Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
File: 62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa (raw, json)
Hash identifier: tR5cOEPw8sg3berQVnMFE/M4kiTAQ3BDVsh1RFK1Ic8=
Subject key identifier: 37:EC:F8:78:D4:69:A3:58:4D:0E:3A:E9:A8:8B:FD:EC:1E:58:74:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 597B1B906A9C302E703844A80E6F28868340A798
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
Signing time: Fri 07 Aug 2026 05:00:51 +0000
ROA not before: Fri 07 Aug 2026 05:00:51 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7b:1b:90:6a:9c:30:2e:70:38:44:a8:0e:6f:28:86:83:40:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:51 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4c3e5834708a43908879ab3abda5eaeeded6782eb849cf08aca612ee006650f8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:8b:c9:f7:ec:f2:d0:12:2a:06:79:b3:62:
c8:5a:0b:24:6b:c2:f0:55:ac:bf:c5:cb:99:91:5b:
da:27:97:17:c7:2a:d3:44:24:03:cd:24:c2:0a:bf:
fd:74:6a:7c:90:ad:6f:38:18:50:66:8e:2a:6b:a5:
1a:b9:fe:80:22:04:6b:05:64:5d:21:d6:13:06:04:
39:48:21:6e:62:54:f7:73:38:19:96:5b:55:74:bb:
ca:df:5f:82:8c:d9:43:fd:50:c5:40:ce:de:3e:3f:
94:df:db:c7:86:0d:d6:5f:fa:e5:85:ee:f2:03:5a:
c6:62:57:c7:e3:e7:fc:a9:5a:e2:ea:06:ea:fe:8b:
93:ef:f0:c1:9d:a3:7a:ce:27:78:57:6c:79:89:99:
b8:10:cc:a8:3d:75:7d:6f:23:d5:2c:59:8a:7a:04:
4a:e1:f7:5d:aa:b4:7c:bd:99:2d:78:f2:f9:b7:ae:
5c:1b:26:e3:35:f9:dc:9b:f4:d4:73:d7:79:1a:76:
ab:96:9a:8f:2a:68:f9:ac:25:43:fd:77:fd:e4:f1:
b1:71:3e:36:c1:6d:fc:79:0a:95:e8:75:de:60:37:
fc:45:07:1e:2c:cd:cc:b8:ff:83:ef:b4:12:35:19:
60:5a:21:ea:e1:04:03:24:1b:a6:43:57:56:2c:e2:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:F8:78:D4:69:A3:58:4D:0E:3A:E9:A8:8B:FD:EC:1E:58:74:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1080::/48
Signature Algorithm: sha256WithRSAEncryption
02:3c:c5:bc:12:cf:bd:6d:0b:9b:31:93:bd:28:e0:35:bd:ae:
a9:d6:97:d9:56:fd:6c:e0:cc:6e:51:65:35:0d:0f:7e:65:f3:
fd:78:04:f5:4c:09:ea:9d:a3:22:c4:c5:74:4d:8c:36:c9:2c:
24:e4:55:46:22:d7:a5:c9:f1:9c:61:32:ab:a5:0e:40:52:67:
5d:0a:a6:e5:b8:eb:74:90:6c:f4:fe:a9:fd:a3:f6:13:ad:ff:
76:02:ce:81:0c:96:69:58:94:03:a1:7f:13:b9:60:20:c1:b2:
c6:0c:be:3e:55:87:52:a0:e0:e0:b7:8d:51:06:c0:b5:fe:a5:
4e:9f:0a:57:d1:80:49:d4:8d:7d:c8:44:34:56:80:ac:3c:bf:
45:9f:75:b2:e1:82:89:b2:fe:80:3f:46:fd:dd:21:be:ce:04:
67:39:89:ce:e7:c3:3a:f2:eb:ef:65:a1:03:e6:f2:58:0e:8e:
da:27:20:bc:07:aa:a2:b9:fc:bf:f6:a9:f3:7a:a4:a4:d6:14:
8a:21:96:0b:79:6c:5f:62:f7:d5:fc:e0:62:e2:6e:67:c8:c1:
a3:8a:d6:58:c8:64:3d:52:32:99:21:7d:11:27:36:1d:81:e1:
ec:9a:77:a1:ea:4c:9c:cf:02:f9:69:4a:d0:f6:75:e2:04:67:
2c:b9:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:41 2026 by rpki-client