Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
File: 575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa (raw, json)
Hash identifier: Yjonogb0yA0VSsQz3W+DXPnU9/PSe6cxS5nvageJu7s=
Subject key identifier: D6:28:CB:55:3C:75:70:35:18:A7:20:D4:B0:1B:C7:7B:F7:42:D2:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F1A30FA1D678381FF7548AD2DB533554BF1B8D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
Signing time: Fri 07 Aug 2026 05:10:27 +0000
ROA not before: Fri 07 Aug 2026 05:10:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1a:30:fa:1d:67:83:81:ff:75:48:ad:2d:b5:33:55:4b:f1:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3825045171893bb6542f67a0e6834f2b969bf51c2c751a9035dfc9f8c96165db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:0a:76:75:b7:4e:a3:af:e3:91:43:fc:ca:
ac:c4:3a:a4:51:17:ce:70:92:c4:d1:d9:72:5d:b2:
75:26:b2:1a:ab:5e:49:1d:27:eb:6e:d2:04:bc:8c:
58:ef:4a:c1:4e:53:22:aa:95:77:13:04:6e:e4:41:
cc:4f:4f:dc:51:f7:63:c2:d1:0a:75:46:39:88:ab:
13:77:1f:50:b3:a8:dd:32:e7:59:96:49:db:0c:73:
15:b2:a9:71:a3:22:b4:97:c3:83:9f:12:0a:00:c9:
12:05:eb:2f:9b:3d:e8:e3:4f:9c:cb:2d:c2:18:29:
e1:ad:2c:4f:ef:86:91:28:2f:0c:e7:aa:e3:23:5d:
24:37:3a:6a:55:68:0e:47:ff:50:10:2a:c3:b2:dd:
39:49:e1:48:fe:d1:cd:46:71:d0:63:3d:a4:99:40:
15:74:9f:52:28:07:de:d1:01:b0:6d:b8:e9:35:38:
20:e2:ce:35:5a:6f:83:b6:b8:1b:0f:db:43:0b:18:
84:ea:98:44:22:25:8d:63:1e:50:30:ad:c5:a5:57:
3d:86:61:96:f9:a3:30:c6:79:0d:d8:ce:30:d9:46:
c5:56:5d:3f:2c:47:14:c4:ae:c9:0b:0a:ec:f4:26:
9d:61:cd:ed:25:ab:1a:d9:c5:51:c5:39:34:a8:45:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:CB:55:3C:75:70:35:18:A7:20:D4:B0:1B:C7:7B:F7:42:D2:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:4000::/40
Signature Algorithm: sha256WithRSAEncryption
13:e2:77:4a:0f:87:e1:69:63:c7:76:73:46:dc:09:9d:30:d2:
c4:7d:b6:12:d2:c7:40:e3:3c:cc:ad:78:a6:a1:b0:d0:2c:a7:
6f:5b:e4:c2:12:09:96:d0:13:cb:df:62:c5:5b:01:99:1e:98:
7a:b9:61:f5:e0:56:08:e7:dd:dd:a5:6d:3f:ad:30:94:95:63:
f4:ea:f4:a8:07:ec:16:cd:8c:06:52:4a:bd:ae:af:86:e2:ce:
6c:0a:ff:53:3d:7b:2f:3c:fe:4d:20:6e:14:9c:f4:82:10:87:
01:4f:dd:29:01:e8:fb:35:b8:b7:97:0f:83:8a:c0:ea:e2:6a:
25:72:2c:49:56:e2:a3:a5:a6:7c:7a:96:5f:de:da:fb:69:b1:
c9:2e:ee:ae:ae:6b:42:48:d3:cd:60:b9:3d:b7:4e:d7:4e:74:
8f:48:fe:38:1e:8c:b7:d3:06:14:e8:bf:32:c7:5b:53:e1:9c:
16:7c:eb:77:a5:7a:8a:6f:3e:c3:0a:90:2e:32:a6:38:28:29:
ee:8a:34:d7:61:59:91:3e:fa:42:4e:a9:40:ea:85:c6:95:3d:
11:6e:cc:ec:8d:04:dc:a5:db:24:6e:10:3d:72:b7:d1:6e:a4:
52:91:75:64:dc:87:7a:6c:a4:52:22:37:3f:d0:95:92:51:f9:
fc:7e:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:18 2026 by rpki-client