Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
File: 73745b45-c65b-482b-9e7a-25a90d279147.roa (raw, json)
Hash identifier: HxGIzRRQ8yhMYD2RDl/Ttk1rErA3GWy6ZJAF0Ah23tQ=
Subject key identifier: EF:98:F8:3B:66:51:84:CD:A4:14:0B:C2:93:41:75:00:7F:81:2A:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36C71F860B22EE7B505B323FB77128FB0D7CE8A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
Signing time: Mon 03 Aug 2026 01:30:13 +0000
ROA not before: Mon 03 Aug 2026 01:30:13 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c7:1f:86:0b:22:ee:7b:50:5b:32:3f:b7:71:28:fb:0d:7c:e8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:13 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=a8eef0ceb4108cdb3293b0676068a43a7eb826965316be178ba7da66bd02ba4a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:19:d6:e9:41:3b:77:46:91:b3:8e:58:a9:
77:e4:b2:a9:82:9e:5a:a8:b1:7d:45:c5:d7:11:6a:
41:c5:37:15:3d:c6:a8:ac:c2:ec:3a:35:9b:5b:93:
d4:5d:99:50:6e:8f:ce:b1:14:bf:73:ce:ea:fe:7e:
82:45:d6:8c:0a:d4:90:58:97:99:74:88:d4:6d:e6:
e9:9f:39:d3:11:78:92:c5:80:52:e1:bd:fe:13:58:
9c:92:98:cc:49:92:74:94:d1:2c:d2:04:c6:d2:13:
01:36:6d:09:d4:6e:ef:c1:5a:92:18:0d:19:34:49:
ec:79:73:af:e5:83:46:7b:12:df:29:a3:0a:c2:f4:
41:96:16:0a:62:34:63:a8:38:69:f2:a7:d2:d4:4f:
07:52:43:bc:33:c1:15:75:37:01:9c:f9:13:b4:f9:
87:ff:72:ae:d2:6d:9c:5e:a5:a6:94:2c:67:e3:cd:
10:9e:80:4a:7d:f6:66:96:b7:98:04:00:ff:30:78:
8d:5d:56:16:86:79:d5:b0:91:0b:ed:88:24:33:45:
d4:91:26:f6:27:8b:a7:3a:a5:27:cd:72:32:f8:80:
dc:3a:1d:4b:18:ba:2a:7f:cf:46:42:cf:97:00:01:
72:16:d4:4c:bf:43:7c:84:3c:62:00:4e:11:9e:e8:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:F8:3B:66:51:84:CD:A4:14:0B:C2:93:41:75:00:7F:81:2A:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73745b45-c65b-482b-9e7a-25a90d279147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4000::/40
Signature Algorithm: sha256WithRSAEncryption
24:e9:25:df:bc:11:e1:dd:29:ce:63:d6:c7:b7:dc:75:78:16:
c6:43:ee:74:84:92:9a:ea:89:d4:74:67:b6:bb:3b:ed:a5:7a:
e2:8b:7b:df:96:16:42:ce:5a:e6:98:89:11:e2:99:53:31:0a:
ad:0c:36:04:43:3d:52:4f:dd:5a:0b:17:a9:18:d1:a6:a3:44:
10:3b:03:4f:30:04:7b:06:20:19:c5:99:6f:c1:92:b8:f6:b3:
43:ef:d0:1a:ef:23:73:6b:c5:ab:c3:0b:d9:d2:71:2b:79:77:
61:68:ae:ef:67:5c:92:26:4b:c3:22:dc:8f:6c:a6:80:6a:ad:
6f:c9:04:0a:12:64:7c:db:d6:ec:18:d8:b2:00:65:69:a8:d5:
c6:a4:6a:37:63:33:02:e1:59:00:ec:67:e6:53:99:6c:dc:aa:
c5:6d:8d:bf:20:e4:4e:c8:b4:76:2d:35:e2:be:5c:05:92:44:
c2:75:60:d8:cc:bd:28:6f:f3:d7:ed:7d:e2:90:37:77:6c:12:
21:b3:cc:2c:a7:8a:b8:5d:a3:1d:f6:9f:74:4b:21:3f:61:84:
17:8c:0e:28:f9:82:7e:7d:ce:31:ba:8e:af:5d:dd:28:38:28:
3d:52:43:9f:81:bf:f2:b9:2f:99:6a:7e:ce:4d:68:6a:0a:f9:
99:4e:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:35 2026 by rpki-client