Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
File: 7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa (raw, json)
Hash identifier: QtX50mcbSj0wQ1rP+QGtHVUfI1SzVIAf/ObmqN308K8=
Subject key identifier: 59:BC:D8:77:42:0E:E8:20:AD:55:C1:69:7A:37:B9:6A:C8:A0:93:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 126A423D2FA00A05AAFEAE99E617A4C23DB58871
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
Signing time: Fri 07 Aug 2026 04:40:25 +0000
ROA not before: Fri 07 Aug 2026 04:40:25 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6a:42:3d:2f:a0:0a:05:aa:fe:ae:99:e6:17:a4:c2:3d:b5:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:25 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7b655a21c86c0e2c1ffbdd4824c5e2c9c8292c94fd7b604585f3c26f5cd36d60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:95:29:a1:bb:ed:78:cf:81:99:2f:5e:14:
b9:75:64:15:d9:11:a9:54:7d:20:84:bd:48:8b:84:
97:c6:c2:14:25:c1:40:55:b2:98:7b:11:3c:35:c3:
28:73:33:e2:7b:b9:6a:07:68:84:e0:95:24:06:08:
1e:3c:19:55:b3:59:99:b4:74:8e:1a:5b:7a:58:4d:
05:43:ef:d1:72:f4:89:5d:1c:19:7d:b7:99:f9:f7:
b9:d1:76:a0:f0:30:13:ad:93:36:a5:53:14:2d:25:
d9:41:1e:2d:c1:e0:46:97:19:c6:f0:cd:3f:30:a8:
20:ff:9b:97:4d:bb:6e:9a:79:3d:d3:c3:42:b7:04:
7d:16:f3:73:bf:14:cd:78:4d:40:d6:8d:59:b2:f9:
63:e9:67:4c:8b:4f:67:dc:8a:61:2d:ab:19:f9:45:
73:5b:3b:54:4b:b8:2d:56:dd:94:68:4d:38:21:d4:
56:5f:a8:38:89:ca:58:dc:27:d3:72:7f:88:df:9e:
75:d8:e7:24:80:e0:62:f4:9c:49:14:d8:47:2e:1c:
45:64:0f:dd:57:83:22:a7:14:c3:3c:fc:1e:a9:05:
c9:1e:d8:08:a5:75:5b:46:a3:43:98:26:9e:a9:7a:
50:78:6d:01:30:89:f8:ea:f3:a0:fe:e3:ff:1e:fe:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:D8:77:42:0E:E8:20:AD:55:C1:69:7A:37:B9:6A:C8:A0:93:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038::/32
Signature Algorithm: sha256WithRSAEncryption
85:47:78:d2:0d:b6:b6:7d:e6:12:d0:d4:89:d6:f8:1c:0d:45:
c8:80:94:46:c8:63:d4:b9:dc:d7:a5:a1:33:e7:ca:e9:a0:e8:
68:1c:7d:84:96:2e:85:c8:9f:48:44:b4:36:4a:66:1a:14:c1:
2f:38:38:a4:88:1c:f3:b3:14:bc:71:bd:0f:c3:11:01:19:b5:
cb:64:8d:35:73:e5:f4:bf:50:94:5d:ac:b5:be:07:1e:0e:13:
13:a8:a8:28:2f:6a:58:1a:d8:c4:27:08:2d:c1:7e:6f:e8:ea:
0f:76:8b:ba:d9:51:b5:a9:df:33:71:8a:a6:b1:8b:31:12:73:
3c:37:72:97:aa:59:7c:33:2e:19:bc:97:d1:86:e1:75:c2:06:
1a:4b:4e:18:35:d9:56:83:2d:39:77:60:e3:55:70:ec:07:94:
f3:3b:92:44:ed:72:2d:96:4a:11:2b:bd:80:06:d7:e4:b1:fc:
85:79:d1:df:60:50:4f:a2:99:51:43:e6:c8:00:72:d1:ce:21:
f7:ca:c0:af:11:31:4e:b8:cb:7f:f7:d8:fb:e4:40:b3:ee:0c:
26:52:a8:65:16:1f:96:19:9a:79:8b:18:63:75:1e:06:9c:db:
e4:c9:47:09:72:93:06:78:d9:98:0b:2b:c6:53:30:a4:f0:93:
d2:f7:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:01 2026 by rpki-client