Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
File: 834ff2b2-55b6-4011-9d9b-451a7311335d.roa (raw, json)
Hash identifier: 2WqiX/Nu9eqn3SV2qtuuFabdQGR4LEx+oInkw80G4UM=
Subject key identifier: 41:68:DE:65:DF:44:A7:E2:BA:B6:FB:25:98:23:96:3D:56:3C:EA:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E75BADCFAD4DBF95DB19294057CB85D80BE2405
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
Signing time: Fri 07 Aug 2026 04:41:13 +0000
ROA not before: Fri 07 Aug 2026 04:41:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:75:ba:dc:fa:d4:db:f9:5d:b1:92:94:05:7c:b8:5d:80:be:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=61e04a21ee3866817d9cd9930e487cff479075fe8a926bb55a1c27406d895d68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:89:f2:2d:c7:88:00:f6:68:35:71:79:40:
73:61:e8:67:a4:94:1d:24:e7:d4:c8:be:67:be:6b:
1a:7b:27:9d:31:8e:0e:a0:b2:f4:1e:80:d1:b0:1f:
26:c7:a2:91:df:6a:4d:d9:ab:45:f4:e9:5a:4a:11:
3a:e0:c6:fa:b0:68:64:88:1b:a9:43:7d:39:79:0d:
71:66:4e:c7:84:59:c8:bd:b6:90:ac:46:84:4e:46:
90:6d:0b:50:27:b0:37:32:09:14:12:bc:48:a3:87:
11:b5:33:68:e4:52:f5:7d:6b:50:70:29:39:6d:d5:
c8:28:3f:e8:ae:ff:5e:d6:96:37:6c:60:9e:08:01:
72:05:36:96:8a:d8:b3:98:91:c3:17:0b:62:80:26:
1b:6b:62:d2:45:92:cc:d4:48:65:5f:18:ce:41:5f:
a6:aa:13:b5:c2:6f:b2:b3:8b:91:03:b5:17:32:04:
3d:4e:d5:50:be:ff:c2:34:c2:31:a0:cb:e5:05:85:
f0:21:e8:8d:76:67:8a:bc:62:50:2c:27:87:30:c5:
45:b2:9a:da:52:50:d4:b9:da:09:ad:1c:98:9d:64:
c9:22:cc:b5:60:15:f8:e0:36:65:bb:3e:9f:e2:0c:
fb:94:df:31:4a:dc:be:e3:7e:62:37:cd:53:69:2c:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:68:DE:65:DF:44:A7:E2:BA:B6:FB:25:98:23:96:3D:56:3C:EA:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:b000::/40
Signature Algorithm: sha256WithRSAEncryption
67:1a:5d:bc:50:0f:f4:65:eb:31:73:33:0b:d3:a8:cf:94:20:
80:b6:6d:a2:06:d8:9b:35:d3:9a:3c:9e:f1:36:03:3e:22:52:
98:7d:49:35:a6:09:79:fe:d9:81:68:65:99:ae:9f:96:90:98:
63:d3:44:93:31:27:4f:61:be:ac:20:e3:4c:b2:09:58:c3:55:
36:6e:73:d4:f9:77:78:55:56:53:9c:d3:2d:b0:61:3e:86:e7:
d3:ba:4c:f1:12:6d:ca:b0:8f:e3:5b:be:01:a0:b3:03:c4:35:
79:5c:f3:91:bc:ef:c9:4c:b2:96:d8:e3:f3:ed:74:6c:0f:22:
ba:30:2d:39:3a:bf:d8:a1:cb:3b:7e:b7:4e:63:26:1d:90:fb:
04:34:ea:f8:60:f5:ac:e2:57:10:4f:ad:44:22:14:e2:c8:e9:
0f:d4:0c:87:5e:bb:ec:7c:bb:2d:26:5d:52:8e:fd:29:6d:0b:
52:16:de:52:b2:9f:90:32:88:42:72:fd:04:e9:00:87:05:39:
c5:af:ae:b6:89:bd:e9:40:d8:8f:5c:db:37:a3:0a:84:b6:43:
bd:44:ba:a3:e7:fe:8d:75:da:c4:a9:ca:e2:8e:5a:7c:0c:01:
6d:b2:85:ce:61:ad:25:38:5f:77:b5:65:dd:ec:0f:cc:3c:37:
7e:08:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:41 2026 by rpki-client