Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d5bbe6e-da67-4af0-af12-c86f93a16721.roa
File: 7d5bbe6e-da67-4af0-af12-c86f93a16721.roa (raw, json)
Hash identifier: sXr5a5vbrdeT8YJnLvb1nsKd7fEhgp56x3lkYohuuik=
Subject key identifier: 8E:92:04:1A:C1:34:34:6A:D6:8B:85:5F:1C:9B:78:ED:0C:8A:42:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 668E7851CF25F73E035DD66C908F6E975686A380
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d5bbe6e-da67-4af0-af12-c86f93a16721.roa
Signing time: Fri 07 Aug 2026 04:30:56 +0000
ROA not before: Fri 07 Aug 2026 04:30:56 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:8e:78:51:cf:25:f7:3e:03:5d:d6:6c:90:8f:6e:97:56:86:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:56 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c554cbb851eb12cfc0b5f047aafb5e723256739d272a679f557b55dba042667e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:1a:0a:63:13:8e:8d:bc:fd:8c:7e:c5:04:
a8:18:29:9f:48:18:2f:89:a2:1f:6b:6a:29:04:4d:
05:68:96:82:bb:35:72:1f:3f:3f:e5:ae:7a:5e:41:
38:6a:00:77:64:27:07:a1:a5:05:a5:74:76:60:ea:
c3:a0:af:0d:66:70:36:cd:da:18:1b:cf:d1:21:c6:
8b:7c:1b:eb:72:82:7a:37:1f:39:61:74:ac:13:85:
80:be:54:2c:73:bb:8e:73:66:92:e0:51:b9:b1:7c:
bc:1e:5d:c7:62:5e:5e:f3:63:22:43:e2:4a:ba:53:
0a:18:b7:53:f9:d7:11:a3:10:8b:38:92:75:d6:19:
4c:20:58:08:fd:8a:d3:bf:8d:1a:d2:08:e8:13:cd:
a7:3b:3f:be:e8:1f:b4:81:e2:c8:06:c4:20:05:1e:
48:2e:65:60:16:b5:67:7c:8d:47:84:f5:69:d0:f7:
49:c1:bb:d1:d4:01:1f:ce:ab:d7:e5:1f:f7:45:ae:
b1:cf:d0:a8:e5:a0:99:7f:de:d3:4b:90:77:fb:2c:
30:f2:68:01:ae:6f:40:34:ee:35:d4:33:43:57:7a:
17:e9:20:82:51:eb:0b:4b:37:57:f8:97:86:9c:9d:
94:e2:44:90:05:bb:d8:18:83:1b:ce:06:5e:8c:fb:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:04:1A:C1:34:34:6A:D6:8B:85:5F:1C:9B:78:ED:0C:8A:42:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d5bbe6e-da67-4af0-af12-c86f93a16721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
80:3c:6f:71:b9:69:c4:d9:8b:e4:95:ae:9b:0c:f2:f4:f2:59:
dd:fa:e3:c4:d5:36:ea:78:0f:42:aa:7b:b0:40:b0:03:32:60:
0f:bd:99:63:d2:6a:5c:93:d4:d4:55:be:40:eb:81:05:9b:7a:
85:96:f5:80:af:90:ec:4f:00:39:31:67:89:3c:b9:16:08:e4:
e5:04:5b:3d:27:9e:34:bf:75:97:ee:07:8d:77:d4:14:a9:7f:
c4:59:05:22:35:69:e4:fb:92:bc:5e:95:d9:e8:9f:8e:f3:fe:
a4:95:1e:c8:9d:f7:7d:29:59:c4:bc:6f:bc:fe:df:67:f2:89:
4b:66:83:3c:47:67:92:27:20:d3:e4:10:9d:d3:ec:e2:4a:a1:
55:81:57:9c:58:40:fa:c6:01:45:41:39:1e:86:a1:64:3a:35:
20:17:83:82:35:57:d4:b2:cd:11:17:4d:6e:5e:f1:a9:1b:fb:
7e:78:99:4d:14:0e:21:70:91:c5:2b:a1:d8:eb:77:ef:69:03:
03:a6:05:f7:87:b4:e7:8c:43:a9:dc:a3:38:7a:5f:ef:85:ab:
8e:f1:da:70:90:62:50:54:8a:4d:cf:40:96:d2:c0:f9:6f:98:
dd:8a:1e:23:ac:a3:e9:f4:4e:d5:34:49:38:63:f0:c1:37:9d:
45:88:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:02 2026 by rpki-client