Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/844bcbfb-bad7-4932-ae17-78fb6fdced41.roa
File: 844bcbfb-bad7-4932-ae17-78fb6fdced41.roa (raw, json)
Hash identifier: FnU18T4349GrgwkI4lJ0O4cf7qTOaH8PxFqM7svuvyQ=
Subject key identifier: 89:EE:F8:51:3F:68:0B:08:19:DE:5D:92:72:59:48:36:39:8A:35:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14D3F367470E3406BDF2AD972BCE09598E46F36C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/844bcbfb-bad7-4932-ae17-78fb6fdced41.roa
Signing time: Thu 10 Sep 2026 02:30:11 +0000
ROA not before: Thu 10 Sep 2026 02:30:11 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d3:f3:67:47:0e:34:06:bd:f2:ad:97:2b:ce:09:59:8e:46:f3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:11 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=f10fce5a6ca702025120184da6ac9a34ade6bd7a1662becac2fbf32e019e658a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:ac:24:67:a1:1b:b2:e3:ef:b1:8a:50:11:
cc:03:cb:2a:4f:08:68:5d:1b:86:16:71:99:2b:5c:
96:cd:82:42:e7:8e:e0:5a:0d:30:76:d9:6a:29:e7:
d0:c0:3f:69:57:52:71:08:f2:bc:cc:05:aa:49:af:
4f:14:a9:07:27:8f:51:c7:c3:bc:5a:ae:f3:26:6b:
41:90:7e:44:52:93:8c:72:e2:fa:23:ae:41:23:3c:
58:a1:65:ea:5e:01:5c:1b:f3:94:5a:df:31:ee:d2:
c6:db:96:6a:23:12:8c:bb:2d:aa:2f:3f:a5:58:29:
ce:04:4d:1c:21:b7:e7:e1:87:17:d7:d8:1e:d0:dd:
7d:51:27:cd:be:67:b5:0a:f8:bc:f7:7a:39:3b:13:
8b:02:fa:46:1b:4e:f1:79:d2:2a:85:b7:29:8d:42:
e9:e2:87:2f:34:e0:aa:6d:ab:b8:b6:10:bd:54:0f:
17:56:c5:6e:e2:0b:9d:e7:20:37:43:67:24:9b:00:
5d:4c:fd:1c:1d:96:5d:3c:c1:33:91:2d:a9:aa:23:
c4:f4:54:c4:34:a5:00:a5:8d:ba:ca:96:61:98:6c:
e6:5c:49:58:15:8b:c2:85:48:5a:10:fc:a5:1b:da:
59:a8:37:0d:71:12:a6:4e:9e:3c:44:04:22:aa:f5:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:F8:51:3F:68:0B:08:19:DE:5D:92:72:59:48:36:39:8A:35:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/844bcbfb-bad7-4932-ae17-78fb6fdced41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:a040::/48
Signature Algorithm: sha256WithRSAEncryption
82:d2:52:ae:3b:39:87:75:c6:ed:ac:a1:54:bd:2d:de:43:d3:
05:4c:ff:31:44:ea:63:11:7f:40:a1:e3:d1:5a:39:e5:2e:7b:
ef:89:51:8e:27:1a:3a:4a:20:14:43:18:49:8d:85:c4:0e:4a:
aa:aa:33:a4:ee:8a:88:0e:4a:0b:94:a4:54:4b:ce:2b:e5:66:
99:45:aa:95:f3:31:ea:88:b7:64:ca:ff:17:20:a9:9a:0c:9b:
7c:82:68:bf:e8:e6:01:5d:da:cd:48:47:7e:61:ef:56:4a:ac:
e3:38:83:4b:9d:aa:3e:0a:4d:14:62:57:98:56:c9:ed:5f:6a:
35:77:d5:21:a8:e9:5e:7c:38:d2:cf:e9:f0:4a:ce:8a:58:ce:
06:49:02:d2:f7:33:74:ac:ff:99:89:ba:3d:f4:44:11:54:73:
4d:1b:30:9c:eb:37:c3:3d:53:fe:bf:27:3a:0b:38:39:e6:d1:
f5:fd:ad:0f:49:28:cb:2a:51:dd:f0:18:9d:69:56:e1:78:a3:
3c:92:96:e6:3e:cc:af:82:23:9f:5e:87:d9:6f:d1:84:13:f4:
c3:6a:c7:c8:90:d1:42:8a:a0:28:78:75:e6:c5:b3:68:74:db:
15:4f:84:a7:29:f0:8c:de:2c:80:5b:cd:41:3d:99:d6:85:31:
35:ac:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:45 2026 by rpki-client