Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73987289-e638-41dd-a128-5dc2c958a4ba.roa
File: 73987289-e638-41dd-a128-5dc2c958a4ba.roa (raw, json)
Hash identifier: Jnw8iThrbNn89JUn4Uric41bCeLVHcJMrR80f/DU4ec=
Subject key identifier: B4:C9:42:21:50:61:50:B0:E6:EE:70:34:7D:2C:00:66:50:11:69:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BDDD78E33E849DD1A00D172EC97072D9CBEE11C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73987289-e638-41dd-a128-5dc2c958a4ba.roa
Signing time: Wed 09 Sep 2026 16:14:00 +0000
ROA not before: Wed 09 Sep 2026 16:14:00 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d069:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:dd:d7:8e:33:e8:49:dd:1a:00:d1:72:ec:97:07:2d:9c:be:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:00 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=837ab03cb734a60732c8edca0b43d11b953bb776728b315b90108beae2e98519, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:47:ce:f3:b7:f1:43:c8:85:d6:13:a1:e3:
a1:94:0b:fd:4c:57:ab:49:47:9d:fb:d5:03:bb:b1:
48:26:72:01:e3:27:d9:d6:a5:2a:3e:cf:10:b5:22:
fc:82:4b:d9:5f:c7:b8:65:b1:bf:7a:c1:05:21:eb:
bc:8b:15:75:99:0d:fe:56:2c:f0:a7:61:50:4b:5f:
cc:96:03:8e:1a:3a:0d:69:40:c6:2e:95:a5:bd:82:
33:fa:c6:1c:d2:d5:e5:5a:31:5d:a1:dc:c6:17:78:
9b:5d:ec:60:f3:91:ba:da:ae:04:56:25:c6:5f:8a:
d5:92:b8:5b:fb:6a:35:a5:26:50:01:55:bf:3e:ec:
ee:e6:b9:9a:0a:80:5f:44:82:40:3e:ff:38:17:50:
5b:0f:36:e2:84:ea:ad:17:2c:35:06:8e:6b:de:bb:
26:74:05:d3:31:3b:0e:74:23:cd:84:a5:8b:6a:b1:
26:cd:bf:14:03:c9:20:f7:fb:a5:2b:d5:fa:93:79:
0a:d8:bb:2a:43:9e:7c:c2:b3:20:c0:99:a5:61:dc:
fe:e8:4b:a6:08:d0:4d:88:1f:00:f2:39:72:98:b1:
07:9b:e6:d2:e9:a0:55:ee:f2:42:7b:fa:8f:c9:fe:
c3:8f:ed:d8:4a:30:31:c8:a7:b8:4f:ba:2b:7b:3e:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:42:21:50:61:50:B0:E6:EE:70:34:7D:2C:00:66:50:11:69:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73987289-e638-41dd-a128-5dc2c958a4ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d069:8800::/40
Signature Algorithm: sha256WithRSAEncryption
84:d7:de:36:ba:0e:6c:7e:2e:fe:0f:5c:d0:11:c7:47:59:20:
bb:72:ce:38:63:f7:7a:d3:ec:4b:b5:b8:61:df:90:a9:bd:f4:
b6:b3:51:a0:07:6c:cb:82:7e:aa:41:7e:bb:e3:1a:a7:b5:d6:
46:89:33:7a:7f:33:17:93:55:a9:22:22:39:5b:1b:79:02:fe:
f2:21:1d:43:0a:eb:d6:28:14:2c:2b:e4:a8:40:1e:c1:22:20:
a8:c0:79:bd:16:30:d2:0e:47:fc:e9:72:0f:30:10:2e:49:ea:
98:7a:7b:94:14:6d:4d:4c:2f:90:c3:d1:75:fb:3d:e0:45:e1:
84:57:17:3b:d1:be:b7:ae:52:ec:14:de:23:28:30:a7:07:21:
89:ff:78:cb:e3:02:56:15:c1:a8:73:de:d1:c6:eb:30:24:ae:
b8:52:8e:4b:39:2f:34:5e:3f:75:e1:1e:e9:04:ed:b1:f0:b1:
fe:18:0d:2e:bf:e8:4b:54:0a:f2:ab:03:83:16:ce:d0:50:4f:
24:89:7b:0f:29:66:e8:4e:2a:64:d7:fc:85:70:78:9a:b7:26:
e5:88:7b:81:7b:71:10:84:bb:59:6e:97:bb:b5:15:0a:5f:ba:
ed:94:8e:97:65:d2:10:53:25:ab:95:0e:6e:0b:e7:9e:c5:b4:
68:71:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:41 2026 by rpki-client