:b8:
e2:88:8b:24:55:3b:20:6a:b8:ac:7a:2b:a9:d7:53:9b:25:0b:
bf:d8:ff:a7:91:45:a9:a5:ee:b8:5e:56:f7:c5:ca:88:e0:db:
a6:b7:82:97:b9:39:c5:2b:28:48:02:35:35:a4:94:10:86:3e:
af:18:67:18:ff:c4:1a:c5:f3:84:a3:68:77:ff:ba:65:77:d8:
92:88:72:5d:9e:78:6d:e0:96:38:dd:9c:2c:dc:bf:4a:70:46:
6c:75:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:56 2026 by rpki-client