Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
File: 613f885a-7f25-486b-9eff-fdd6b2c05b65.roa (raw, json)
Hash identifier: cGyJJN9reRuK18k9lj4d+cqlXVymf/ChIT70XlN8WQ4=
Subject key identifier: F3:50:00:F1:E3:D0:33:98:BF:27:95:9E:12:A8:5C:DB:B4:CF:DC:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36F9824DD87CB96CCB225656DA68DF4DBB03A204
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
Signing time: Fri 07 Aug 2026 05:40:21 +0000
ROA not before: Fri 07 Aug 2026 05:40:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f9:82:4d:d8:7c:b9:6c:cb:22:56:56:da:68:df:4d:bb:03:a2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3fbc409d115b2a414320698298462681b2c2daacc23557045b8c41835300e9af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:db:a7:80:a5:4a:8b:cb:13:9e:74:db:95:
62:b5:5f:ba:d1:04:5f:06:21:66:ca:de:d7:2f:2d:
3a:64:df:f5:bf:43:d0:5e:30:0f:4b:0c:c8:14:34:
b9:f5:b4:14:65:5f:ab:a4:06:fb:e3:cd:09:a9:2a:
d2:b2:07:df:c6:a3:b9:72:5a:68:20:04:fc:09:c5:
d7:65:95:a5:5e:7e:b8:0a:e0:7a:76:f5:d4:91:34:
cb:e0:a6:2e:89:47:35:4d:5c:a5:e2:95:fd:75:39:
e3:de:07:85:a4:7a:43:52:2e:9a:11:66:08:c2:37:
1b:78:1e:fd:4b:76:96:25:84:9f:46:f5:4a:b4:be:
4e:93:e7:98:0f:26:02:00:6b:f3:9f:1a:b1:93:dd:
c5:b1:21:77:3b:36:cb:c9:86:0c:f9:01:55:4c:02:
08:96:19:00:30:54:f3:a4:e9:a5:bc:56:55:6c:4e:
4d:11:4c:77:08:94:be:ca:73:fb:9a:70:e1:bd:0e:
be:2e:97:1b:21:e0:c5:22:e9:83:31:81:e2:e4:3a:
1d:b0:3b:12:2c:ab:b5:8e:07:69:48:59:fd:bb:fc:
b7:ab:e4:e0:da:f4:6b:57:b7:81:2b:ba:c9:a6:d4:
be:03:72:7b:5c:09:2c:d6:b9:b9:b0:7b:cf:f2:a0:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:00:F1:E3:D0:33:98:BF:27:95:9E:12:A8:5C:DB:B4:CF:DC:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4080::/48
Signature Algorithm: sha256WithRSAEncryption
ae:83:14:19:10:34:b0:ed:52:68:39:94:6b:f7:56:e1:03:84:
5d:f2:cb:81:1d:88:e5:26:2f:ed:d1:9e:ae:85:c5:07:9f:b1:
42:f2:8c:6b:74:e7:11:a5:f1:ac:52:b3:34:13:16:93:36:0f:
94:01:dd:96:8e:50:47:96:68:99:92:a3:27:60:34:c4:d3:e7:
e4:0b:a4:44:71:3d:eb:9c:92:19:4e:13:2a:97:a4:54:04:a4:
fb:c0:20:ab:a2:62:44:fd:a2:f8:12:79:78:ec:d4:6a:4e:0e:
60:25:54:ad:27:33:4b:a2:d8:5d:fc:1e:ff:e2:c0:c9:3c:58:
8e:be:9b:da:85:16:41:af:1e:10:e3:ab:0b:8d:c9:b1:fc:0c:
39:ca:eb:bf:d2:94:ad:18:a3:bd:4a:96:8b:97:ad:52:2c:d7:
76:25:fa:b0:42:1d:5b:ef:3e:70:9f:61:6f:a4:69:c4:7d:d0:
30:45:a5:34:92:a4:6f:4a:25:2e:d7:c8:3d:4b:6f:9c:89:24:
1f:cf:64:98:33:97:b5:e1:1a:41:de:fc:5c:e4:df:67:97:04:
db:22:ac:7f:9d:a7:db:38:35:b1:1f:f2:20:74:b7:33:80:4c:
4d:64:c4:d5:63:a3:3b:1e:93:af:f1:4c:86:41:03:9b:e2:64:
b6:fb:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:14 2026 by rpki-client