Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
File: 788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa (raw, json)
Hash identifier: EjWTdHOwPY5uLYDwfBZuZeCMpVJhJ957ZsyI760cZws=
Subject key identifier: 65:F9:2F:38:39:4B:BD:1E:31:33:79:2D:B1:DD:51:69:3B:BD:63:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F7EA28388304D8849BE3B78AF17561CF02B950B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
Signing time: Fri 07 Aug 2026 05:31:06 +0000
ROA not before: Fri 07 Aug 2026 05:31:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7e:a2:83:88:30:4d:88:49:be:3b:78:af:17:56:1c:f0:2b:95:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f5181644ecad87188f859a05494e0e97aab25501323da8bb1128c7ee277c19e4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:d5:f4:3d:0c:6f:45:40:cd:80:14:11:a1:
45:1a:a3:c0:5e:71:7b:31:c4:42:2c:c6:73:97:6b:
85:f6:5c:d4:94:39:41:0f:6e:54:d7:0a:ec:84:15:
6e:7f:e4:cd:a3:04:ab:1b:9d:f1:00:13:22:26:4d:
e9:5a:c6:b0:04:b7:48:58:2d:86:ac:c7:ed:81:bf:
7d:2c:3c:87:91:a2:9c:9c:87:0d:61:3c:7c:85:59:
b5:b0:3d:7a:23:25:7e:9c:06:fd:0e:02:aa:ea:55:
2f:71:98:4d:93:2c:f1:f6:d1:4d:7e:1c:8c:fb:f4:
af:ed:aa:d2:d5:4a:e4:1f:9f:38:84:ef:00:84:37:
d9:1c:10:cd:e7:f3:a5:7f:93:60:d0:e4:64:b0:1a:
7c:11:87:c5:35:99:6a:16:77:ad:dd:07:08:fe:9f:
68:bc:c0:2f:d5:c4:08:86:64:18:b1:a2:a6:24:6c:
32:19:45:25:24:bf:70:a4:8c:1e:25:47:52:00:c0:
a6:e4:0c:98:5c:05:34:03:58:f6:a8:c7:35:b9:17:
2a:45:b2:37:46:1c:bb:7a:0e:46:af:4d:1e:37:48:
ce:8c:f5:09:f0:5a:da:ee:0c:79:8d:70:92:02:4a:
98:16:ca:a3:8e:d2:4b:4f:c6:f8:60:5f:ec:b2:36:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F9:2F:38:39:4B:BD:1E:31:33:79:2D:B1:DD:51:69:3B:BD:63:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:9000::/40
Signature Algorithm: sha256WithRSAEncryption
74:cd:25:e3:e2:c0:a6:aa:06:b8:87:f3:d5:f9:b3:c7:eb:99:
ad:36:2f:5e:4c:5d:72:d6:e0:2e:04:8d:4e:21:e0:c0:0a:53:
c8:78:0d:bc:88:bc:a9:13:6d:c2:18:48:8c:61:b7:a9:d0:7a:
48:99:ba:1e:47:49:a8:df:b6:a9:e1:2d:d8:f1:9d:90:ab:b0:
3f:f9:ef:76:a4:77:d1:dd:3a:a2:86:65:b8:ed:ec:7f:2f:a9:
b8:8b:64:58:82:c8:ed:ce:ef:34:35:45:b8:7c:dc:7d:f3:97:
7f:8c:4f:3d:58:30:e1:9b:b7:3a:90:d7:a5:51:2c:8f:1c:8f:
40:bf:6e:30:23:13:20:94:8a:32:ca:a6:d7:d2:9e:5f:0a:fb:
b5:8c:c1:b5:15:d8:db:43:f6:b3:74:39:eb:06:b5:bc:c8:d2:
c9:61:33:1d:36:90:0b:e8:97:e7:85:e3:0e:57:77:97:bb:06:
d2:74:b0:81:2a:08:6e:3a:9e:86:e9:83:db:8c:e7:22:c2:e8:
78:0c:ec:a5:12:71:7a:19:9d:7a:07:a5:12:25:37:d2:ce:15:
0a:40:a8:d9:d1:88:39:bf:54:4b:68:80:85:20:ab:64:2a:47:
9e:1e:9b:ee:f8:97:27:97:47:fd:9b:4e:f6:f1:7e:35:5d:5f:
a6:ea:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:05 2026 by rpki-client