Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
File: 57b964c4-07ca-4501-bd01-5cb8936846cc.roa (raw, json)
Hash identifier: PVRv+XgdPyz2+IeAvRDnTz3gDc+ruzlCUoskFz62NCw=
Subject key identifier: 22:E8:CB:85:C6:DE:58:FB:61:A8:7B:69:25:2D:B3:44:57:26:12:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59674D23D9CC7DBD5825EE0ECAC9D021E05BC7D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
Signing time: Fri 07 Aug 2026 05:20:55 +0000
ROA not before: Fri 07 Aug 2026 05:20:55 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:67:4d:23:d9:cc:7d:bd:58:25:ee:0e:ca:c9:d0:21:e0:5b:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:55 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b56cbe62547a23e5190e205aeb07b616d67d34fa5cf7d004ba49c326e1ad9e8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:e6:ac:ab:0c:d0:9a:59:8e:b6:70:d9:ee:
97:bc:42:42:05:12:15:f9:b8:58:89:f4:2c:d4:82:
1d:b8:2b:ae:46:fc:70:05:a8:41:d3:41:e5:1e:3c:
1b:33:c7:5f:7e:78:b5:0e:01:47:5f:ba:1e:84:7f:
3d:5c:40:d9:b7:16:f6:aa:4f:b3:1c:8b:7d:5e:f8:
54:4e:d6:34:59:df:83:ea:b4:88:23:30:db:a3:c9:
f3:5a:1c:6a:9b:1c:43:fb:36:54:1b:9d:2c:ac:15:
11:a0:3d:f3:1e:99:e8:d6:8a:86:8a:e6:e2:9f:4f:
f1:53:5b:00:b5:e7:4c:12:6c:f0:9c:97:30:18:c8:
41:91:ea:5b:33:97:78:3b:04:83:c8:a0:0a:b9:de:
bc:80:a5:18:51:f9:10:4c:1d:ee:6e:11:00:52:42:
53:d3:96:bb:7b:10:e6:b5:2e:54:21:2a:df:0c:ca:
95:e4:3d:42:25:ac:25:bf:ab:32:6f:b1:59:50:09:
06:ef:c6:df:32:ca:ba:88:12:0c:ba:48:93:a5:fc:
57:79:1a:03:b5:9d:ab:a3:97:0f:d3:c6:dd:c8:7c:
c7:7a:b2:73:8c:5d:10:db:4d:a6:2b:17:31:1b:b6:
19:3d:39:7b:75:75:4f:b1:04:15:a0:71:59:15:f6:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:CB:85:C6:DE:58:FB:61:A8:7B:69:25:2D:B3:44:57:26:12:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:cc:50:97:91:e7:8d:83:a5:4f:d6:35:ee:eb:82:54:83:b9:
61:26:3a:f5:0f:e7:37:50:5d:07:c4:f8:21:f2:58:79:94:bf:
2c:89:86:10:dc:15:ca:8e:e5:78:f4:21:0a:79:8b:43:12:ce:
2b:ca:e1:88:9f:d2:ab:c2:f1:4c:7d:f1:49:0a:0d:00:2a:26:
02:48:30:2c:d6:6f:3a:3b:ed:79:57:79:59:26:92:bd:3a:88:
a0:62:ef:62:70:eb:83:35:8e:cb:4e:18:09:fb:91:24:d7:46:
2f:67:09:d0:7a:54:74:ae:28:e5:af:fa:9f:41:86:30:6c:7f:
6c:48:88:b2:27:08:04:6c:46:84:1c:eb:1b:90:11:08:23:f2:
9e:65:96:f7:fb:3f:7f:fa:f6:b5:9c:72:b5:a1:c1:7c:68:da:
31:44:85:c9:2b:5b:69:a6:62:a7:79:24:ea:a5:bf:aa:e7:47:
6f:0d:91:44:a5:3b:91:37:c5:9b:65:0a:ca:71:84:96:51:2e:
54:8e:d8:f4:33:9e:12:95:fc:44:e9:66:26:b3:d2:d8:8d:1c:
b6:07:c3:a7:20:67:67:db:38:a8:79:c5:97:e5:f3:3b:e9:74:
48:22:98:64:2d:5a:b1:a1:8d:a4:dd:6a:8a:32:4e:3a:23:01:
1a:6a:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:22 2026 by rpki-client