Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
File: 58699fff-50fe-46a7-8e85-38dbafe34c1b.roa (raw, json)
Hash identifier: FDZ3L0xr8WlsHo9hjy+Ocg2nNhOWgiopJT2rXJdLhqg=
Subject key identifier: 3F:B6:D9:02:EE:E9:BF:32:86:FB:3A:69:1C:09:3E:A2:59:FE:FC:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34AA8DEED075FE88573B7A10617BB730473EA8ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
Signing time: Fri 07 Aug 2026 04:30:39 +0000
ROA not before: Fri 07 Aug 2026 04:30:39 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:aa:8d:ee:d0:75:fe:88:57:3b:7a:10:61:7b:b7:30:47:3e:a8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:39 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=67ff66343cddfcb9fd1ace7546e576fd0f7c4fcdd0c005ee7beabab052f40a8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:d3:07:a2:ec:03:1e:a7:b2:33:d6:a1:04:
e9:9c:0e:43:5f:40:23:8d:1b:d0:31:82:84:4b:8c:
a1:b7:99:29:35:15:b8:a3:ed:fc:5c:40:0b:62:ca:
11:3a:d1:61:be:70:57:ab:79:ed:8f:5a:1c:8e:57:
ab:96:22:56:b6:03:c2:00:ef:9f:fd:35:8c:f4:c6:
3c:a3:93:13:96:2b:48:44:cd:2d:ef:9e:e0:c1:15:
5d:25:a4:5c:91:a6:b1:63:69:36:8c:7e:fc:f7:d6:
97:8f:ee:2f:f8:d4:34:d4:ff:20:95:1e:2e:6a:60:
bf:bb:27:8d:2b:35:d8:7d:80:cf:46:bc:c0:23:38:
e5:f9:ec:a4:66:57:15:f0:eb:9a:97:1d:3f:13:b3:
ef:8a:be:ba:2d:7d:34:10:60:d1:c2:f5:20:81:c0:
cf:91:b2:64:25:a3:e5:25:73:31:16:43:3d:64:0b:
22:ef:d9:3c:37:43:c4:d1:9a:4e:8b:05:9d:47:27:
23:06:01:b2:38:f3:da:37:b5:99:f0:80:8c:31:89:
32:72:99:1c:9a:0e:cc:9f:0f:db:c1:f7:05:64:16:
4b:da:48:4c:bd:48:96:d2:2b:81:b4:2b:b5:ec:ef:
40:d5:37:27:4c:2a:ff:f8:77:1c:af:c1:3d:de:8e:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:D9:02:EE:E9:BF:32:86:FB:3A:69:1C:09:3E:A2:59:FE:FC:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
58:7f:28:50:9e:89:23:5c:47:4a:db:b3:a0:e7:e1:e7:1a:ba:
22:1c:ed:a6:09:67:1c:c7:8c:e5:48:61:7b:d4:db:76:d7:ad:
5b:8d:a8:cb:d9:ed:bc:8a:8c:8c:dd:7b:15:0c:62:cb:81:a4:
31:9e:97:c1:32:cd:99:d8:e4:18:52:6b:8f:6a:71:36:10:72:
2d:6d:c7:8f:12:35:e3:41:3e:4b:b0:1a:46:62:b8:97:b7:4d:
2f:21:16:3b:3a:ad:ce:fd:3f:91:8e:1a:6f:73:57:b7:7e:79:
1d:ce:d2:f6:74:17:eb:05:fc:e3:e3:a8:29:71:48:2b:ff:05:
4f:4b:09:ad:a5:06:18:3e:8d:ff:88:d9:0c:38:a7:84:c2:a5:
ce:97:1e:e1:bf:90:0c:dc:fe:df:b7:fd:93:e2:23:53:9f:8c:
95:11:3b:3a:6b:33:b5:8e:14:e2:11:13:cd:15:a6:3c:48:f5:
a8:9b:46:2f:5d:25:f6:5e:c7:e4:b4:f0:ef:36:2a:1d:0e:85:
f3:c1:ef:02:42:4f:ba:bc:51:2e:75:f6:58:a9:11:5a:2f:a2:
e6:e1:cc:f9:77:e2:b3:2a:7a:50:59:22:6e:c4:f5:2f:dd:84:
02:1b:eb:89:a6:f4:41:da:39:49:c0:f5:4f:82:12:09:9d:a0:
c7:36:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:19 2026 by rpki-client