Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77421efc-8aa1-4f32-a913-c2d22506d3de.roa
File: 77421efc-8aa1-4f32-a913-c2d22506d3de.roa (raw, json)
Hash identifier: RwdAGJtC5RFUXFhfKoAADfp6A/nhpBFd54xt2AZ6DBg=
Subject key identifier: C6:50:C0:4C:DB:D7:35:03:FB:7F:D6:D7:25:ED:9E:D2:2D:07:7F:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 614508E39F449FDEDE22EF1A0F295DC49A92C75E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77421efc-8aa1-4f32-a913-c2d22506d3de.roa
Signing time: Wed 09 Sep 2026 16:15:22 +0000
ROA not before: Wed 09 Sep 2026 16:15:22 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:45:08:e3:9f:44:9f:de:de:22:ef:1a:0f:29:5d:c4:9a:92:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:22 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=5eb843e64a6fd739f0b2f1abe86d420cc4a24da38cd8b5163eaa44fc7df5846d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:75:c1:a5:b9:b9:65:49:75:1d:79:40:f8:
6b:b9:f0:ee:80:95:d2:e5:16:00:54:9e:38:06:7b:
5e:3b:c2:82:20:ae:25:54:bb:67:fd:d3:21:fa:71:
52:28:e1:cb:8b:3a:bd:09:74:14:12:9a:e1:0e:da:
c3:8b:09:ca:7b:dd:03:83:a0:10:e0:3b:76:73:9e:
43:9a:86:d8:b1:ee:e7:f6:71:d6:3c:a1:85:97:f6:
95:98:9c:05:7c:d6:dc:5b:30:14:e0:5b:4e:e9:58:
09:0b:d5:70:c9:b6:6d:34:51:fb:49:18:eb:1f:de:
35:ae:01:c8:3c:93:39:99:d5:16:e9:4b:a4:f0:5d:
e7:3d:3b:e8:1f:e4:80:4d:6b:04:5f:a8:2c:b6:ed:
5d:e7:03:fe:e6:c4:68:ba:aa:8f:e0:fd:97:2d:c5:
6f:34:8f:62:eb:8a:aa:3f:e6:16:67:95:96:70:30:
10:57:96:0d:5e:23:a9:4b:04:20:92:b0:43:67:e6:
c2:01:93:c0:f0:99:51:fc:a7:ec:11:1b:c3:fb:fe:
86:2d:39:23:e6:0f:67:1d:8a:88:e1:5b:fe:f1:b6:
bf:4f:34:90:13:78:8d:93:98:46:de:39:a1:1c:d4:
67:1b:43:e7:0e:ac:e0:8e:b2:6c:19:ed:8c:1b:07:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:C0:4C:DB:D7:35:03:FB:7F:D6:D7:25:ED:9E:D2:2D:07:7F:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77421efc-8aa1-4f32-a913-c2d22506d3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8800::/40
Signature Algorithm: sha256WithRSAEncryption
86:60:6c:48:1c:ea:ce:ed:79:b5:2f:65:43:cb:1c:b9:1d:45:
f2:bb:fc:a8:62:2b:c5:28:49:c4:0b:a4:cc:78:e7:d3:f7:74:
5a:2c:a9:db:e8:69:3c:2f:c7:12:1d:4e:e5:ad:7c:16:7d:03:
d4:5d:45:14:3e:0b:a8:6c:2c:f9:1b:11:0a:c4:7c:c3:72:9e:
ce:74:fe:de:46:07:a1:24:2e:4b:c3:4b:11:b0:c2:b5:9c:d2:
5b:52:2c:6d:7e:80:cf:46:df:63:00:48:17:f3:92:bc:4e:4c:
9c:9f:06:cc:fc:8c:96:17:a8:3d:1c:5c:ba:bb:0c:78:96:28:
35:93:64:04:c4:75:1e:92:09:3f:2b:29:00:f6:b5:3c:8d:d0:
dd:b3:aa:c1:f6:bc:16:fd:9b:a2:3e:14:82:23:16:9f:76:28:
5e:b9:08:ef:ce:c0:4d:ce:b1:a0:a6:5c:dd:72:4d:2f:65:93:
c5:28:8e:c0:04:8c:d9:7a:83:eb:4c:52:ba:94:ab:ed:1f:09:
30:5e:c9:21:3c:05:fb:00:08:25:41:e5:2d:80:f3:a4:92:e2:
a0:f7:1d:12:17:9c:fe:bd:e7:5d:91:d1:7f:9c:95:14:34:92:
bc:35:44:27:12:b5:7a:e7:fd:b7:96:d6:dd:7d:d9:9f:80:e6:
dd:5b:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:49 2026 by rpki-client