Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ddb8169-a0ba-4989-b488-a344085c56c9.roa
File: 6ddb8169-a0ba-4989-b488-a344085c56c9.roa (raw, json)
Hash identifier: MapUcPEFqz6Y3ffdh/ut7ByoqQpIjCEtwbEi9+llP+E=
Subject key identifier: F7:D0:C9:DB:A2:4B:18:E7:A6:EF:69:9C:D8:BA:F0:86:6E:47:0A:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DF397D9B9D93BE9EEA99A098155C24D649F6DF7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ddb8169-a0ba-4989-b488-a344085c56c9.roa
Signing time: Fri 07 Aug 2026 05:10:38 +0000
ROA not before: Fri 07 Aug 2026 05:10:38 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f3:97:d9:b9:d9:3b:e9:ee:a9:9a:09:81:55:c2:4d:64:9f:6d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:38 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5484b458ef9c337c43850a118d32ccc28d62bf8c4b19d0f5406009ffe1c269e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:7a:70:42:38:fa:d5:17:b0:88:81:d7:90:
9c:55:ba:85:f7:99:38:2b:f8:a6:4f:6a:00:12:42:
56:48:a9:22:b3:9f:ef:15:69:a4:04:9b:df:e8:ef:
6c:03:2e:82:92:9e:87:60:66:7f:ad:9e:81:11:c0:
8e:27:77:86:a0:20:96:71:58:cf:a7:95:89:35:0f:
9e:bb:7d:e3:a8:7e:5a:0e:5f:38:7f:4c:84:c4:d2:
19:c4:7d:be:26:6c:d9:c3:db:5d:21:5b:d3:87:d5:
28:9f:04:ac:7e:8b:ba:67:1d:04:0d:24:30:ef:05:
37:8b:77:bf:1c:67:63:67:aa:14:16:93:64:13:c6:
a8:f2:5c:58:a1:76:03:ca:c5:b5:6f:ac:0d:37:c8:
cf:8d:b1:9b:e4:d2:8c:be:26:fe:1a:e9:fb:0f:8d:
5b:44:12:b4:ca:7b:76:b7:68:3d:a0:cb:20:ed:24:
7e:83:82:e7:85:ed:a9:6c:6b:93:76:bb:2e:ca:a2:
4b:9b:b2:b6:df:6e:07:57:47:26:68:98:34:0f:1c:
40:7b:84:25:b9:24:ea:dd:a6:c8:f5:bc:02:45:54:
65:b0:0c:cf:48:bc:dd:04:25:36:4b:80:1d:67:8c:
96:29:e4:62:55:ff:d8:93:4e:7f:39:9a:c5:00:76:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:C9:DB:A2:4B:18:E7:A6:EF:69:9C:D8:BA:F0:86:6E:47:0A:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ddb8169-a0ba-4989-b488-a344085c56c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:c000::/40
Signature Algorithm: sha256WithRSAEncryption
98:41:72:db:d1:fd:18:b1:32:c5:cd:95:28:cb:6c:ca:12:ee:
96:c4:8e:43:31:23:ac:7f:c1:db:bb:e8:0d:a9:f2:29:d2:1f:
00:25:8e:e0:ef:9b:fd:f8:e2:35:64:85:6f:db:f5:fc:f3:57:
ad:f9:da:f7:5e:5f:0b:78:df:33:18:13:64:25:57:2e:fb:22:
27:f4:64:7e:d1:cb:70:33:c7:89:a0:b9:c2:a3:61:48:f3:c4:
8b:87:ba:a9:db:a6:fd:3e:ca:f1:f7:1b:46:65:7a:51:d2:3c:
05:15:b6:54:6c:c4:95:0a:82:84:ae:e4:16:40:ae:09:d8:db:
88:92:fd:84:5b:42:f2:1a:dc:35:33:c0:16:83:ac:f6:ec:bf:
55:6f:69:66:87:ec:fc:29:45:4a:34:d4:ca:5c:32:36:ed:7a:
e2:c1:e4:2e:42:b8:ef:89:91:6f:17:ac:96:72:0e:bc:b3:52:
9f:96:e1:40:9e:4d:56:46:03:9a:17:3f:38:93:00:ed:4f:08:
a8:bd:75:a6:03:7d:8f:14:81:8a:5f:ea:b4:32:71:79:71:01:
09:8c:0f:01:43:78:40:d8:a3:0f:ce:c8:2e:fe:f6:3e:aa:71:
f6:49:9e:24:37:56:b8:db:44:11:11:30:3e:3e:5d:ae:c7:ee:
10:73:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:08 2026 by rpki-client