Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638eeae8-bbb1-409f-92d4-19bf7288c05f.roa
File: 638eeae8-bbb1-409f-92d4-19bf7288c05f.roa (raw, json)
Hash identifier: 2lq/9y45BhevKs4RqGietyxGXU5fXuAkbtihBsM0rWY=
Subject key identifier: 7F:17:BE:1A:2C:93:58:4E:33:D5:4E:52:9F:45:B3:6F:30:2D:70:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B72686F599C7A909243E3A7769EF65F70D7BBE7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638eeae8-bbb1-409f-92d4-19bf7288c05f.roa
Signing time: Mon 10 Aug 2026 00:50:31 +0000
ROA not before: Mon 10 Aug 2026 00:50:31 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:72:68:6f:59:9c:7a:90:92:43:e3:a7:76:9e:f6:5f:70:d7:bb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:31 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=3474d800fb345835bae78ad933c7e74d9517c98302f7567b5d732410c16038d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:03:50:d5:be:ad:3f:77:c5:ed:cd:e1:2a:
5b:b8:4b:60:97:08:64:0f:00:6d:9d:2a:b9:18:05:
d8:30:73:cf:1a:b6:74:18:1c:61:93:98:5d:03:a5:
42:a7:49:0d:41:f0:de:53:7f:71:85:ee:76:bb:ac:
6d:87:e5:fb:16:3d:a3:0c:20:49:1e:4e:38:02:83:
df:4b:65:9e:96:3a:b5:09:b1:37:9a:e9:d7:f1:b8:
01:cd:90:38:b1:1c:07:9b:34:67:37:d4:80:ed:b2:
9e:3f:c1:e0:33:71:43:71:35:a5:63:6d:76:c4:61:
7a:06:79:de:75:46:91:53:8f:eb:7a:7f:d7:13:a5:
55:13:2b:67:6d:1e:c0:53:ff:f2:26:5c:37:3d:20:
c5:b8:46:60:6b:69:87:10:ff:bd:c8:2d:70:d0:1b:
be:dd:a2:12:a6:c0:fa:fd:94:a7:61:0f:f4:9c:91:
37:ed:da:af:51:9f:0e:72:27:7c:23:46:93:40:1c:
26:74:d2:44:ab:6a:01:84:28:c7:01:06:6a:c5:38:
90:c8:07:a6:6c:96:44:66:1b:da:eb:af:07:b1:9b:
a3:1e:c4:3d:7d:b0:7c:10:9c:27:16:fd:94:1f:95:
23:3e:a4:1d:a5:fe:80:d8:1d:4f:2a:ef:f8:3d:57:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:BE:1A:2C:93:58:4E:33:D5:4E:52:9F:45:B3:6F:30:2D:70:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638eeae8-bbb1-409f-92d4-19bf7288c05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:6000::/40
Signature Algorithm: sha256WithRSAEncryption
4e:a2:eb:75:e4:7b:06:7e:28:82:94:c1:f6:e4:6d:cf:93:8d:
e7:8a:53:a5:77:a0:04:b5:c4:e8:fe:fb:c4:29:e6:50:56:e4:
a3:0a:6a:88:4f:14:b0:0f:4f:30:1d:61:e8:af:53:3f:24:be:
a7:73:a3:72:ba:21:58:f4:6d:d7:1d:07:4a:c1:2f:1c:02:e3:
72:0e:a1:f3:e3:b8:df:90:42:4c:12:30:bd:a2:0b:06:af:3e:
55:59:b9:8d:84:61:eb:18:82:68:3a:f8:16:7f:00:c0:49:72:
34:54:03:04:d0:c1:7b:5c:7b:b0:3c:e9:b7:96:9c:34:f6:e0:
ce:bc:01:29:e6:39:63:00:73:f6:48:71:c2:1a:d4:bb:84:cf:
4c:8d:b1:90:41:04:47:c0:13:92:11:a6:f1:d9:3c:48:70:c0:
1e:e6:1e:66:ee:b8:d4:8b:e9:95:e5:bf:22:97:51:bc:e3:6f:
6d:20:06:50:ed:90:5c:ea:db:e0:ab:10:d4:b1:6a:a3:67:7d:
09:f0:b0:e1:e6:a6:eb:5a:17:90:57:9a:8f:42:6c:7c:35:29:
5c:5d:e2:33:41:ce:9d:fd:a1:3c:bd:e8:cd:f5:bc:4b:06:8b:
e4:db:18:1b:14:eb:56:05:a8:c7:fc:55:4e:22:97:94:25:4d:
5c:d3:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:42 2026 by rpki-client