Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
File: 819bfec2-19de-4cdb-ba40-657fff6a743e.roa (raw, json)
Hash identifier: P11/KFPv0WLvSk6SKHR1Z0yswM7Sfo0pB7nLuQ59qp4=
Subject key identifier: 37:42:B2:1A:38:60:52:30:3C:24:CE:7D:66:DB:1B:50:D6:B1:73:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FBAE3F52AA7FEA0C75E3A162CDFEEBA5CC294BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
Signing time: Fri 07 Aug 2026 04:30:19 +0000
ROA not before: Fri 07 Aug 2026 04:30:19 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ba:e3:f5:2a:a7:fe:a0:c7:5e:3a:16:2c:df:ee:ba:5c:c2:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:19 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ed7dff6bf7e25a4ae711c64224feeb26f845cbb3afd4f38bb0a3f832ccc9a9c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:a0:c8:4b:67:be:78:9b:ee:8c:dd:42:b6:
4d:11:a3:55:d6:b2:a4:9a:2d:b8:e7:1f:46:6e:e9:
ac:91:c6:d6:10:da:1d:dc:50:38:16:8a:8f:52:be:
99:f3:91:cf:da:08:7c:f2:bd:5c:bb:4d:28:fc:56:
07:64:a0:1f:8d:9a:69:aa:9c:91:38:6e:d9:e2:02:
bc:93:a0:fd:89:68:eb:05:17:6f:13:48:84:e2:59:
2e:fd:06:69:4b:e9:aa:1b:15:3d:fe:97:20:47:21:
f8:9d:85:14:6a:ee:57:fe:ae:86:a9:c5:ea:d0:f6:
cb:96:19:c2:c4:08:ba:e1:38:55:6a:41:d3:33:dc:
be:7c:da:03:d9:3b:2d:e1:b7:4b:e0:65:8b:0e:bf:
f3:49:cf:b2:61:19:39:a2:1c:8a:47:11:9a:39:f7:
a1:3d:92:e3:85:82:96:bf:46:30:ee:0b:f8:8b:c1:
48:cc:6e:14:15:00:bb:ea:55:d5:75:b4:06:70:51:
b3:22:84:24:9d:e2:b3:a4:c9:63:dd:4c:27:08:39:
14:55:fb:2e:b9:58:c9:ad:2f:e4:18:4b:97:fc:f7:
f1:0a:06:f9:f6:62:f0:c4:34:e6:66:1e:cb:70:46:
79:20:82:4d:78:52:fe:66:b0:08:cb:1f:38:ca:70:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:B2:1A:38:60:52:30:3C:24:CE:7D:66:DB:1B:50:D6:B1:73:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
16:23:63:de:5c:74:f6:1c:c9:48:2d:a3:89:0f:76:7e:0d:ba:
d4:dd:7e:da:e5:4a:20:ba:1c:92:d2:39:f8:10:83:b3:8e:64:
3b:04:67:f4:c6:0b:ea:4d:ba:46:a6:58:a3:0d:5d:aa:8b:89:
51:44:04:47:4e:27:9b:7b:49:38:7a:d7:6f:c7:6b:5d:38:bd:
d0:fc:7f:c9:98:5d:0a:35:e4:a6:db:71:f1:fe:43:1b:64:f1:
6e:a2:1b:5e:23:00:66:99:56:85:00:1e:0c:6a:eb:75:9b:98:
98:f0:3c:2d:e4:4a:5e:54:17:18:1f:f6:64:62:9b:d8:46:ad:
e7:04:0d:db:b2:72:6f:20:49:be:6d:94:50:2e:9b:ed:b1:00:
f4:52:7b:d2:fb:fe:66:16:c6:3e:eb:25:a0:e2:b9:08:53:4c:
f5:96:04:9d:ba:8b:e1:68:0e:31:29:7e:3a:1e:05:e2:b4:32:
e9:5a:7a:3b:08:20:7b:fe:40:44:fb:2d:32:f9:6b:1a:81:fa:
ab:c9:45:fb:89:01:49:5c:61:2e:7d:7b:dd:a2:e7:68:2d:ab:
fa:f2:22:fe:b8:e3:e5:02:68:22:1b:4f:b2:32:d5:3c:43:3d:
09:0b:ba:b9:03:dd:9f:6e:23:6c:69:b9:63:bb:88:b6:9f:9b:
41:44:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:47 2026 by rpki-client