Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa
File: 58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa (raw, json)
Hash identifier: o57Cv+uSV4cNAwhU+W0O40WkrKOwvJQtiKZ+nidzJUM=
Subject key identifier: 3E:EF:E5:05:96:48:23:81:1C:64:09:53:BB:A0:8F:F5:F6:4F:FB:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CC9B357389B6AE39C057B429B81F1C3554454A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa
Signing time: Fri 07 Aug 2026 05:40:25 +0000
ROA not before: Fri 07 Aug 2026 05:40:25 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c9:b3:57:38:9b:6a:e3:9c:05:7b:42:9b:81:f1:c3:55:44:54:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:25 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6e83372287161c0ec77f19c4a5a861b008958466207ea6105c28037388e6341d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:2b:ec:56:52:f7:98:94:e1:da:cd:b5:5d:
6f:97:52:76:f3:a6:31:4b:03:c0:a0:21:c7:d9:e8:
55:88:9f:de:29:59:05:1e:79:a7:45:ea:82:26:fd:
00:fd:1e:03:b8:80:16:ab:92:18:10:7e:2b:d3:b2:
cd:84:03:9f:c6:60:bd:77:e4:59:bb:50:e3:d6:da:
7b:de:60:6b:2b:d6:32:64:34:91:00:2d:bc:3f:71:
3e:89:db:b5:0d:a4:bc:62:7d:c7:1c:26:df:af:52:
09:ce:bf:2b:fa:bb:fd:1d:c4:6d:11:0b:49:fc:5d:
05:1f:9a:74:30:bf:38:01:40:d6:0f:2f:73:70:28:
7c:8f:d2:6c:7e:3f:b4:49:83:db:a9:d0:d2:56:c3:
62:d8:5e:21:89:ac:8d:59:6a:ef:81:93:7a:58:7f:
63:5d:24:d0:e2:32:5b:8f:69:5a:f9:e7:60:23:d4:
72:c8:7f:e2:f5:ac:2d:22:61:dc:ef:52:c0:0b:70:
f6:52:84:28:d5:24:66:e1:6d:76:fa:a7:46:16:7b:
ef:de:16:e4:d9:65:e8:2e:61:2c:99:68:05:cd:bd:
54:a0:75:ab:9a:10:ee:75:cb:dc:c9:5d:be:da:5f:
68:72:10:92:75:59:f4:48:b6:ce:f1:c6:d7:40:99:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:E5:05:96:48:23:81:1C:64:09:53:BB:A0:8F:F5:F6:4F:FB:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58557a89-b431-49c3-bc0e-d49e2d4c79d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:2040::/48
Signature Algorithm: sha256WithRSAEncryption
04:8f:4e:5f:1b:39:81:ad:af:f0:2b:79:d7:52:a1:55:f9:7f:
73:20:c5:f7:3e:89:07:15:ed:05:5e:e0:5b:2e:f3:dd:f5:2c:
e4:0b:9c:62:75:0e:4e:39:7e:c6:52:da:0a:96:f0:61:7a:f2:
2c:53:eb:1e:77:62:25:59:08:3e:84:56:8e:d7:f7:be:c5:2a:
de:a4:59:8c:47:27:b5:91:71:65:28:4f:b0:16:56:13:79:2c:
8d:65:4e:47:a8:6c:40:c6:00:64:b3:9f:1c:6c:84:a3:d3:d0:
09:fe:47:c8:24:38:a9:89:6c:d7:08:66:3e:ff:8f:5c:c5:0e:
32:56:21:ce:6d:a0:50:d3:18:db:00:ff:c6:a6:1c:09:dc:e4:
85:ff:3c:cb:a8:04:9f:8c:78:ac:05:c2:0c:71:bd:06:c4:c5:
cc:ad:df:79:95:de:4c:15:fe:2e:4b:bc:81:43:bc:e4:27:5e:
6f:ca:27:a9:21:cb:2b:31:5b:8a:9c:8f:c4:34:a1:d4:69:be:
31:b7:32:07:93:67:b0:70:0d:76:e8:3a:3e:15:fb:4a:ae:16:
20:44:33:b0:b0:24:bc:72:70:8f:c5:18:00:33:e8:58:79:42:
6c:99:d8:f3:68:9e:8b:0a:76:db:14:e4:76:f6:f5:e7:f2:ac:
67:ca:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:42 2026 by rpki-client