Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa
File: 83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa (raw, json)
Hash identifier: aR6g35OvGRexJ0GmIxWRRN3U0h+Q+9r40YgoKsYiXSg=
Subject key identifier: 7F:AB:AE:E5:46:43:80:C6:B6:94:4A:32:44:87:BC:31:83:A5:3D:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70D57AF6EB6F941FB6389DD1383D05F18FC62CA5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa
Signing time: Thu 10 Sep 2026 02:40:11 +0000
ROA not before: Thu 10 Sep 2026 02:40:11 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d5:7a:f6:eb:6f:94:1f:b6:38:9d:d1:38:3d:05:f1:8f:c6:2c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:11 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=e25984c70530ef3634060fb1d2a4f8c70797253c95df4a117f14d7a22ffeac02, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:ec:1d:e6:50:e9:ef:22:f0:bc:f7:79:e4:
bb:7a:3b:16:92:94:ae:fa:7d:76:c2:3f:3a:f2:fd:
b1:f8:cd:d8:c8:38:4d:e9:7e:6f:b2:0d:49:8b:f7:
a1:79:61:43:a2:41:bd:96:0e:f8:43:76:26:3c:f5:
4e:8e:cf:4c:9f:07:5d:07:02:2b:ba:d4:10:08:15:
35:8b:38:51:75:84:dc:78:fc:2c:c9:27:59:71:9c:
5d:c1:22:26:f3:a2:74:5c:c4:c9:1e:51:5d:18:4a:
6e:f9:f3:53:67:e3:03:38:0f:69:39:cc:36:56:c9:
18:8f:c3:84:90:39:6b:6d:2e:96:4f:94:ab:05:e3:
0b:2a:d7:4d:34:71:7b:da:39:d2:c8:04:dd:87:09:
24:16:57:55:44:64:b5:cb:86:5e:1d:9f:9b:a4:45:
d4:f2:fc:04:24:4f:18:c6:29:97:ae:63:00:57:f6:
fe:49:3c:26:53:15:e0:b9:ee:12:70:6c:d4:44:0e:
44:2a:0f:16:86:41:fb:70:4a:5a:a2:2c:be:e9:19:
7b:d4:e0:82:18:a5:c3:98:b8:94:95:14:ef:9f:55:
68:a5:ee:f0:69:6f:31:6d:9a:9a:2a:94:a9:29:b9:
ec:ac:29:88:cb:18:77:56:56:6b:5f:7e:41:7c:6f:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:AE:E5:46:43:80:C6:B6:94:4A:32:44:87:BC:31:83:A5:3D:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
17:10:2f:1f:47:6d:78:b9:10:90:6d:56:e4:a0:7f:b4:59:93:
fa:cf:12:1b:83:00:86:5c:ab:ee:8d:99:e7:50:31:a3:ba:69:
26:71:c8:5b:b6:91:6a:3e:62:81:50:8a:2e:ab:a0:29:51:c3:
34:2d:d6:5d:b5:48:fa:b5:60:9b:d5:e7:90:73:e2:87:56:83:
fa:bc:5d:12:e7:d7:6e:16:a2:f1:c7:40:ea:ec:8d:eb:15:ef:
f6:8b:39:61:a4:cc:a2:6a:99:ed:bf:3b:1e:d6:a7:55:8e:50:
53:f8:81:2a:00:ea:67:2f:30:d0:13:eb:bf:5c:e6:27:c0:af:
67:95:fa:74:56:fe:6a:12:3d:cc:9b:1f:01:39:1b:e0:12:21:
2e:97:e5:27:72:56:f8:8e:a7:a8:10:2f:c1:5f:0d:90:ee:e0:
7e:2f:3b:ec:a2:f7:b6:22:ae:0e:b1:52:42:de:a0:0d:20:b4:
75:27:74:f2:7a:9d:52:3a:b7:3e:1a:4c:c3:df:ac:bc:00:ea:
f1:8b:a3:9b:05:b9:f1:df:8e:b2:a6:e9:d7:bd:1e:f0:94:71:
22:f8:c8:a4:9c:92:8a:97:50:27:6e:d3:95:6b:00:3f:39:91:
df:45:77:85:c7:e3:9e:a4:c3:79:f4:8f:c7:1c:45:50:c3:5b:
51:ce:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:56 2026 by rpki-client