Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
File: 7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa (raw, json)
Hash identifier: yJBNYprA0w1Fcy40+/XWOa0ehYzqt+2MU63eAXOY5Ds=
Subject key identifier: 6E:70:81:1F:D6:4F:9C:5C:CB:EB:6A:28:63:D4:54:62:BA:9C:7E:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2827F325E62F3B6FB92BF4FA3E950BC6E01F9ADC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
Signing time: Fri 07 Aug 2026 05:40:43 +0000
ROA not before: Fri 07 Aug 2026 05:40:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:27:f3:25:e6:2f:3b:6f:b9:2b:f4:fa:3e:95:0b:c6:e0:1f:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=54a4afe253889621d771b0cac48181d631febf28c9dff5dcce94d6ed41630619, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:7d:99:f4:f7:69:8c:52:14:f8:06:e6:3e:
df:33:74:32:63:ed:22:16:60:71:47:bf:21:5d:7a:
c4:ca:20:b7:97:b1:21:4a:7a:87:d0:24:af:68:e5:
a2:a4:ae:98:cd:0a:7a:a2:fc:61:f4:88:ac:fb:b2:
9a:01:44:e1:50:fa:0b:9f:49:10:fe:f4:fe:1e:e5:
df:0f:c2:da:35:62:64:11:41:04:32:40:c7:05:ac:
d3:e4:e1:68:f6:c2:92:37:98:af:52:8a:68:93:a3:
79:0c:b5:90:f3:8d:6c:1f:f7:e5:c3:77:72:b2:4e:
ce:6d:50:df:d9:1b:58:12:c1:6f:57:d8:66:a5:a9:
33:09:7c:04:c4:98:35:2f:64:6d:8e:57:c5:80:e6:
10:a2:63:6b:36:7c:9c:51:ff:34:f8:fe:87:c1:7a:
3b:23:20:dd:10:03:fa:7b:22:cb:d7:06:61:7f:10:
d8:00:fe:12:1a:88:f5:89:7f:06:6c:36:3f:f1:2d:
80:7b:55:21:7c:f3:4d:18:de:a9:52:16:b1:d9:77:
02:7a:d2:d6:51:f2:27:a6:43:74:fc:b8:17:13:b3:
bb:55:b8:3e:c2:44:bb:d1:ee:15:a8:b9:12:4b:38:
8c:b9:7f:d2:dd:5c:bd:7a:c3:b9:26:d4:97:79:e4:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:70:81:1F:D6:4F:9C:5C:CB:EB:6A:28:63:D4:54:62:BA:9C:7E:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/36
Signature Algorithm: sha256WithRSAEncryption
c0:84:79:66:7b:aa:20:43:b4:66:7b:ff:16:b3:7c:d5:f6:dc:
f4:ab:45:b5:a2:0a:c2:44:80:aa:cb:e1:cb:64:b4:6b:f5:9c:
7d:9a:31:ae:31:69:50:0e:2c:80:9c:a0:4a:41:32:55:5d:b9:
a7:d9:2f:43:9d:25:87:fc:7e:61:83:6d:58:20:1c:cb:05:ea:
9a:43:b3:69:5e:18:ad:08:b3:e4:1a:7f:e1:8e:03:26:c6:26:
4a:0f:06:11:14:52:d8:ac:bb:f2:f9:57:72:a1:5f:db:f3:1a:
28:5f:b3:8f:47:20:f2:0f:de:cf:c1:bc:d2:61:a2:83:78:ff:
4a:c0:65:4b:61:b7:bc:9d:8b:98:ac:a5:0e:52:d9:dd:33:d9:
47:6b:a7:b7:92:f2:d8:0a:ff:fb:be:f4:74:e2:fc:d3:c6:ce:
15:88:c6:60:2b:a8:d9:c9:2f:27:e5:88:c4:ea:22:ff:65:2a:
92:cf:65:f3:eb:48:b7:3b:90:a4:55:c9:48:f5:51:7f:a3:e7:
e2:a6:f8:97:87:4c:d8:fd:51:70:83:9d:6a:a7:e2:86:c9:48:
10:e2:32:41:0a:cb:e7:84:d7:2c:17:aa:f2:ea:1c:16:28:6f:
f5:92:59:52:69:11:6d:89:62:d7:5b:cb:c5:87:cf:c5:2a:0f:
8a:44:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:21 2026 by rpki-client