Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa
File: 7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa (raw, json)
Hash identifier: APUpPF7laODUJeZiPfk5F1upI+0IPdWwOv1Igae3xL8=
Subject key identifier: 01:0B:50:CB:ED:E2:0A:F2:57:5B:EE:F0:71:86:AA:F5:33:27:A9:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 118CE1EF2AA326EDCDC42BB70F9034F37A82BAE5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa
Signing time: Thu 10 Sep 2026 02:40:41 +0000
ROA not before: Thu 10 Sep 2026 02:40:41 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8c:e1:ef:2a:a3:26:ed:cd:c4:2b:b7:0f:90:34:f3:7a:82:ba:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:41 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=e12f6de68cfbc87d9824f236493b01afc7c149bf0240398ca5e3a167781f4c68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:58:6b:cc:d5:82:ef:d0:68:8e:f6:57:9b:
c5:5c:81:53:86:53:db:01:0f:81:cf:e9:8f:85:6b:
50:1e:d9:4b:1b:56:16:5a:b3:92:59:33:b6:f3:92:
8f:ac:6e:d0:15:cc:1b:82:83:50:8a:11:83:b0:b4:
61:38:d2:58:79:81:1c:dc:f8:cf:71:3e:ae:8f:39:
43:45:ca:ed:3e:3b:11:3b:05:16:ef:a2:d2:9a:71:
1a:ce:98:92:7a:60:b7:cc:c2:94:4a:62:a2:25:12:
39:8c:5d:78:b8:8c:83:0d:3e:41:d5:15:fd:8d:98:
db:9e:4c:9c:92:bc:c2:e4:2b:60:c1:56:48:47:99:
a7:f2:da:03:45:bc:cf:f9:2a:78:af:02:27:17:50:
6a:ca:75:dd:03:77:97:4d:69:97:e1:c8:79:93:b4:
9f:44:a2:87:dd:03:6e:9e:35:94:6e:ad:16:e2:50:
f1:12:e1:98:e3:ce:7f:ae:4f:ee:84:c6:82:40:eb:
58:f7:15:c1:fc:35:2e:56:c7:f5:37:78:b0:98:0f:
29:c1:ec:51:2e:4e:aa:7a:c3:b8:89:1e:0c:2b:87:
3f:96:82:80:41:da:75:48:4f:75:6d:08:fe:42:27:
41:cc:20:d0:bd:55:10:4b:47:a2:de:03:6b:ff:57:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:50:CB:ED:E2:0A:F2:57:5B:EE:F0:71:86:AA:F5:33:27:A9:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:9040::/48
Signature Algorithm: sha256WithRSAEncryption
4f:2a:f8:c2:75:70:ba:8a:bb:3b:c7:a8:cb:08:95:5f:95:2c:
bf:5d:ad:c7:5d:d8:ba:ef:56:12:c1:fb:95:1e:d7:55:0f:f2:
7a:70:51:84:1e:5a:cb:b4:c5:4c:fb:bd:28:d3:1c:83:3b:43:
92:66:b5:0a:8d:2a:8f:15:82:f0:38:95:70:76:ca:0a:a7:9c:
dd:94:1b:e0:e9:b4:32:c1:0a:ea:e3:3f:bd:97:0e:3c:eb:14:
85:d5:64:39:55:f2:ff:d9:0f:d0:d7:d0:59:bb:5a:6c:2c:d9:
e9:23:ff:17:8f:4c:f3:6c:9b:ed:f1:ff:a7:fe:e7:93:c3:82:
2c:2d:94:9b:e3:59:d4:74:5b:de:a9:9f:a8:a3:e5:6c:6e:eb:
64:37:c9:7a:8f:cc:8c:6f:fb:44:65:ac:84:7e:a0:09:5b:b3:
03:72:6e:9c:d3:5c:a0:80:b1:38:de:96:d4:e0:de:b5:ed:7c:
94:5a:52:e9:e9:2a:54:e0:bd:8d:3a:64:a2:42:fe:50:06:f3:
b8:d9:a7:51:81:0d:18:2d:9b:f2:19:5d:90:c1:cf:7a:bf:37:
f9:86:16:a4:77:f5:e2:b3:b1:ba:f2:7a:bd:7c:18:8a:7f:bf:
7c:89:22:4c:94:df:62:9f:d0:6a:ed:41:c7:94:99:fa:b7:93:
72:dd:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:31 2026 by rpki-client