Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/611c4c9c-3515-4b2b-bb96-0b9326271acf.roa
File: 611c4c9c-3515-4b2b-bb96-0b9326271acf.roa (raw, json)
Hash identifier: 5cphPurn0Bn7iPYTvFMbXvh0LVLoGVF4FqKFMYAciKk=
Subject key identifier: AC:FD:B6:90:9E:93:D8:83:CC:3D:27:E4:47:B7:0E:64:0C:97:36:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07A6A0707B09E7E05F92FF1B3C430BC087471E92
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/611c4c9c-3515-4b2b-bb96-0b9326271acf.roa
Signing time: Tue 18 Aug 2026 18:12:56 +0000
ROA not before: Tue 18 Aug 2026 18:12:56 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a6:a0:70:7b:09:e7:e0:5f:92:ff:1b:3c:43:0b:c0:87:47:1e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 18:12:56 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=dfe81a6991d55ea7a1272ce73c9e0e446a8aa3156a2ce8da9780a0c22f7361ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ce:0c:54:4e:22:69:92:58:3a:96:01:87:3c:
96:85:ac:91:e3:8f:48:47:51:fa:65:d2:17:24:9b:
9f:a2:df:89:07:29:5b:ca:dc:2f:7e:14:95:66:59:
e6:48:a6:42:42:34:2c:78:b0:23:88:28:4f:07:d4:
f6:19:66:da:29:90:d5:7d:b2:01:89:87:71:cf:fc:
a6:0e:97:c5:59:29:e2:61:76:ce:e2:46:02:97:eb:
78:55:5d:73:01:2c:e6:7a:d8:08:d4:70:ab:89:8c:
1d:ee:5f:0b:f9:8b:ff:b9:3f:32:04:83:60:a5:42:
6e:f3:4f:f7:4b:de:bc:bd:6b:cb:9a:fc:db:89:a5:
99:28:51:86:65:b8:49:0d:e9:92:24:81:2d:52:4a:
0b:9d:4f:22:b0:20:78:95:b0:7a:5a:17:8a:fb:57:
97:a3:a3:19:80:02:a4:b5:8f:c7:11:32:27:c9:cc:
74:9e:7f:00:87:be:7d:8c:3a:9e:1c:c4:a1:6b:06:
10:ff:72:4b:1a:a7:ad:25:55:8c:5c:fb:7a:58:bb:
74:da:1a:7a:49:ff:87:73:91:b9:3e:81:6c:6b:7e:
8f:63:e0:a0:6f:48:9d:27:7a:a4:44:c8:8a:90:72:
48:8f:10:de:67:ec:7a:bb:9e:14:d9:6f:06:67:87:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:B6:90:9E:93:D8:83:CC:3D:27:E4:47:B7:0E:64:0C:97:36:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/611c4c9c-3515-4b2b-bb96-0b9326271acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:8000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:95:81:30:a0:e1:bb:4f:91:11:59:5f:88:bf:ff:37:ff:07:
e8:b9:d0:1d:de:0a:fe:45:ed:f3:25:5f:9a:9c:1e:1d:f2:f0:
81:c5:35:d9:24:ca:c2:0c:90:68:97:f3:d7:a6:66:c6:57:0f:
5f:92:12:d8:b8:15:7d:03:2c:fa:d2:f8:51:25:48:31:72:d3:
08:35:8e:31:53:7a:21:9e:06:ab:ec:48:89:d2:91:44:6e:50:
95:de:c2:2d:aa:b6:38:2a:85:cb:c7:ef:a0:37:6e:31:b2:74:
39:b3:d1:50:6c:c1:8a:95:52:2a:cc:55:d3:92:d6:bf:1f:14:
bf:37:df:c5:38:19:0c:de:2d:20:90:97:38:e5:dc:3d:db:e0:
6f:c6:e0:2d:31:24:9a:34:50:c6:9b:95:e8:ee:55:8a:c8:40:
3a:40:73:ac:f2:81:f0:2c:78:b3:dc:4c:21:c2:66:62:65:bd:
c5:26:5b:2e:3d:9a:ed:f5:7e:0e:6e:73:23:69:85:89:c5:db:
00:75:4f:67:47:2f:d7:e9:3e:a9:b6:a7:15:f9:5d:20:5b:9b:
a8:92:cd:41:83:f7:0c:1d:a7:a6:e5:bf:2d:06:5a:9b:ef:8b:
7b:43:b6:c6:cc:42:c6:29:39:f8:c4:5d:42:57:f4:5a:b0:ec:
4f:c3:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client