Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
File: 599e0695-4b67-4a37-994a-8c71d61260b3.roa (raw, json)
Hash identifier: zub2VzufCEDD7JeSaW82HZCXuy5Ltih1CYroNbUcAMw=
Subject key identifier: 24:44:DA:38:FA:18:BA:CF:3F:F6:9E:DD:A1:15:57:31:95:2D:86:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D5ACCF532EF4B7DBC3A00A03CDB7B115907C30B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
Signing time: Fri 07 Aug 2026 05:20:06 +0000
ROA not before: Fri 07 Aug 2026 05:20:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5a:cc:f5:32:ef:4b:7d:bc:3a:00:a0:3c:db:7b:11:59:07:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=56e3cf8198998ddaf0fbbaa9563d2c32e6d25033e5ea69e40f4b9c0111315b2d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:5b:af:a1:10:26:6f:a0:bd:4b:0b:87:48:
2f:50:10:63:8d:93:d4:68:06:7d:80:0d:f8:0d:9b:
b6:15:34:dc:0b:96:6b:c0:52:55:12:9e:c7:37:fe:
d0:87:5f:46:83:d8:70:42:46:6a:5c:84:ff:78:91:
ba:ad:39:99:c4:32:4e:1c:5b:6a:97:3c:9b:b3:4e:
bf:8f:3d:09:34:b4:75:55:6a:19:73:64:c2:a4:e2:
26:c6:4a:1f:02:b9:11:66:be:1f:94:c9:ce:87:69:
97:ad:8e:ab:1a:74:85:78:7f:57:77:52:f5:1d:b4:
d5:59:84:2e:20:f2:0e:d4:81:06:4f:ef:39:8f:3a:
db:98:88:47:d5:73:0c:98:92:39:df:74:1e:14:33:
d1:b1:87:d2:f2:f8:ca:11:b7:0b:b1:25:ad:96:c3:
90:84:59:c7:c2:0a:62:6b:53:f6:be:a2:32:41:0a:
64:a9:d1:30:b4:dc:9d:f1:87:c8:08:c3:ab:23:52:
71:23:01:5b:68:75:20:e3:b4:ad:9b:20:8d:8f:1d:
c7:ea:d4:dd:43:d0:61:ef:55:88:35:c4:f4:3d:1a:
9c:83:6b:8b:54:13:ce:f0:01:c6:a5:0a:53:62:08:
60:c1:40:e4:9c:c6:34:e6:10:0c:0d:5a:a6:d9:6e:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:DA:38:FA:18:BA:CF:3F:F6:9E:DD:A1:15:57:31:95:2D:86:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:bd:f4:f2:81:8f:9b:c7:04:ab:ee:ac:3a:b1:6e:86:21:8f:
a4:7b:b9:9d:72:76:c2:e8:8e:96:9f:29:86:4a:22:df:58:67:
54:f1:63:d8:1b:1d:0c:26:72:97:aa:21:ab:cc:e0:3a:1e:1e:
71:ca:42:fa:81:57:7f:11:50:fa:58:40:26:a1:dc:e5:a9:5e:
d5:ac:98:69:44:ef:22:f8:6d:b6:ad:ee:b7:94:a4:80:84:72:
d6:2c:ec:bc:eb:2a:4b:a9:18:6f:58:cc:79:2b:80:36:89:a9:
4c:c7:a3:2d:28:26:e7:df:d5:48:af:01:4e:b2:8f:0e:c6:70:
a1:15:8c:7c:3f:6a:4a:65:a4:99:39:b2:c2:56:22:4f:c9:d2:
e2:95:c2:c0:1e:31:96:e0:b1:80:72:8b:0f:f5:b0:7a:a8:5b:
a1:68:73:73:76:46:43:12:9a:c9:d6:56:a7:38:fe:6d:1f:8c:
fe:03:9d:c7:14:3e:f2:55:a6:c6:09:88:e8:2f:a0:1a:4d:b4:
c5:07:15:41:27:77:1d:93:9e:1d:14:20:9b:9e:7b:31:4a:f7:
03:ec:7f:72:7e:44:83:d8:5f:81:14:d0:8b:ba:d2:db:1b:0f:
fb:9a:c5:d0:02:1f:f5:c2:6a:23:17:2b:91:89:4c:22:24:f1:
3a:06:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:26 2026 by rpki-client