Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa
File: 8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa (raw, json)
Hash identifier: KzRrPmDAXUuSVcAlF8QOMAeOOKlAH0KUZAD1qd4c0PE=
Subject key identifier: 5C:BB:E1:5C:34:F8:EB:2C:11:C7:9C:DF:36:5D:5B:80:2B:99:6C:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63D6A534CC68AF13B6D710C803850A682203A107
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa
Signing time: Fri 07 Aug 2026 05:00:47 +0000
ROA not before: Fri 07 Aug 2026 05:00:47 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d028::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d6:a5:34:cc:68:af:13:b6:d7:10:c8:03:85:0a:68:22:03:a1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:47 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0e481c94cff9dd0b68585452355ba98646db02e44b796fc6fa45b14766a60ab9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:b0:fd:7b:e8:66:86:f7:3c:54:d5:f4:de:
d8:2a:ed:0d:3c:99:0d:d1:34:2f:63:28:6c:c4:6b:
34:c1:69:0a:18:e2:1e:39:bb:92:1d:33:63:47:fe:
01:85:51:58:49:90:63:0d:f0:d9:1a:b7:75:81:13:
fa:65:c0:af:d2:d7:03:ca:ee:e8:b8:77:ac:c7:9d:
cf:dd:23:04:b8:82:18:2a:17:95:36:5f:84:6f:5c:
c3:99:28:09:6b:06:af:7e:27:e2:dd:5f:02:86:63:
93:6f:75:75:ec:8e:0c:ea:36:95:9b:38:3d:81:28:
47:0f:ea:bc:d2:cb:7d:ed:5f:c1:c7:38:de:7f:5c:
13:55:3f:a3:94:9c:36:39:77:5c:01:e0:40:55:01:
1d:e9:30:6a:cf:c7:24:51:98:f3:77:d1:0b:96:e5:
1c:fc:d4:72:2c:e6:89:36:cc:69:67:81:3f:c4:02:
dc:52:86:98:b1:b4:0f:66:6c:37:a2:cb:a4:0a:93:
f2:78:16:41:f4:0d:96:09:dc:1a:78:a3:4f:6f:91:
90:bf:81:4a:47:8c:58:5b:6c:7f:04:e1:73:d6:50:
15:55:1f:62:8f:ed:81:6c:c6:2a:46:d6:b1:7d:3a:
35:0a:d5:9c:90:ea:d9:d4:76:57:84:14:33:15:5a:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BB:E1:5C:34:F8:EB:2C:11:C7:9C:DF:36:5D:5B:80:2B:99:6C:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8015fdc4-e79d-4400-a786-c70ab3f10d2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d028::/36
Signature Algorithm: sha256WithRSAEncryption
8d:72:24:2d:d5:a5:3d:93:a9:48:8a:b4:c6:60:1b:6d:50:79:
a9:7e:c6:8e:07:c8:c6:b5:e9:63:0e:96:42:f9:72:6d:16:1b:
ed:5e:25:44:f0:c7:76:5b:e4:cf:ae:ef:8c:0b:2d:6b:ca:c5:
1e:20:0b:bc:be:b6:99:61:a8:96:ff:bd:16:92:ea:83:2e:f7:
19:09:65:b1:1c:19:49:20:7f:d6:26:8d:98:22:b2:65:23:b7:
b1:0d:8d:74:9d:c9:b4:23:2f:cf:1a:91:4f:48:c3:bb:cf:21:
19:55:62:27:99:71:3f:af:6b:27:bf:ae:9e:9a:fb:27:9d:40:
58:9a:8f:3e:40:51:b4:df:e4:9e:07:ba:bd:cc:46:39:81:ea:
f0:6e:cb:48:88:af:58:30:6b:99:a9:20:d1:1f:7f:06:9f:75:
2f:00:7e:2f:43:01:e1:28:50:93:7e:d7:50:4c:0b:5b:e2:c3:
f2:0b:e4:b6:bf:b3:ce:f9:d4:61:e8:fd:b9:c6:62:0c:9d:3c:
07:6c:e2:15:a7:22:2c:28:1a:b1:ca:0e:9c:44:d0:6e:80:6f:
a3:50:ac:4c:37:7b:c2:51:e4:dc:70:40:5c:70:74:6f:dd:ea:
98:46:05:7f:13:00:58:84:d4:0d:61:2b:bf:99:f5:c2:94:61:
ed:3a:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:53 2026 by rpki-client