Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
File: 76a60505-d74d-4741-a42e-97a09bb6b2a1.roa (raw, json)
Hash identifier: abAsKkLUielzU4HSucwvQv0j0HyNAyM93Z1XPQ2+He4=
Subject key identifier: B1:D6:1E:E4:9E:8C:88:D1:02:40:F0:F1:6B:7E:D3:C0:9E:72:5E:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60DBF71E911B59E862DB8EC69219EA0F6CA84A67
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
Signing time: Fri 07 Aug 2026 05:20:45 +0000
ROA not before: Fri 07 Aug 2026 05:20:45 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:db:f7:1e:91:1b:59:e8:62:db:8e:c6:92:19:ea:0f:6c:a8:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:45 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=64807fc0e6f7bce566f8c1cca5d22c1c338a88bf9335586608465133b894fefe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:fa:08:ef:94:f6:e3:4d:88:39:11:c1:97:
d2:96:2e:65:61:9a:ae:aa:49:d4:12:9e:43:6c:4d:
13:3c:eb:bd:d3:9f:1a:c3:da:cf:96:65:dc:91:aa:
54:15:ff:8d:f0:2e:9c:e0:7f:a1:5a:94:80:8c:d4:
1c:31:19:42:81:bd:0b:c0:00:0c:43:cc:c6:98:d3:
b9:99:48:78:6b:57:bb:e1:7c:c7:39:c0:83:62:4c:
36:78:b7:0f:c6:34:f6:b5:18:cd:96:2f:e1:e8:30:
ea:32:3d:cc:e0:87:78:c1:6e:15:d1:d0:09:6c:c2:
0c:e4:20:d9:f3:0e:88:40:50:30:17:1f:45:c3:b8:
8a:ef:2e:55:64:37:bc:09:fb:74:b6:bc:7d:0f:bb:
d6:b9:e6:f1:16:42:69:03:c0:de:22:b2:1e:62:c6:
55:dd:1e:08:8c:43:10:8e:3e:ae:02:2a:ba:81:07:
a2:2c:83:08:79:78:fb:64:6c:d4:ea:8b:4e:fb:64:
30:3f:92:5c:47:44:91:46:94:70:ec:19:6e:8e:bc:
ba:87:a6:0c:da:8f:50:28:6e:2d:1e:56:56:d4:73:
6f:0c:a6:54:91:d0:c5:eb:c5:ea:c6:06:66:19:21:
e5:23:9a:a3:77:55:40:86:85:5a:4b:d3:cd:28:bd:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:1E:E4:9E:8C:88:D1:02:40:F0:F1:6B:7E:D3:C0:9E:72:5E:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76a60505-d74d-4741-a42e-97a09bb6b2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8080::/48
Signature Algorithm: sha256WithRSAEncryption
20:4e:19:4f:f5:9c:4a:b8:53:26:00:ae:6f:88:e7:56:f1:23:
2c:b8:9b:5d:0d:8c:e1:8d:1d:bf:5d:36:00:fa:69:87:f4:32:
70:41:de:cb:18:84:1c:ef:f7:bc:28:20:ea:f6:d8:98:ff:b4:
08:e8:ae:f6:1c:76:a0:ca:e7:29:72:d5:7a:36:41:5e:cf:a9:
51:24:da:12:04:59:80:54:db:0d:10:8d:dc:36:c6:1d:e7:26:
72:3e:22:44:9f:d2:4c:f3:86:9d:ec:7b:59:73:a1:13:65:ae:
7a:a6:37:49:dc:c6:cd:b5:ba:92:64:a8:13:73:de:19:9a:ba:
2d:85:50:7d:ed:85:a7:d3:c2:8d:47:d3:cf:c7:35:45:14:6e:
ca:b2:6a:a7:58:bd:7c:7d:1a:9a:e7:b4:9e:f0:b5:c7:bd:2a:
b7:5b:b4:23:7a:da:ca:cb:0d:88:34:c0:a0:d1:13:f7:99:ff:
43:f3:ab:1a:bb:33:f1:03:9b:f1:69:27:61:21:9b:e3:df:e6:
f7:1e:ec:84:21:3f:3c:0f:3d:af:72:0d:da:66:e1:92:ac:84:
35:59:b2:fc:d7:17:43:86:7e:eb:87:75:a1:5c:73:98:42:33:
c8:7f:48:05:5c:9d:e3:e8:b7:ad:2d:cf:99:bc:6a:0c:61:45:
c2:f7:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:14 2026 by rpki-client