Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: v7mD9jV7ojwkZ0OkQlZuSmUQ6Gh3Q2TB05a8ILjWf60=
Subject key identifier: 4B:5F:71:B1:6C:0E:50:5D:75:55:70:D1:90:98:6D:3B:3B:00:C2:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67A7AC3FD6B7175C8F5F5D818DF91EC9582095FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Fri 07 Aug 2026 04:40:13 +0000
ROA not before: Fri 07 Aug 2026 04:40:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a7:ac:3f:d6:b7:17:5c:8f:5f:5d:81:8d:f9:1e:c9:58:20:95:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5205263c856e959caef83f133273560492a1da74564fcf06976218c8b1bed997, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:25:67:bd:31:67:a7:fc:d0:ff:c0:a3:09:
7b:6b:9e:d5:42:2a:a5:04:cc:31:1b:5b:3e:e8:f7:
de:05:35:3b:35:42:c3:d0:81:14:2d:57:58:ce:ae:
8b:bb:e2:de:a9:75:66:d9:f3:11:33:0b:0a:ca:56:
e9:fc:e5:f1:6c:37:6a:d2:6e:40:44:f8:16:5a:5f:
e5:4b:99:7d:43:7b:67:cc:8b:1d:fd:52:00:58:4d:
86:8e:51:4d:6d:38:91:c7:8a:ea:b0:e3:a0:7f:9f:
66:16:ea:7e:3a:f6:c1:f4:24:f9:67:bb:1b:7b:be:
ca:d7:84:60:e4:c5:b4:d0:6f:93:42:a4:43:61:c8:
15:05:1b:fa:55:b1:4d:97:b2:f7:c9:cd:94:0a:39:
15:9c:8e:26:c6:dd:f0:e1:c4:2e:da:0e:b5:92:4b:
08:1d:3e:b1:38:f9:ee:10:75:cb:6e:99:46:ce:1e:
57:6a:8f:91:51:1d:20:62:98:6a:22:c6:a6:04:9d:
20:ec:3b:45:64:10:d3:4d:4a:0b:8e:4b:4d:81:cd:
f8:75:e9:02:e0:a8:0d:68:5c:e9:76:ae:b7:61:42:
6b:cf:32:85:92:af:54:6f:24:6c:99:85:62:ba:57:
6b:5e:af:66:4b:75:bc:8f:b5:6d:db:eb:28:44:f8:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:71:B1:6C:0E:50:5D:75:55:70:D1:90:98:6D:3B:3B:00:C2:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
8f:f7:6e:87:90:6b:b0:89:ca:a7:da:13:db:e2:7c:2c:f8:52:
3d:92:71:df:03:0f:a6:7d:e2:9d:ed:66:9f:22:3d:c1:d7:e1:
88:1f:15:d6:17:9a:03:d2:64:70:c2:c4:fb:7e:a4:e2:d9:7e:
24:4a:17:60:33:6a:94:90:f3:28:54:e4:c0:53:76:62:42:53:
11:e4:0c:63:09:1a:b1:a7:78:cb:8f:14:64:1c:a8:49:db:7a:
41:69:49:b3:19:dc:df:d5:42:a2:b0:79:ae:78:b5:b1:14:92:
99:1f:a0:36:f6:f9:a6:7d:46:ea:b8:45:26:2f:8c:2e:8c:ef:
60:96:d2:b2:e7:9d:9d:00:df:23:bb:ea:2f:d6:18:2e:dd:e5:
a9:ca:06:b4:0a:39:f0:9c:21:ff:35:1f:75:3d:e2:6c:13:68:
16:58:52:57:88:76:e8:61:d4:55:eb:38:bc:fa:ca:8f:c4:85:
d9:60:c3:7f:55:43:22:eb:57:61:01:f4:30:bd:14:7b:79:b6:
f3:9f:64:c8:51:3a:6e:52:22:bb:7e:49:a0:d4:74:bd:06:06:
e7:c6:be:f7:69:2a:d1:bd:f1:19:d1:72:6c:60:b6:6e:ef:6f:
bb:08:ff:ce:61:2a:3a:54:cf:1f:c0:a9:f8:f0:ea:0a:b1:01:
92:bc:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:46 2026 by rpki-client