Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
File: 7a5c899e-1564-4329-8939-7004d7b754c8.roa (raw, json)
Hash identifier: iu5orEzl81iVbnHIXC7RR1fh58NqOqsuK2Iaillcpo0=
Subject key identifier: 09:57:82:AF:EA:A6:7B:66:8D:DD:8D:0B:2B:27:02:7C:C9:A6:EF:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FFC627A1392431B0D8CC8DDA5557A7B7E6C42B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
Signing time: Fri 07 Aug 2026 05:31:10 +0000
ROA not before: Fri 07 Aug 2026 05:31:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fc:62:7a:13:92:43:1b:0d:8c:c8:dd:a5:55:7a:7b:7e:6c:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9caf12c4a79bc7ca4a19ed666e30783278410e51ff3ee6f4fbe5d85f55e47716, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:50:68:dd:32:99:d9:a7:bc:4a:45:f8:1b:
cb:2b:c4:c6:3a:6f:56:2a:3f:10:be:4e:55:ba:89:
15:97:38:16:c2:c8:c8:c4:d6:0b:80:c0:c6:2f:d4:
d4:a9:68:72:cb:2b:4e:49:ed:19:6a:01:ee:3d:89:
c3:93:09:48:9a:ff:2a:10:38:5f:53:f4:31:25:87:
83:16:17:93:75:a8:4b:77:45:d7:87:b6:90:09:2d:
8d:30:20:d8:c0:8b:d2:dc:f5:60:24:69:f7:7c:d1:
fe:ee:75:fe:07:1b:ee:07:43:fa:16:f7:5b:a4:5f:
8d:98:61:7c:2d:2f:74:97:7e:ca:e6:48:db:c3:33:
62:e9:8a:b3:44:9d:a5:09:d4:f6:39:36:7e:8d:dd:
d0:7a:e3:7e:75:fe:4b:dd:71:45:13:77:bf:54:f7:
9d:c7:e7:5f:8f:28:ba:9e:05:e3:04:fd:e6:c6:f8:
59:bd:18:72:a0:a6:29:a7:bd:1a:16:35:49:e4:37:
ec:a9:e3:a8:17:e2:da:63:8e:37:8f:f9:44:fd:32:
9b:57:ca:19:ae:57:b7:35:94:89:97:f4:51:7f:01:
bb:ab:26:8c:d7:c5:b4:57:18:46:3c:3d:9e:81:80:
34:aa:6b:e3:61:9a:c7:f0:da:9a:dc:54:68:6d:fb:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:82:AF:EA:A6:7B:66:8D:DD:8D:0B:2B:27:02:7C:C9:A6:EF:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:9000::/40
Signature Algorithm: sha256WithRSAEncryption
63:8d:2c:38:22:26:cf:ea:2c:82:8b:da:eb:1c:35:5b:a6:8e:
fc:2f:47:15:67:30:f1:32:33:a2:dc:0c:b7:88:9f:e9:ea:40:
01:d8:94:a7:b8:00:c9:1e:30:b2:45:1f:89:a5:df:f6:27:c4:
00:0d:fa:f1:98:ce:38:94:c7:de:9a:1c:94:9b:4f:25:c0:c4:
b6:7a:d1:dc:cc:86:e9:26:72:a6:0f:43:0b:a8:80:35:a2:c3:
eb:6f:76:03:32:85:77:23:e9:9b:58:a9:e6:37:4b:fa:ed:dc:
fb:2e:09:05:71:91:83:04:21:b4:b9:c7:71:93:07:51:d1:a9:
d6:98:3c:86:f1:26:93:d0:5b:da:55:e2:3d:8d:25:92:f3:a4:
5b:7b:c9:43:5a:25:c2:0d:d3:f6:e8:b4:b2:96:c4:ef:af:51:
60:cc:53:6a:5d:55:17:a1:69:87:8e:04:0d:43:74:39:d2:56:
58:3d:85:aa:6e:7a:ab:6a:88:01:1c:8c:69:93:af:8a:26:21:
72:4f:2b:4a:4d:81:03:ce:7d:7c:b4:f7:12:8c:21:bb:3b:2d:
71:c2:07:a6:0a:46:a5:5f:c3:49:52:0d:b6:6c:0b:0c:76:3f:
cf:13:b6:8d:8b:93:81:55:a3:21:cf:6e:91:19:37:49:93:d5:
ce:a8:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:26 2026 by rpki-client