Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/737c5f41-6c2e-48d1-8283-0ed4a0a51859.roa
File: 737c5f41-6c2e-48d1-8283-0ed4a0a51859.roa (raw, json)
Hash identifier: 3jNoDgjEZxWEClCS7xbBvTBS75SOLgJX5FOzHTLrios=
Subject key identifier: F0:FF:DC:A9:C5:79:04:F2:BB:35:71:34:27:9E:AE:2C:98:B6:45:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26D4AA5624F5354121A9C4432128B6A2C1111403
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/737c5f41-6c2e-48d1-8283-0ed4a0a51859.roa
Signing time: Thu 10 Sep 2026 02:30:15 +0000
ROA not before: Thu 10 Sep 2026 02:30:15 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d4:aa:56:24:f5:35:41:21:a9:c4:43:21:28:b6:a2:c1:11:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:15 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=8421b9e219bf67ea456999d4862a48788b1dc03ef43c0dd25b20e1a3c01ec07a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:14:1c:5b:81:4f:92:f7:7c:21:e8:df:5e:
12:40:38:3f:c9:64:aa:85:ee:23:99:f4:cf:24:ef:
38:fd:5c:b3:80:78:35:83:07:09:f9:52:ba:d2:9b:
7b:bc:8c:41:33:9d:24:42:02:b7:17:e5:27:58:1d:
ff:6a:fa:0a:19:f7:a0:31:b4:c8:dc:3a:9f:44:e3:
77:af:c2:6d:4f:f5:1d:55:6e:8b:6a:ac:4c:d4:96:
a5:cf:34:a1:1d:83:75:62:d6:27:89:1a:85:8a:44:
4e:cb:1d:ad:78:cd:fb:a5:58:57:b7:a8:e9:73:06:
7b:37:12:09:62:8e:81:32:96:29:6e:e4:26:e8:4b:
5e:13:55:c6:0d:f3:8e:62:00:89:53:60:65:85:30:
0a:34:1f:a9:9a:da:c9:8a:31:4e:e4:92:01:67:76:
a1:82:13:73:d2:7f:f2:76:e5:f4:6a:64:2c:42:22:
d0:f5:63:fb:89:1a:71:4a:26:5e:b7:f7:96:c8:f1:
82:6e:1b:dd:7a:6a:1a:8f:15:49:67:a7:37:fc:c6:
eb:56:33:2f:a0:ca:4e:ce:65:72:bf:73:b9:d4:39:
60:ff:72:36:f8:cc:23:04:cd:31:ae:b2:91:8e:bf:
70:99:4c:63:7d:45:60:20:7c:c2:2a:9d:f6:56:3c:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:DC:A9:C5:79:04:F2:BB:35:71:34:27:9E:AE:2C:98:B6:45:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/737c5f41-6c2e-48d1-8283-0ed4a0a51859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:9080::/48
Signature Algorithm: sha256WithRSAEncryption
b1:df:a2:fc:39:5a:7e:ac:d4:b4:62:d8:a6:fe:3f:20:42:b5:
f9:f1:76:b1:6e:c5:c0:d9:39:5e:73:b4:fd:32:e5:4e:43:e2:
c0:ed:93:ae:c7:55:9b:99:d3:62:57:fc:47:7a:0b:4c:f9:02:
eb:09:8b:dc:35:fb:dc:c9:50:49:53:22:f8:c5:fa:8b:cc:c6:
27:f3:81:26:93:ff:d0:d6:7a:22:31:0a:a6:4b:dd:6e:56:92:
6d:e9:e1:cf:a3:ed:9b:a7:f4:e9:d1:bb:29:72:6a:3e:07:55:
2e:56:d1:81:39:d7:f0:49:92:df:5d:22:88:0d:42:4a:8a:9b:
41:b4:39:45:b7:1a:b8:d7:e2:bf:63:f3:cf:05:d8:eb:5c:d3:
29:cb:35:21:3d:27:00:b1:5a:41:25:4d:ce:9c:21:ce:16:1e:
16:28:b1:df:8f:eb:d7:18:ef:64:23:de:78:30:9f:18:1d:c1:
56:fd:da:52:4e:f0:59:d4:07:6d:85:8a:d6:35:be:6b:16:86:
19:8f:4d:cb:17:08:24:d1:3b:4c:b7:1e:df:4e:74:f8:ee:a8:
7d:ff:e8:e2:28:08:21:7a:18:13:ef:e4:4c:5f:69:20:1e:d7:
7d:07:22:34:9c:b0:43:c4:d6:09:7f:cd:cf:de:6e:75:da:f4:
84:e5:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:22 2026 by rpki-client