Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
File: 669652b6-0b22-49a0-b29f-dfb51835c988.roa (raw, json)
Hash identifier: m0QemlUp4tKRFSmqI9ols2YryUBSP/9GWwjaVvnWcN0=
Subject key identifier: 53:F8:23:BD:D1:6E:2C:FD:A2:98:24:F0:5E:3F:01:75:1E:F8:3F:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45297924B812F10518D6E09ECDDCE210B1ACDD3F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
Signing time: Fri 07 Aug 2026 05:40:21 +0000
ROA not before: Fri 07 Aug 2026 05:40:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:29:79:24:b8:12:f1:05:18:d6:e0:9e:cd:dc:e2:10:b1:ac:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f2e9b08f0122d6461e575006cbe9d4587ff73d0f48907f12b20aebd42032cb73, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:3e:6e:9a:64:15:a3:f5:2a:28:48:6c:7a:
2b:37:9f:1b:38:38:35:48:cf:5e:b5:b0:8c:3e:53:
5e:06:3b:cb:2a:1d:14:76:f4:a1:4a:b2:f6:52:51:
f0:78:47:3e:88:c2:78:24:84:21:69:6d:c9:2f:c9:
66:4a:b1:0c:a9:06:39:ba:be:ac:a4:26:12:90:24:
a7:06:15:a1:87:08:e6:f3:94:fe:a5:02:e4:33:6b:
98:93:49:92:2d:07:c9:36:e0:8f:43:c0:72:35:8c:
07:7a:9e:20:60:bf:4f:cd:cf:85:b5:ac:23:85:f0:
e7:b2:21:c3:3e:07:3c:18:3b:d8:32:ba:ad:57:e1:
1c:38:64:6e:36:10:95:95:ab:1b:85:42:c6:a0:26:
47:75:23:32:39:7a:94:00:73:60:54:39:b3:67:f5:
f7:75:6a:f4:5b:66:1e:a9:4d:08:f7:e6:27:72:59:
ee:9c:17:6e:e1:b6:22:17:23:7c:62:72:a0:70:1b:
3e:85:61:63:d9:5d:4d:75:61:04:11:b4:92:9f:5e:
61:86:a0:02:44:3c:0a:34:27:3c:7f:83:68:fd:e9:
4d:bd:b0:84:f4:6c:d6:0c:c6:c9:ff:6c:52:c0:1a:
98:4c:f2:3e:6c:6a:45:61:06:91:0c:c9:54:ba:9b:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:23:BD:D1:6E:2C:FD:A2:98:24:F0:5E:3F:01:75:1E:F8:3F:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/38
Signature Algorithm: sha256WithRSAEncryption
5a:58:12:7e:40:1d:76:68:75:18:90:0e:19:36:6d:36:ef:31:
d5:22:8b:ef:28:7a:39:0b:26:06:5c:fe:5a:e0:91:2b:24:e2:
58:5a:4e:bb:99:7a:fa:6b:5a:9e:9b:2a:cc:fc:d9:e3:04:b0:
fa:52:76:e2:96:c5:c9:b2:64:36:a5:30:6d:ff:37:d8:1c:4d:
11:50:c7:02:51:c0:2d:e4:2b:84:db:95:b4:11:76:51:3e:bb:
0f:f8:e4:04:a1:65:ac:17:e2:75:c7:4a:2c:1a:66:85:2c:f8:
06:15:85:8a:d6:7a:51:c4:8b:ac:b6:54:01:0d:de:d2:1c:cf:
83:b6:05:4b:af:3c:b1:01:5c:98:42:df:6b:fe:aa:f0:96:18:
9b:bc:45:6d:e0:14:cb:5e:98:ab:72:b7:54:76:a3:c9:e2:99:
91:49:cf:c4:d4:6e:ac:da:82:c1:ff:d0:97:0d:76:db:bf:bd:
15:ad:a3:e2:e2:7d:e8:ef:0f:b3:04:2f:f1:93:6d:b9:f2:e1:
f6:c7:70:23:a9:1a:e7:1b:77:c2:7f:2d:20:f3:b9:77:06:92:
88:48:8a:49:ad:40:78:97:42:61:c7:d9:78:b2:76:ed:2a:6d:
f0:59:63:a9:89:30:ab:0f:a0:50:23:f5:9a:66:6c:ca:51:91:
f6:56:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:19 2026 by rpki-client