Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
File: 79440387-66a3-4852-a94b-8a3250f20726.roa (raw, json)
Hash identifier: MWe7vZ69Fc3i1Q0x85XTsDWHdFJmPn3RBJ9KEEemTXE=
Subject key identifier: F3:44:09:40:EA:5B:49:8A:7C:CE:46:90:5F:4A:85:2B:47:10:B2:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FAAFD310A81C5CC5FE490D16AEDFA4DFC476EA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
Signing time: Fri 07 Aug 2026 04:30:36 +0000
ROA not before: Fri 07 Aug 2026 04:30:36 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:aa:fd:31:0a:81:c5:cc:5f:e4:90:d1:6a:ed:fa:4d:fc:47:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:36 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=27a20c18d5e5d38b800e9f323fd5f1868341fef0d7f89f0f6493d6c536793109, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:b5:4a:75:96:6a:8d:8f:29:d3:e6:e3:cd:
68:37:3d:58:14:49:43:46:3b:1a:da:41:65:11:1e:
bf:4d:8c:f9:1f:e0:fd:fc:34:51:cd:91:ae:d5:31:
7e:ad:b7:c0:e3:ef:92:49:81:3f:fe:66:45:42:f7:
12:18:11:00:8d:61:ec:6a:9a:ae:9d:c9:66:7f:47:
31:13:94:8c:e1:09:e0:ff:44:73:ba:6c:a2:30:30:
07:91:9d:f8:45:a9:bc:15:bb:36:ba:92:a1:e5:0e:
ca:0a:8c:44:0b:7e:26:b4:f2:54:f0:2a:0d:34:ae:
25:2b:55:ec:70:53:fb:ed:d1:fc:04:2c:eb:94:f2:
9f:06:fb:c1:b1:7c:b1:a2:73:5b:a5:1f:0d:32:3b:
f9:9b:a9:68:2f:96:7b:b1:59:3f:fa:1e:f6:05:28:
1c:1f:87:99:46:92:eb:65:eb:3c:1b:e4:cf:eb:bf:
d9:f4:2d:36:74:ea:41:2d:fb:24:16:c0:48:ed:b9:
4c:89:cb:87:0f:5a:c6:af:81:07:95:5f:19:07:e6:
55:d6:25:a1:8c:db:4c:6b:19:cd:25:2e:48:c5:f5:
80:8e:79:cf:19:33:ec:8c:56:b8:4a:2c:96:85:c0:
d6:c3:20:bf:54:f7:c4:48:89:0d:27:12:5d:0b:01:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:09:40:EA:5B:49:8A:7C:CE:46:90:5F:4A:85:2B:47:10:B2:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a040::/48
Signature Algorithm: sha256WithRSAEncryption
0c:4b:83:bb:7b:ec:61:81:34:09:14:48:54:df:a5:83:9e:e2:
1d:7e:21:45:f2:3a:0d:e2:87:a5:ca:0c:ca:2c:54:2a:db:f2:
28:86:7c:d7:1c:2b:68:e8:68:7d:ef:9f:e0:7b:30:8c:59:e6:
77:ea:78:3f:8a:17:a7:d2:18:89:88:74:ba:f1:89:4c:5d:28:
2b:52:f8:b4:91:fb:4c:9e:ca:07:b0:df:b2:cb:e6:93:cc:7c:
ae:a6:c4:28:ae:31:ba:10:8b:70:cd:23:17:91:4e:e3:07:60:
84:a4:10:bd:03:2d:48:7e:68:c6:1b:8d:52:13:9b:1f:5f:8c:
80:9d:41:01:8e:3a:06:a0:26:be:2b:ac:98:da:60:ce:5e:c8:
e7:ca:9d:bd:2e:7a:ea:bb:6d:ef:dc:95:cb:e3:11:9c:15:35:
39:6a:34:6e:35:22:73:15:1a:84:17:2c:24:7f:4c:b5:94:89:
2c:79:71:a1:62:b3:3d:cf:6b:8c:4f:3d:1f:a5:20:8a:ed:9a:
4c:e3:10:36:70:55:ca:a4:f7:e8:03:ce:0a:fc:02:a0:38:ab:
4c:12:91:9a:e8:cf:97:09:dd:25:a7:df:e9:5a:ac:c7:cc:e5:
3d:94:24:da:cc:e1:58:93:f1:7e:76:5c:9d:44:7b:63:e6:d6:
c7:c5:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:32 2026 by rpki-client