Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
File: 83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json)
Hash identifier: GChq73Nrv+M8Q/fouk/K9P9vDfVF3x6uAdIGN9XIB6Q=
Subject key identifier: 46:E6:5F:12:18:7C:13:F3:B9:7B:AC:E8:7B:03:F4:3D:0D:A9:24:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AE22C26ED3A8E7BC7D8A7788C592DF352E1086A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
Signing time: Sat 08 Aug 2026 00:00:09 +0000
ROA not before: Sat 08 Aug 2026 00:00:09 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e2:2c:26:ed:3a:8e:7b:c7:d8:a7:78:8c:59:2d:f3:52:e1:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:09 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=036e8b0a10effdb98d7c566da09f08cae0498040d753312ec0a98931c5402acf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:7e:ed:13:f5:f7:90:df:e5:e3:8e:0e:53:
62:a2:ce:7f:e6:5c:3e:1e:4a:d5:da:1f:b9:4a:7e:
84:4e:22:84:78:d8:d3:b1:f0:99:a3:a1:4d:9c:4b:
e8:69:52:8f:63:57:6c:77:0a:cf:d9:ab:a5:26:0f:
44:42:f4:ae:e3:a9:39:51:16:f7:ec:55:c3:38:b5:
95:f3:6e:0e:00:0a:a8:0b:3e:f1:26:02:70:9d:50:
3f:3d:9b:8a:4d:0a:db:e5:9f:3d:40:d9:a0:7c:15:
0d:ee:92:bd:f0:cc:e9:2e:82:bd:eb:19:93:23:e9:
78:12:05:b9:2c:16:72:0e:58:cc:9e:05:27:d3:ea:
02:cb:c3:d9:4b:7d:f7:ca:44:ba:d3:37:83:48:1c:
0a:c6:68:4d:7a:c6:2a:59:07:1f:df:42:d2:57:be:
f8:e5:08:fc:9e:cd:94:1b:4d:19:b1:0d:0b:27:62:
31:4d:78:b2:b8:d2:6c:47:a7:33:df:54:cc:7b:87:
97:47:4b:4e:3f:5f:6a:44:e2:01:cb:8e:31:3c:85:
26:f6:e2:f5:e7:da:3b:9d:33:e4:5c:40:5d:38:27:
60:2e:65:e5:70:51:1d:47:70:83:20:b2:77:ad:d6:
c9:92:8a:6f:5c:21:f4:7b:95:ba:cd:db:68:bb:f1:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:5F:12:18:7C:13:F3:B9:7B:AC:E8:7B:03:F4:3D:0D:A9:24:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/18
Signature Algorithm: sha256WithRSAEncryption
61:cf:e7:2e:b5:95:80:5e:62:ba:b9:f1:cf:6e:f1:38:99:c2:
e3:19:99:18:b1:25:d1:79:7b:63:fe:89:62:96:d4:10:82:3b:
71:40:d3:3a:81:cb:0b:a0:b3:98:81:b2:87:82:4f:e3:fb:7e:
94:31:ee:05:e4:4f:1c:79:25:e9:36:e0:1f:08:2e:fd:23:e8:
d2:91:40:bb:c9:bc:1d:3f:e2:ed:50:db:0b:d2:ea:30:ab:85:
4e:01:08:07:06:55:6d:78:90:0a:d4:1f:f0:fa:a8:d9:c0:21:
95:46:c8:c1:65:04:81:80:cf:6d:4c:80:88:d0:58:d2:bb:42:
e5:a4:2c:19:2e:2d:60:e0:36:13:ae:92:eb:fb:f7:36:e9:5e:
c7:3b:b4:1b:a0:15:45:47:7a:0d:38:3d:3f:bf:a1:4b:d3:f8:
df:d2:79:95:9c:28:3b:14:d1:77:97:c1:05:47:ac:6a:48:f0:
54:f5:85:28:0d:7b:c6:d4:bb:93:cb:c1:a2:82:7b:40:ec:a3:
19:63:af:09:bb:b8:cc:8c:23:79:61:cf:13:ce:07:f1:e2:27:
f3:d2:7c:df:01:8c:2b:1f:08:cb:7b:17:a5:a4:a3:0a:7c:96:
3e:fe:4b:05:7a:d5:9d:91:f0:3b:9e:21:e1:d2:5e:e3:c0:c0:
79:de:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:16 2026 by rpki-client