Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/832c67bf-7768-42f6-8003-68be6e3930a3.roa
File: 832c67bf-7768-42f6-8003-68be6e3930a3.roa (raw, json)
Hash identifier: h52vF+oo9gjso99owjXK4bu0BNBMXZSfCI7yS6kmUpo=
Subject key identifier: 84:D1:0A:22:0E:AE:5B:F8:B3:1A:0F:5D:60:B3:3E:25:4A:0C:F2:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C1FD22A1913B459E6AF23BFB53F191B32A7F2FC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/832c67bf-7768-42f6-8003-68be6e3930a3.roa
Signing time: Wed 09 Sep 2026 15:12:30 +0000
ROA not before: Wed 09 Sep 2026 15:12:30 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1f:d2:2a:19:13:b4:59:e6:af:23:bf:b5:3f:19:1b:32:a7:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:30 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=e584a76890cf0c7bce1a60308959e24c78c9af17c63d0b70a517ba80d13240ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:2e:d2:cd:de:3f:6b:39:3b:13:fb:c5:65:
f8:4c:38:c8:dc:9c:d3:94:53:75:f3:1e:a9:c2:41:
b9:15:8a:32:3a:1a:b7:5d:b9:f2:82:75:53:b5:f1:
a7:b1:f1:e0:16:dd:2f:6d:e5:aa:f9:69:74:4f:48:
0a:a7:93:13:69:ce:1c:d3:b0:e8:40:1a:54:2d:49:
f9:2a:4a:78:2c:6d:5c:25:25:49:be:ea:ee:70:81:
88:77:1d:e5:ae:e2:3a:aa:16:a7:19:ab:97:96:37:
12:0a:2a:e3:a9:51:13:27:7f:a9:44:9f:de:ac:0e:
c7:e2:2b:36:1f:16:76:69:be:bc:c9:8e:bb:2e:d8:
93:16:6f:47:53:ce:c6:4f:3a:6a:18:61:77:71:30:
87:47:4c:58:43:67:06:19:5a:70:3f:75:13:ce:c9:
69:91:ef:f2:36:39:a4:db:e9:7c:95:73:fc:33:0d:
36:06:e9:ac:e8:46:08:22:ce:71:b6:97:8f:da:dd:
34:b4:58:03:3d:b3:f1:87:a1:63:d4:97:e0:d1:20:
38:89:b4:12:1c:7d:c6:e4:8f:b4:1d:3f:52:0d:76:
dd:52:e4:89:f9:eb:a7:a7:c7:4c:36:62:b1:b2:28:
ce:ef:ae:f4:c1:f6:6b:ec:48:6d:aa:09:46:ef:d9:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D1:0A:22:0E:AE:5B:F8:B3:1A:0F:5D:60:B3:3E:25:4A:0C:F2:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/832c67bf-7768-42f6-8003-68be6e3930a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8880::/48
Signature Algorithm: sha256WithRSAEncryption
31:25:e0:0e:f0:c1:bd:61:eb:82:c2:81:4a:cb:86:38:7d:04:
c7:a5:6a:cb:c7:6a:3c:30:0b:33:60:91:10:68:2c:04:95:68:
f9:8e:cc:27:9f:59:ac:34:4c:fe:57:c9:a9:cc:81:2a:85:3a:
7e:a2:0e:a0:b3:88:1c:07:c5:d9:04:cf:46:0a:6d:de:19:c9:
3c:a1:84:c2:8c:12:b1:7a:b7:ed:3d:83:1d:60:5a:cb:ad:f8:
fb:e2:fd:66:79:bc:35:73:60:51:99:0b:a5:7d:e2:18:63:bb:
d9:46:ed:77:99:00:3b:39:cd:2a:50:c4:a4:08:5b:88:52:88:
90:dc:36:98:24:9c:d2:05:c3:d2:6b:80:a8:82:c3:c7:7a:92:
7d:54:d1:f4:06:a5:7d:e4:e3:7b:6e:03:6d:f5:c8:3c:ae:bf:
f1:66:d2:08:f3:d8:19:66:ad:c6:f7:5a:22:4b:3e:8a:9d:e1:
24:29:6c:cc:12:50:bc:66:96:3d:65:76:25:db:20:6d:d4:56:
59:ef:4f:cc:cb:da:94:1d:d6:d2:41:e7:a0:3b:4a:59:a4:45:
86:1e:4d:9c:2c:c4:c9:7b:a3:33:64:a0:6c:48:9a:9a:05:fc:
2f:38:41:fd:4b:7f:2f:e9:8e:98:02:6c:e0:65:07:e5:d7:7c:
29:64:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:37 2026 by rpki-client