Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa
File: 6738fcad-f4a2-497d-8234-1ac95dadb03d.roa (raw, json)
Hash identifier: D81NZgH8QRRN3174D0kVJ5aBU+G8VWob7f9QmG48eag=
Subject key identifier: 0D:CB:91:ED:17:62:8C:A3:D4:39:22:C9:F4:87:0E:9D:58:5B:4A:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A62FD7AEB3EE5FC5811DA958837D975D1D9738A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa
Signing time: Thu 10 Sep 2026 02:40:36 +0000
ROA not before: Thu 10 Sep 2026 02:40:36 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:62:fd:7a:eb:3e:e5:fc:58:11:da:95:88:37:d9:75:d1:d9:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:36 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=b63b6809d02b456cb7eba234f2545aba0b4a61795aba2467f7ba218b8088279a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:01:49:3d:2c:af:93:60:f3:11:ab:6c:6c:
56:ed:fb:4e:9e:1a:7e:5b:f6:55:ea:92:64:fd:3b:
7c:39:7d:e6:06:c6:1d:40:7d:6e:ba:a9:7c:6d:13:
4c:db:0d:5b:ab:47:95:22:12:6c:78:ce:23:14:35:
06:af:30:ed:4a:36:c3:10:8a:57:61:b4:df:37:04:
b7:c9:83:cf:79:24:03:5e:4a:bc:8f:56:f8:09:76:
51:6e:66:dd:6c:25:ce:1e:41:61:0c:a9:fc:c4:c3:
52:30:be:ff:d8:32:d7:35:ab:3c:75:f6:6c:0f:33:
b0:9c:d5:cc:e5:01:47:b8:54:14:1b:a4:e2:da:54:
d2:f1:90:4a:2a:1c:14:72:91:78:89:1a:18:7e:1d:
eb:97:d4:22:23:07:ef:f8:74:5f:30:c3:56:81:a0:
7c:9b:67:46:ee:ba:a0:66:05:c0:72:66:9c:81:58:
cc:a0:8b:bf:24:ea:0a:da:57:a6:dd:35:ee:60:13:
82:2d:d8:bf:e0:eb:0f:64:9f:3c:33:ca:98:b0:d1:
61:38:a7:01:88:68:e0:a0:98:60:f8:f8:9d:13:15:
bf:7c:6a:fc:ab:89:68:13:37:12:66:a3:99:d0:8f:
61:33:12:77:f0:ed:b0:68:c4:bd:69:b6:ad:71:c0:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:91:ED:17:62:8C:A3:D4:39:22:C9:F4:87:0E:9D:58:5B:4A:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:2080::/48
Signature Algorithm: sha256WithRSAEncryption
c0:75:6e:d0:f2:49:0b:2e:ae:56:d2:05:27:04:bc:53:f7:15:
ac:79:54:74:5b:c1:9a:8d:88:84:a0:d9:b2:9d:16:8a:ba:80:
45:2c:bd:47:c8:6e:5c:41:98:ad:b4:81:89:ab:0a:f1:28:f2:
4e:b0:43:57:e0:82:9c:77:9c:fd:95:96:fb:76:c8:56:8c:f1:
be:2f:18:1e:85:d5:21:66:76:60:0a:86:dd:82:b6:ef:92:c9:
61:cd:30:4f:2d:3c:df:f9:e6:f8:69:62:cb:5e:30:e3:6c:89:
b0:48:c6:85:36:38:20:8b:d1:c3:1e:f9:02:a1:3d:61:8a:e8:
1e:83:89:6b:e3:66:a7:53:cb:9e:fb:5f:ea:13:87:6e:4f:19:
37:07:08:85:1f:ca:11:88:aa:07:c4:71:b4:70:88:29:7d:b2:
e3:97:ed:e9:0b:3b:13:95:74:6e:ed:e9:69:f0:29:1e:28:3d:
36:40:77:30:d2:0d:09:d9:7e:07:10:44:50:0d:69:90:f9:dd:
09:c8:ba:f8:a0:8d:b7:35:90:5b:0d:72:39:89:14:10:74:24:
60:a8:ec:a1:53:1d:bb:f1:11:3f:9f:e5:d1:20:f9:02:6d:77:
17:0d:d0:36:4a:e0:9b:21:99:ca:0f:72:26:3a:06:39:83:05:
b7:39:e6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:40 2026 by rpki-client