Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa
File: 7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa (raw, json)
Hash identifier: VDyVsFzhJnovyXftxkbEAx2N97ASTEkkUTVWgq6Nb0k=
Subject key identifier: 36:B1:CE:A9:52:2F:CC:1F:BB:E7:49:5A:23:91:86:79:FF:E5:84:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 251ED84BC2C96D1DF6D81B1D3CAA2DC3D87FF6AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa
Signing time: Thu 10 Sep 2026 02:40:06 +0000
ROA not before: Thu 10 Sep 2026 02:40:06 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1e:d8:4b:c2:c9:6d:1d:f6:d8:1b:1d:3c:aa:2d:c3:d8:7f:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:06 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=e3ce87af86691631d72a347f46032439ec649330abde16bb49c0dc78920eecde, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:19:a3:a3:4b:55:7b:22:0c:e3:03:f3:16:
12:33:52:8b:82:22:19:87:9a:21:c1:f4:c1:c0:06:
20:11:41:fb:56:eb:02:49:79:e3:7e:c3:b5:5b:3d:
12:8a:53:6e:99:bc:8d:43:84:ea:2a:ef:59:67:26:
96:2d:94:22:e5:a9:c2:1d:ec:92:8e:9c:22:18:ed:
58:9b:01:d0:2d:bb:17:15:c8:60:3d:21:af:4e:ba:
6c:24:0e:02:78:7e:e5:2f:43:7b:0e:8b:37:f7:1b:
eb:09:07:13:f7:39:fd:4c:23:c6:0f:a3:f8:21:63:
17:59:2c:7f:e6:03:a7:09:d6:b2:e5:d5:22:da:e8:
7d:70:53:43:a4:1d:3a:13:0d:93:d5:e2:54:a9:8f:
13:e3:f1:f0:e3:58:5e:bc:01:27:7c:53:24:47:be:
3c:47:2b:30:4d:4a:bc:08:02:9c:88:ae:11:cf:25:
2a:14:65:d3:d5:da:0e:d3:e3:22:41:69:ba:0b:64:
2a:21:83:54:4b:d7:17:9c:24:f3:55:50:01:5d:01:
67:f6:11:fd:fd:79:f1:f0:ff:8a:6e:a8:a0:5d:b8:
18:e5:9a:7f:0d:dc:3b:72:b8:6e:9e:2a:a2:a1:00:
58:92:d4:d5:8c:80:f2:d0:68:7f:8c:67:98:3b:37:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:CE:A9:52:2F:CC:1F:BB:E7:49:5A:23:91:86:79:FF:E5:84:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:1040::/48
Signature Algorithm: sha256WithRSAEncryption
2c:68:0c:a9:75:b6:ff:21:c7:c2:72:fa:17:87:4a:b3:76:ce:
3d:92:22:02:df:57:bf:5d:f8:eb:79:a9:cd:18:65:6c:f5:03:
80:af:f1:d7:14:bb:29:dc:43:84:4d:01:17:35:ea:d0:11:ec:
a5:6d:9d:7c:4a:b7:a5:76:8a:43:57:94:50:3c:cb:ff:73:76:
4d:3c:f5:e2:4f:40:20:9b:ac:11:33:58:7d:a1:a0:15:c6:ad:
32:b1:6e:4c:5a:0c:97:b0:99:0e:da:b8:fd:5f:2d:36:f1:f8:
28:58:3c:4c:b2:b4:9b:7a:42:17:70:3a:d9:03:24:04:82:af:
e2:3a:4b:22:d9:7f:bd:67:68:b0:69:af:a2:4c:0a:07:d2:49:
53:9c:cb:33:d7:7b:53:9b:2b:56:66:96:ed:eb:bc:40:b0:d3:
bc:2a:1a:41:d1:1c:7d:49:5b:83:6b:62:4b:7b:2a:ea:f9:4f:
96:e8:07:f5:3c:7b:69:a6:ce:d8:c7:4d:d0:6c:2d:05:48:5c:
c5:72:f0:fa:4e:06:a2:7d:8b:be:e1:ec:10:47:93:10:d9:51:
e6:68:de:37:08:bf:11:34:37:2f:01:62:16:36:66:86:75:09:
31:06:4b:2a:9d:f1:e2:60:94:42:d6:a8:cd:06:47:e4:d0:fa:
e5:9d:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:45 2026 by rpki-client