Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665ddf8-8431-4b40-8899-bd59a6232c0e.roa
File: 7665ddf8-8431-4b40-8899-bd59a6232c0e.roa (raw, json)
Hash identifier: WnI+dkdMk30t3+68ty9LuhUQv9O/UojSF8cWxlv75CQ=
Subject key identifier: 14:1B:C3:DD:CE:A0:6E:B1:76:AF:C8:F8:40:E4:F9:6C:08:04:8E:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05C342ABE3ED7860E85500FF3633B4330843348F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665ddf8-8431-4b40-8899-bd59a6232c0e.roa
Signing time: Wed 09 Sep 2026 16:12:56 +0000
ROA not before: Wed 09 Sep 2026 16:12:56 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c3:42:ab:e3:ed:78:60:e8:55:00:ff:36:33:b4:33:08:43:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:56 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=dbe5c8233d8be6ff595425685037e0ae7f9a8364b99021091cb86821d9f8e841, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:e0:b8:a2:f7:b4:ca:7e:fc:af:3d:7c:11:
c3:6f:44:5d:b1:f7:eb:d5:02:f8:ce:24:d4:52:9d:
d8:62:ae:4d:7c:81:75:c4:43:ab:23:4a:68:78:6c:
44:55:24:45:7b:dd:de:07:19:40:a4:b2:60:9b:2d:
a6:cd:21:bc:c1:12:4d:48:fe:68:ad:65:f1:49:96:
6b:6f:83:9d:15:e1:70:0e:0f:bd:21:3d:56:5c:12:
13:4d:bf:a8:9a:2d:b0:01:91:92:fb:ec:fb:4d:f6:
c8:1c:ba:8d:9f:70:4b:82:6b:47:9d:b4:9f:eb:82:
26:d0:34:4e:b9:f9:59:34:12:e3:2d:18:44:8e:86:
df:0e:00:c6:44:c3:ff:9b:35:18:e1:bd:e0:03:58:
d1:c4:9f:7e:68:c7:62:c3:c7:88:7d:89:5c:50:87:
45:e0:bd:28:78:6c:ee:e1:db:36:73:79:5d:ef:ba:
f3:e4:18:e3:25:65:7c:68:f3:e3:d0:3c:36:c7:b7:
bd:ca:f3:ff:33:d0:60:89:a8:15:11:3e:db:7b:cc:
58:b3:87:62:8a:11:88:25:fc:cc:c5:30:f5:1b:8a:
a5:22:9d:3c:d3:d5:6f:64:dc:85:ae:33:6b:06:89:
98:52:8b:c9:5f:2a:dc:39:0a:1e:07:4d:b4:4a:7c:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:C3:DD:CE:A0:6E:B1:76:AF:C8:F8:40:E4:F9:6C:08:04:8E:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665ddf8-8431-4b40-8899-bd59a6232c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:800::/40
Signature Algorithm: sha256WithRSAEncryption
c3:77:de:43:cf:a5:aa:d6:db:ba:07:d6:5a:e0:f5:ea:63:8d:
f6:1a:29:c5:88:9d:47:ab:28:40:c1:4b:4a:a5:9a:d3:47:eb:
44:6f:00:cb:f0:27:c9:2d:ca:cc:30:fd:e0:b9:4e:6e:20:8e:
78:75:ae:8e:30:21:c3:3e:9c:76:92:f5:12:c7:05:ac:a1:d4:
b3:2f:06:54:a1:c1:38:34:a5:d8:1f:04:8a:65:82:6a:59:0e:
43:eb:82:f0:42:8c:dc:db:45:37:ec:17:b5:9b:ff:7f:ac:a7:
f1:5a:cb:da:22:15:6c:66:63:13:4a:8d:59:08:ba:ab:d4:e2:
aa:20:e3:0d:13:ce:54:b6:5e:76:76:54:40:ae:e0:63:cb:55:
fa:5f:8d:b9:5c:de:e4:99:62:2e:55:b9:bd:39:8d:17:6f:17:
7f:cd:ca:84:f1:f8:92:10:79:30:0a:17:40:85:d4:77:ed:86:
d0:0e:0c:8e:90:b6:ae:4c:31:36:07:39:6b:68:06:1a:0a:e4:
d5:12:f1:dc:1a:a9:88:05:bd:0f:40:41:41:e4:82:e7:c9:b6:
6b:77:5c:16:6a:92:7e:33:9e:08:75:24:f0:10:bb:1b:27:da:
c9:20:8f:63:43:49:3a:22:fc:1e:5b:c1:16:f8:c9:c0:dd:48:
33:8d:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:16 2026 by rpki-client