Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
File: 7af2d4a0-df22-4933-b605-1ecbbd66f982.roa (raw, json)
Hash identifier: UPb1Bf0S2V7RlhqbtZ1c8qVnez8rtz4DFORCP39duvk=
Subject key identifier: 5E:7A:88:FF:93:8B:3D:F3:A0:36:96:CE:29:88:6C:C9:23:E1:70:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 155EBC30148F8EABF2AFF2D2ED0803A0830FDF20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
Signing time: Fri 07 Aug 2026 04:51:01 +0000
ROA not before: Fri 07 Aug 2026 04:51:01 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5e:bc:30:14:8f:8e:ab:f2:af:f2:d2:ed:08:03:a0:83:0f:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:01 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=42179b0301060eec41fa6b6119c5211ef719cf0fa494e6cbe1cf77203fd6cf3a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:19:5a:7c:5e:81:a3:a1:a2:c6:a6:de:de:
8f:7f:87:72:b5:ff:a1:a0:99:c7:bb:79:97:f9:97:
fd:e6:2f:5a:be:a5:a7:7a:b4:1f:d9:2e:3e:3d:4f:
90:6f:bc:be:e0:19:62:2e:ee:65:46:50:e6:3f:40:
42:37:a6:7d:44:d1:19:59:6b:fe:4d:50:88:d0:01:
68:17:9b:e2:65:f3:70:83:39:ca:f8:b0:e4:0f:e7:
80:7c:6c:00:cd:87:17:c4:90:a5:9e:ba:92:97:97:
a1:a7:bb:db:60:94:1d:b5:1b:a2:17:a7:a4:f7:c1:
f7:be:9e:13:38:bf:e7:a6:c5:15:24:bb:c7:06:1c:
4b:6c:c9:8a:3e:01:94:0a:0c:ec:50:64:5e:87:dd:
6a:4e:1e:7b:7a:8d:fe:4a:01:4a:f9:99:60:76:4a:
05:b8:11:fd:57:82:fb:62:c3:13:b7:2b:a8:ff:ac:
80:25:24:64:e7:15:f0:06:fc:51:c8:fc:20:f3:74:
40:9e:9b:59:d8:3f:da:f5:f2:11:5b:69:1a:a9:5f:
1e:6f:d1:da:37:b3:ec:08:d7:50:0e:fd:39:b1:04:
ff:8d:87:4c:c3:b9:bb:95:60:56:95:54:3c:e5:3f:
c9:4b:a4:c2:85:be:13:41:1a:46:93:4b:63:4a:6f:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7A:88:FF:93:8B:3D:F3:A0:36:96:CE:29:88:6C:C9:23:E1:70:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:c00::/38
Signature Algorithm: sha256WithRSAEncryption
51:df:9b:70:29:db:41:bb:e4:3c:bf:52:ac:ec:d8:4e:50:97:
24:30:40:53:07:04:b6:ba:fa:99:7c:dc:2b:6b:ab:e1:63:65:
81:68:1c:f6:67:42:cb:27:7f:cf:ff:75:44:c8:b6:90:8f:22:
e1:21:19:2c:a9:83:4b:bb:9c:6b:68:78:72:22:81:0e:d9:07:
fe:2f:88:bd:07:88:87:ac:5f:35:19:c3:34:71:f1:db:c6:c2:
9a:1c:4f:0a:74:6f:50:c3:29:5d:6a:b3:11:8c:45:8c:29:78:
8f:82:47:fe:2d:03:b7:34:fe:f3:4e:71:13:5f:d9:40:90:88:
93:d5:78:42:77:9e:dc:49:d1:6f:ff:d7:1a:4e:6b:63:19:6f:
b4:8a:94:55:99:c0:8f:f8:56:23:b7:e2:3e:06:aa:63:6c:63:
af:ca:4a:cf:a3:46:6e:65:47:00:a8:81:41:2b:75:d1:2e:4f:
45:47:dc:1f:59:a0:db:06:fa:9b:ad:bf:c0:3f:68:2c:bb:a4:
ab:3e:a0:cb:40:6c:5a:df:da:38:f2:d5:98:23:34:89:ed:c7:
40:8e:db:18:9f:7c:63:80:ec:5f:59:28:9f:2b:8d:8f:e0:85:
85:20:8b:3d:d0:d5:69:1b:e3:7e:c3:d9:56:47:07:22:cc:57:
f0:d1:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:45 2026 by rpki-client