Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
File: 70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa (raw, json)
Hash identifier: ODi86m65EQH5KWS+xd1ADD7hs6nKF2Tak8GzWV3c3gQ=
Subject key identifier: 39:CE:CE:63:BC:10:24:9B:63:1D:33:57:3C:13:0F:78:88:BD:87:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5590CD8C691DC5609838A4A150B172860C1F7041
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
Signing time: Fri 07 Aug 2026 05:20:40 +0000
ROA not before: Fri 07 Aug 2026 05:20:40 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:90:cd:8c:69:1d:c5:60:98:38:a4:a1:50:b1:72:86:0c:1f:70:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:40 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e0dbc100105f4534a0ad387572499faafdccc82a551042b1317d7d6ae84fa68a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:b4:bc:b1:cd:dc:f1:40:6b:c2:6c:a8:33:
37:d1:5b:75:e8:38:6f:b9:05:95:46:45:16:dd:d3:
b1:26:08:8f:0c:a7:4e:51:68:89:4b:cb:c9:5d:08:
de:ae:65:a5:9d:44:86:33:57:69:a1:21:16:23:68:
59:6f:0d:ea:6a:0e:a1:27:6b:6f:5a:98:d3:a7:92:
33:cc:07:d1:34:e5:de:74:fe:d7:87:0f:10:43:10:
9a:e9:4a:f5:b4:8d:e5:40:47:52:3a:41:0c:ea:8c:
41:2a:f5:e0:c8:29:0a:34:54:6d:5e:cb:35:36:64:
65:4e:f5:ae:04:dc:39:30:9e:96:12:af:2a:a7:97:
19:d6:0d:b7:48:e2:fe:41:f1:62:18:15:7b:65:b0:
48:29:94:9b:50:d0:76:39:5c:09:93:95:4c:24:99:
15:1d:19:5b:42:4b:03:29:4a:f9:17:18:6f:c5:f3:
a5:27:97:23:94:17:0b:45:ff:dc:41:1e:7a:05:21:
80:b6:a9:e0:d7:1d:f2:f1:7c:c8:dc:3a:86:30:7b:
78:f0:c7:9a:56:f5:9b:6b:5f:5f:73:a8:6e:b0:23:
1f:22:c3:fc:9b:78:12:46:0f:62:f0:fc:bc:68:21:
07:bd:39:25:31:46:6a:3c:b5:c9:bc:46:d5:f7:87:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:CE:63:BC:10:24:9B:63:1D:33:57:3C:13:0F:78:88:BD:87:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70a2bc6f-ae0f-4f13-9499-78c505a5f7c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:e000::/40
Signature Algorithm: sha256WithRSAEncryption
a9:14:22:76:c6:54:94:10:58:83:d4:a7:4a:b6:0a:21:31:47:
e5:f2:58:d1:02:df:6f:95:98:a1:e1:7d:2b:b3:56:a9:d8:31:
24:35:d6:a0:5d:8a:00:42:9b:15:00:ff:ba:c5:02:e3:87:7a:
02:db:23:86:e0:03:f0:32:c9:34:08:13:cd:b1:fb:d6:70:6f:
c4:ab:1c:ed:e4:a6:bf:09:9a:4c:e4:84:d9:91:72:75:15:e3:
67:15:1a:2b:0c:c9:e9:88:b2:f6:15:d2:eb:af:9d:a0:f0:50:
ae:38:42:f9:c5:94:66:cb:6a:90:c6:4a:a3:8d:fa:e7:98:db:
96:06:ff:09:8a:5b:98:72:42:44:c5:66:c9:ab:3d:4a:67:32:
a7:ff:2d:2c:04:19:0e:53:0c:1d:85:7d:17:e4:bf:44:88:c0:
0a:2d:b9:7c:43:a4:99:67:7e:43:88:07:5d:b5:f7:6e:df:67:
ae:89:33:f6:f8:f2:3f:3d:09:24:d4:23:16:39:5d:86:b1:ba:
a3:23:53:98:2d:30:54:22:80:c0:af:be:a1:d5:0b:e6:cb:2e:
27:c5:2b:ac:7d:c8:00:50:3d:4b:9e:e8:a6:4b:00:34:85:64:
64:2c:01:99:77:e7:02:31:3a:83:cb:dc:81:3c:6a:df:4d:69:
4b:0c:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:22 2026 by rpki-client