Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/666c65b4-6cbf-4dfd-8e71-3f1d7b8c6caa.roa
File: 666c65b4-6cbf-4dfd-8e71-3f1d7b8c6caa.roa (raw, json)
Hash identifier: D6yLg1wj+uSLx5bAmrdTbrS3bIC+7808It6TFtcHlMc=
Subject key identifier: 0C:55:07:B4:CA:8A:45:41:9A:EA:EC:51:04:69:B5:4B:B2:34:90:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C1E44963E5FED8AC8C2428B8053E64ADA1E9B34
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/666c65b4-6cbf-4dfd-8e71-3f1d7b8c6caa.roa
Signing time: Wed 09 Sep 2026 16:14:03 +0000
ROA not before: Wed 09 Sep 2026 16:14:03 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d069:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1e:44:96:3e:5f:ed:8a:c8:c2:42:8b:80:53:e6:4a:da:1e:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:03 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=4291f2e06c8bb33d43056244308d8cadbcbc992bf1719209dbbe0123e1c4cb7a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:20:17:f3:fc:5a:21:33:a3:2c:33:b7:7b:
95:5b:64:fd:af:52:56:5d:06:fe:7c:ab:94:67:9e:
52:18:23:cf:19:89:fb:e8:3c:67:bf:7c:b6:51:61:
d1:36:53:7d:0f:33:2c:e8:60:f5:33:69:00:89:c8:
92:c5:27:d8:7b:78:2e:21:b0:3b:8f:82:e6:92:70:
69:a4:57:ca:39:e0:14:3e:9c:26:c8:1a:8b:7c:b0:
55:a9:66:45:80:02:a8:22:99:3b:a7:49:39:4d:48:
50:d8:91:05:26:2f:9f:07:75:f4:1d:f7:c1:0e:03:
19:9f:a8:ec:be:55:72:fc:16:07:27:5b:b7:3a:38:
7e:50:7d:6a:02:56:a8:35:62:be:66:cc:d3:6c:ca:
e4:9e:4b:e1:3b:b1:cf:89:fa:5b:ac:d5:42:33:ae:
05:6c:62:a9:d8:1a:b9:9b:ca:e1:25:8e:24:11:3c:
19:70:e6:ac:ef:1b:c2:15:c4:68:e7:65:48:5f:52:
87:f0:39:da:9e:d0:5d:48:29:94:e6:c9:7c:d5:04:
90:f5:84:36:a7:35:f8:c3:fa:0d:e9:d2:68:66:bf:
0e:d0:20:2c:89:5f:8d:da:2c:b7:c6:dd:d2:bd:87:
00:7c:13:53:10:94:55:68:fc:2e:df:0b:b9:7a:c0:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:55:07:B4:CA:8A:45:41:9A:EA:EC:51:04:69:B5:4B:B2:34:90:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/666c65b4-6cbf-4dfd-8e71-3f1d7b8c6caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d069:e000::/40
Signature Algorithm: sha256WithRSAEncryption
32:9a:6d:85:82:e5:28:2a:0f:3d:c8:d9:b9:44:cd:7c:16:02:
82:3d:ac:85:c8:39:e5:51:8c:96:4f:8d:4f:66:b7:bc:99:cd:
87:00:f3:6e:e6:14:3b:2d:47:e7:5a:f0:9d:7e:1d:6e:c4:0c:
03:94:20:d3:87:84:71:22:6e:b3:80:d4:65:2a:7f:83:0d:3f:
ef:7e:18:b0:a5:4a:71:f5:3d:4d:d6:54:e1:f4:fc:86:0e:aa:
b7:32:13:26:57:18:fe:f0:30:b2:34:a2:05:a1:58:3b:1d:36:
34:cd:74:80:ee:89:43:b9:8d:a1:14:13:98:25:8e:a6:a2:bf:
46:1e:87:eb:bf:15:9c:8e:f9:e7:78:3c:7a:e2:ed:d1:7c:0c:
f1:46:d9:eb:e3:f6:9a:24:e5:19:bb:1b:d9:ac:c1:bd:b9:4d:
d7:b5:f4:28:00:af:a3:f3:d2:74:d5:c6:58:a3:ce:c6:5f:34:
a9:37:75:63:4d:03:6e:07:76:2e:16:e2:9b:aa:55:a6:89:61:
cf:78:68:5a:3f:50:83:8f:52:56:94:f7:1d:dc:eb:6f:94:33:
a0:30:96:27:64:bf:a0:27:3f:67:be:20:67:e9:cf:12:ea:3f:
57:84:bf:f8:ab:10:0f:74:1f:8e:a5:c0:6d:6a:8c:b4:fd:c1:
13:18:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:08:13 2026 by rpki-client