Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa
File: 68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa (raw, json)
Hash identifier: eo1AJ7tmjdtl0TtOA3YV1VXzIyISEuRtuGE3kDGrDoE=
Subject key identifier: 11:59:20:0A:FF:60:BA:EA:8D:A0:71:88:53:0E:E2:1F:70:C7:80:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E310661A487750F6143C0DAE60AD4032460E248
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa
Signing time: Fri 07 Aug 2026 05:00:12 +0000
ROA not before: Fri 07 Aug 2026 05:00:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:31:06:61:a4:87:75:0f:61:43:c0:da:e6:0a:d4:03:24:60:e2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3bdcd5930c8457a6b51620ad3ba977b25a4f14b7fefa8544d76f8bc1f56fb664, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:4a:da:07:4d:28:6a:17:77:30:ff:03:46:
e8:3e:af:61:ad:3c:7b:b2:2b:f0:2d:9c:7d:39:44:
9c:25:f1:c0:6c:6a:ab:95:33:29:61:6a:65:54:c2:
f7:15:c7:d5:21:e0:3a:be:5c:b3:5e:b4:b1:52:d3:
67:73:71:64:11:d2:b8:df:f2:f2:df:dd:ae:97:1a:
a7:35:1b:0a:51:14:ce:4d:21:49:f7:57:42:9f:31:
5f:33:2a:22:9d:6e:26:68:1b:50:03:c6:96:54:7d:
c4:6c:7d:8b:19:e9:c8:90:ab:c9:38:0b:ad:92:b4:
84:56:69:20:59:4e:5f:73:5e:f1:06:ea:e8:91:f8:
1c:12:72:6d:7a:44:b4:c8:93:6a:2a:31:06:ea:79:
15:09:8c:c6:c1:17:2e:74:27:83:bb:73:a5:bb:48:
a8:e7:96:3a:9d:58:dc:e1:8b:d3:a7:55:d3:a5:9c:
75:f6:36:d4:2b:b4:ce:33:aa:7f:07:f8:ee:90:14:
60:20:27:28:cd:b4:bb:65:35:b8:16:64:95:67:95:
cb:9d:a4:f8:a9:30:ca:1d:09:32:81:9b:20:8e:23:
5b:5f:ff:1d:59:79:42:52:ee:e6:7a:34:c8:53:20:
90:52:59:3b:44:21:12:7d:47:d3:f0:1b:41:2e:76:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:20:0A:FF:60:BA:EA:8D:A0:71:88:53:0E:E2:1F:70:C7:80:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68d5d934-fed6-49a5-ae03-a28a586e9c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:a000::/40
Signature Algorithm: sha256WithRSAEncryption
94:fc:22:79:a3:e9:7a:23:46:9c:3b:9f:6e:cf:bf:30:87:4b:
5c:d1:57:74:09:ec:ae:e0:3b:fb:0c:82:f8:d6:49:e5:a7:81:
e5:ee:cd:3d:51:fc:29:3b:f7:ad:c7:97:c0:57:b5:6e:4e:5b:
7f:09:04:6a:fa:82:af:c2:b2:7b:a2:92:fa:62:c2:05:67:14:
06:dc:87:e4:e6:1b:58:91:a4:af:6c:97:d8:65:68:b3:9d:70:
2b:67:aa:b7:f9:e7:60:cc:9a:85:dc:a0:20:ab:bd:59:96:a4:
24:1d:ff:2c:8c:21:1f:d5:a5:41:d1:d9:9f:d0:a4:7d:ac:8e:
b2:eb:51:91:a5:f5:5e:7d:5b:a2:c2:17:b5:13:dc:2a:c1:39:
04:37:e6:00:38:b6:a6:68:fa:98:35:53:1e:df:03:2c:93:7a:
31:01:9d:e3:12:70:c1:10:52:da:20:fd:59:be:1f:50:eb:81:
d2:7f:e7:9e:d3:b3:44:5c:d0:e3:18:b3:ee:d9:e8:cc:5a:35:
7e:17:3a:cf:a2:71:33:8a:57:4b:f8:91:f5:1f:7b:2e:32:ba:
4d:4f:be:97:59:6f:33:7d:6e:9d:0c:9c:e2:a0:bb:e4:56:c3:
e9:65:74:e8:fb:68:35:b0:96:a7:98:20:64:e5:fc:45:12:7d:
5c:d4:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:37 2026 by rpki-client