Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7702ca43-6770-4c3b-af7b-802e8824e193.roa
File: 7702ca43-6770-4c3b-af7b-802e8824e193.roa (raw, json)
Hash identifier: WVGq7BW1KdULgU9ehQUbVVQp3/76XF19Yn98G16D1+c=
Subject key identifier: A6:BF:DF:1A:54:30:97:A2:29:A8:80:88:22:C3:41:8E:B3:6C:7D:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52A55D7A4A9D3725415E43F5C1D558C371B6BE75
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7702ca43-6770-4c3b-af7b-802e8824e193.roa
Signing time: Mon 10 Aug 2026 01:00:50 +0000
ROA not before: Mon 10 Aug 2026 01:00:50 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a5:5d:7a:4a:9d:37:25:41:5e:43:f5:c1:d5:58:c3:71:b6:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:50 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=b377b1d69182e9e7ebd7c6f2888b3fcd2bc72133f3e17dec4d08170e30cda367, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:7b:1a:17:40:30:b7:f6:46:52:f5:5f:69:
ad:88:b1:1d:c3:93:09:fb:61:fb:7e:bc:d8:38:4d:
fe:8e:0f:ba:93:2b:60:1c:c2:b6:62:97:ba:74:3b:
72:66:44:57:3f:17:41:40:58:8b:b6:ac:91:26:a4:
ab:57:8a:35:4a:89:72:51:ea:47:57:ea:d9:3a:c2:
a4:c9:c3:9f:16:3d:bc:ad:27:52:7d:de:8a:3c:4e:
22:86:85:2b:39:ba:e4:b8:43:98:b9:c5:3f:70:c7:
1f:2b:f5:bd:0b:d1:23:79:e6:50:5e:e4:58:2b:e2:
59:5b:69:d2:ac:3c:a3:0d:d2:9c:90:2e:43:fd:67:
d8:0d:9f:20:c0:bb:b9:57:ea:5c:b7:9a:31:c3:d1:
66:1d:3c:ed:1c:df:37:05:c6:4b:e0:68:7c:77:88:
e6:b4:ca:84:fe:17:e9:33:b3:9f:34:7b:a0:b2:7a:
4d:e8:2f:73:7b:34:d9:cb:e2:d0:1d:03:ef:54:1f:
4c:86:c8:aa:2f:ea:70:14:0f:00:44:a4:78:3a:db:
ed:99:cb:ba:71:dd:1d:6b:6b:aa:04:4f:79:fc:8e:
61:43:e9:03:8d:c2:19:d4:37:69:fe:72:d4:45:1c:
7a:5a:dc:7c:39:43:17:4a:b2:61:5e:d6:63:d5:11:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:DF:1A:54:30:97:A2:29:A8:80:88:22:C3:41:8E:B3:6C:7D:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7702ca43-6770-4c3b-af7b-802e8824e193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:5080::/48
Signature Algorithm: sha256WithRSAEncryption
33:11:d3:1b:cc:a5:f9:74:26:62:a8:52:a0:92:88:f0:7d:dd:
32:84:c9:08:66:fe:81:7e:9c:bd:48:3b:d7:23:59:b6:40:96:
34:d6:b5:70:05:a2:68:06:2f:dc:12:8e:16:86:5c:38:0e:6b:
bc:24:18:a4:a9:5a:6f:7e:73:4d:63:32:21:57:3d:60:42:db:
3b:35:24:d0:04:c4:cf:23:ce:8d:9a:79:af:40:e0:6b:51:2c:
48:4a:d3:64:41:c7:19:4d:18:2a:81:f3:92:36:57:d9:78:77:
f7:65:e6:d1:59:ab:17:ce:78:70:32:c9:99:3a:90:60:75:c8:
fc:58:39:ce:f8:73:48:70:a0:23:4c:95:7d:e8:0c:7a:f3:72:
3b:2e:62:2a:be:d8:4f:45:6d:75:68:26:1b:af:06:11:00:24:
6d:c0:36:ee:6f:e9:c9:eb:fb:84:c5:9b:df:ab:d5:27:03:2c:
b0:ab:3d:7c:09:18:c1:30:48:79:a2:1c:65:b1:86:a1:92:23:
07:2d:7e:3c:ad:4b:e3:2e:36:4d:25:04:73:c3:bf:2a:a4:11:
e3:a0:8d:d3:f1:a2:11:7c:fc:4f:b7:92:c4:d6:ff:e3:52:7b:
af:f8:97:de:55:fa:45:e2:1e:fa:9e:16:ab:3d:ae:c0:0f:10:
7d:8a:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:49 2026 by rpki-client