Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
File: 7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa (raw, json)
Hash identifier: uDTaR5lS5PVneGrLgnbt2oGV3tvxE3G77kKaIB29y1Q=
Subject key identifier: F9:31:AB:5E:D5:70:DD:57:93:22:B4:E9:7E:38:8C:E9:43:48:95:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4BDCE7653DA1016BD64E7F89CB6091A79E792492
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
Signing time: Fri 07 Aug 2026 04:50:43 +0000
ROA not before: Fri 07 Aug 2026 04:50:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dc:e7:65:3d:a1:01:6b:d6:4e:7f:89:cb:60:91:a7:9e:79:24:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7ec9bd834fea47467753bb8077258e27b72ad5ac3063e2005f7460a39174e7aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:92:c9:10:ea:a2:22:ce:dc:b9:32:fa:64:
f2:2b:fa:50:bd:6f:c2:83:a4:7d:34:51:23:1c:dd:
ed:bf:34:db:1e:28:dd:84:2a:0d:b0:7a:49:b8:9d:
5a:8e:a8:59:05:47:37:cd:c3:07:a0:8c:d0:84:87:
fe:99:a8:8c:da:92:69:53:27:1a:14:c3:55:5b:18:
1a:45:02:da:52:74:15:91:f6:43:32:06:3f:92:59:
35:8d:1a:04:ca:36:26:a7:46:9f:f0:51:e8:18:56:
cf:7c:c6:9b:70:7b:8a:fb:40:0a:6c:0b:ed:51:e4:
b8:97:c1:a6:69:cb:79:2b:51:0a:6c:1d:1a:e1:45:
91:48:c3:e0:7e:99:8b:8d:99:52:5e:e6:0b:fc:7e:
49:5c:ff:36:f9:b7:a4:37:04:98:59:bf:ca:28:5e:
b1:29:98:14:19:30:e1:7e:cd:40:0e:ed:c5:31:b5:
c6:c0:8d:d7:c6:7c:76:09:61:0d:2f:52:0f:ab:8d:
4f:ff:2e:67:d4:aa:fd:b0:2f:f9:fb:18:b5:ce:a5:
d7:f4:2e:76:78:fc:be:46:1f:25:d0:c2:28:d4:c7:
65:a6:b4:78:fc:a7:07:12:b1:1f:85:74:2f:2c:2a:
e3:0e:da:1c:57:f1:12:23:52:fe:fd:87:4f:91:66:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:AB:5E:D5:70:DD:57:93:22:B4:E9:7E:38:8C:E9:43:48:95:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:9000::/40
Signature Algorithm: sha256WithRSAEncryption
10:ed:36:1a:eb:55:c2:67:e5:85:54:b1:06:1e:5f:c4:5f:1f:
5c:d9:ec:bd:46:73:31:3c:df:51:a3:2d:9e:ed:1c:9e:7f:45:
98:29:6a:66:dd:7f:ab:06:ae:3d:3b:e0:7c:4c:e6:4b:ad:de:
04:e7:36:c7:bb:1d:23:90:ba:99:24:06:ba:0d:e4:f0:cd:90:
c0:a1:dd:20:14:05:46:72:40:fd:02:d2:c0:29:14:4b:d3:f7:
68:e2:6c:0c:df:3e:4b:ac:7f:52:84:69:b4:05:7b:c9:d4:b4:
18:92:d3:5b:29:65:42:ac:4d:e3:29:d8:cb:22:21:6e:55:04:
53:34:e6:ae:12:7f:d4:ad:ea:bb:b2:18:31:76:94:a2:b8:bf:
a1:59:6f:6e:68:72:5c:d8:b5:bd:3a:c6:d5:51:3a:c0:6f:9f:
9b:b4:73:5b:46:cc:9b:76:6d:34:23:4f:b7:48:9b:96:56:8e:
7d:64:68:75:04:bc:32:dc:7d:22:3c:8e:a2:90:89:e0:6a:41:
ec:d3:3f:51:b9:85:ac:04:25:56:58:ad:47:20:b0:2f:7c:31:
56:18:3f:fe:38:67:3b:5b:a1:7b:21:7d:52:16:39:41:da:f1:
30:61:a8:27:db:99:94:fd:93:0b:e1:a5:48:c7:1f:c1:c5:b1:
8f:a8:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:30 2026 by rpki-client