Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
File: 655038e8-ae62-4d89-86ef-c5f745dc0c17.roa (raw, json)
Hash identifier: Hse7ppYgDlmQQTwosoAFFrrqQCsamvS8P+XBZ5P6lE0=
Subject key identifier: 9C:EA:46:42:F2:99:56:47:2B:B3:59:65:10:30:8D:0B:58:A7:84:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1566ED2306759CB7C8AEF323A2965A495CD382C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
Signing time: Wed 05 Aug 2026 02:10:07 +0000
ROA not before: Wed 05 Aug 2026 02:10:07 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:66:ed:23:06:75:9c:b7:c8:ae:f3:23:a2:96:5a:49:5c:d3:82:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:10:07 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=0e2ffd26f1cee07058a05d5370c8e7f74f654529eac776d1d67e4da333cbce4e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:04:c8:c1:fe:6c:aa:88:a3:41:ba:40:a1:
0f:a3:13:ee:4b:bf:dc:0a:f4:e4:e3:b1:fd:82:4c:
47:5c:a9:6c:9d:7e:66:1e:19:d9:7f:17:f1:ab:f0:
46:eb:b1:e4:31:34:64:a5:78:d8:d9:1a:8d:bf:14:
43:33:6e:d0:40:54:8d:1c:a6:f5:37:78:3e:46:04:
0a:07:ca:25:d4:7d:95:a7:7f:53:0e:9d:72:9e:7d:
79:54:14:c3:59:d2:41:5e:f0:75:82:28:93:ff:3c:
84:4c:08:64:ea:10:0a:4e:b7:92:43:ec:83:ef:86:
db:c4:80:c8:37:2a:3c:3a:c2:3c:7f:8d:14:ff:23:
c0:78:72:55:d4:be:58:89:e1:12:f7:1c:b6:67:b9:
09:60:aa:9d:2e:4a:43:6f:8d:8b:89:db:a6:e5:a8:
00:30:1c:31:c8:6c:d5:30:4c:e7:2a:da:2b:28:f7:
c1:07:57:8b:25:4f:36:24:59:e4:b4:75:83:8e:2d:
23:19:97:18:4b:1e:d3:88:13:ea:47:b4:ca:ff:9e:
a2:f0:d1:78:17:35:a2:3e:60:ed:2e:cc:ec:7a:5a:
81:71:81:39:4b:04:a0:69:ad:c6:e5:19:14:59:18:
1d:62:5f:2e:77:e7:92:f3:29:c3:1f:b4:65:de:9f:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:46:42:F2:99:56:47:2B:B3:59:65:10:30:8D:0B:58:A7:84:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:840::/48
Signature Algorithm: sha256WithRSAEncryption
ae:21:33:92:26:1c:ca:18:f5:7b:9d:39:45:d4:a5:f8:61:21:
9f:4f:2e:86:64:b2:8a:42:57:79:00:48:8a:38:94:f1:d0:79:
b7:4a:09:dc:b2:68:33:2d:89:f8:a3:be:77:41:45:ee:96:65:
ff:a9:1d:cd:2f:5d:e8:82:67:18:c6:00:a9:7f:93:d5:de:e1:
e0:99:99:5c:bf:39:43:12:ff:45:fd:cd:1c:7a:f0:ca:60:7e:
dd:b3:ce:d8:5d:db:eb:5a:7c:52:4e:90:43:b1:7d:fd:17:e4:
d4:2c:dd:9e:b9:bd:b2:e3:fd:96:bc:a2:e0:48:d6:5c:fc:28:
33:65:ec:5f:d9:fc:70:61:68:a9:0f:c8:20:c3:46:95:f9:48:
d5:c3:26:fe:bc:d2:d6:37:63:f3:f4:63:9d:ec:7e:01:f1:74:
07:6e:f3:cc:1b:47:3f:9c:95:59:56:db:9c:51:a8:3a:e2:9b:
be:df:dd:ca:8f:e7:98:73:27:dd:99:e7:7f:66:07:af:44:92:
8f:ec:34:4a:f3:dd:8c:53:87:d8:97:e4:f2:fd:ef:e5:30:01:
0b:96:00:5f:82:dd:af:ad:c7:b0:bb:77:10:50:eb:fc:d6:6f:
14:38:c6:ef:b0:33:b2:7c:c1:4b:5c:c6:75:ae:2d:5d:b9:ba:
c3:10:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:12 2026 by rpki-client