Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
File: 7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa (raw, json)
Hash identifier: nE3ujI1AIRYYRs4cWakXuZWaivapg695zdlpyhA5GwU=
Subject key identifier: 59:94:B5:55:3E:8B:22:39:1E:32:C7:92:8A:05:F0:DE:49:5A:60:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 400FB03FC3347C61E2F636DF69B32856D59E95DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
Signing time: Thu 10 Sep 2026 02:30:17 +0000
ROA not before: Thu 10 Sep 2026 02:30:17 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0f:b0:3f:c3:34:7c:61:e2:f6:36:df:69:b3:28:56:d5:9e:95:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:17 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=be75280db190d68bd514f537189c574d097409dd3a9a7a08573419c8a1c841b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:cd:a5:8d:d8:c7:74:15:b6:71:cc:d2:cd:
91:5f:97:2f:92:a4:f6:1f:4c:4d:64:e8:bb:29:05:
41:1b:a8:f8:b5:92:b8:0e:af:e6:0a:98:6f:3b:3a:
39:0a:64:ac:b3:b5:b7:6c:21:54:bc:83:f2:e9:61:
e5:a8:90:ce:ee:ca:62:30:da:99:61:bc:3b:64:db:
d5:d5:0f:a1:e2:69:73:68:44:f4:b1:40:fd:3a:f0:
4c:bb:63:c0:4b:16:34:21:16:d8:64:07:e3:9b:c4:
98:ab:1a:e8:e7:6c:56:8e:dc:bd:df:11:d9:08:e7:
ef:de:b8:a5:cd:fa:77:a6:04:7c:d6:47:fd:2e:d2:
14:65:35:32:09:df:14:1b:85:12:07:d4:bf:5c:d8:
96:13:6e:c1:b0:37:40:71:4a:ef:88:9f:e2:3d:c4:
04:f8:ef:bb:ea:03:8c:65:b7:09:9a:85:7e:dd:89:
0a:fd:6a:61:52:35:75:10:6b:e4:9f:eb:31:8d:ab:
72:7b:bb:1c:86:22:b1:18:76:0c:87:d0:d3:f4:dd:
0e:65:f6:73:1d:87:98:de:e0:6e:e9:f6:64:e9:27:
d9:00:05:da:1a:e3:0f:a6:90:c2:0e:ef:c6:e3:0c:
35:94:36:8b:74:fa:e2:71:47:26:3e:26:79:39:36:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:B5:55:3E:8B:22:39:1E:32:C7:92:8A:05:F0:DE:49:5A:60:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4020::/48
Signature Algorithm: sha256WithRSAEncryption
c8:df:c6:7d:e6:88:ba:15:e9:e5:b1:07:c3:da:ac:0e:84:92:
63:24:26:61:fc:5c:1b:03:6b:2d:e0:ec:74:f9:d4:17:0f:7b:
d5:da:8a:82:2f:c6:2d:b6:7d:60:26:ad:2a:05:16:c6:94:1e:
4b:71:d4:b1:82:0a:44:f4:0c:18:1c:fe:75:a5:f6:05:9a:42:
de:77:94:e1:ed:c9:5b:94:a9:13:1e:29:b1:7e:3f:69:b7:b5:
69:d8:64:fe:c0:cc:64:02:8e:ec:ff:b2:d2:d5:c2:8f:fe:09:
b8:e7:09:41:97:af:e1:55:f8:2d:6b:46:2c:9c:31:b6:9e:54:
a0:84:cc:b3:a8:f6:9f:38:3c:9e:40:ef:47:d9:73:e8:5e:48:
d4:dd:62:c3:05:52:32:65:30:cc:ea:27:a8:44:a5:0a:b5:d9:
16:67:ec:91:ba:c1:e7:76:67:e2:a4:38:08:e0:ed:2d:ef:a8:
a4:02:56:f5:10:61:b5:06:0e:76:09:f2:9e:c4:b4:3e:81:60:
8b:04:83:10:9d:49:a0:6b:be:83:97:a8:60:51:91:c3:08:90:
50:d9:cd:8c:65:ab:85:92:6a:66:7b:fc:d3:d4:53:1a:79:07:
a2:14:f9:54:ba:13:8e:e8:29:3a:ab:ab:51:8a:ce:a3:82:b5:
77:ed:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:23 2026 by rpki-client