Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85c21b2e-081a-400e-878b-d150f3ac3ea8.roa
File: 85c21b2e-081a-400e-878b-d150f3ac3ea8.roa (raw, json)
Hash identifier: kMwM1po1s5z9bcV1PNT0bORHCPe3IYG3D3eMlT5jQaQ=
Subject key identifier: F6:FF:8F:41:66:87:F6:09:2B:6E:A3:78:56:B6:D7:58:F6:CD:34:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12BB963F3A449D6706E08CA00E7BD1421E135CE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85c21b2e-081a-400e-878b-d150f3ac3ea8.roa
Signing time: Wed 09 Sep 2026 16:12:54 +0000
ROA not before: Wed 09 Sep 2026 16:12:54 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d039:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bb:96:3f:3a:44:9d:67:06:e0:8c:a0:0e:7b:d1:42:1e:13:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:54 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=e83a92cc340cd3aa120ca0db595a369168f33046d50cde75c721b11e5b39f112, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:6a:ea:ef:2c:cf:db:52:50:1d:12:2b:a4:
76:43:ee:ca:e4:bb:a6:60:d4:4c:a3:c3:41:b7:fd:
3e:67:b2:a5:29:66:d8:78:7d:5b:b4:e0:a0:74:81:
d1:ea:ec:67:59:79:07:1a:c8:1a:85:45:09:56:35:
df:c4:d2:1d:09:cf:d4:ca:07:1c:3d:86:09:ee:4e:
ef:85:9f:09:26:50:d8:9e:a2:93:71:5d:06:21:83:
07:b4:db:88:74:78:cf:c2:97:76:14:b8:62:53:5f:
44:0f:6c:80:7d:65:5a:83:8c:f0:d9:4f:58:d3:c1:
02:ba:f5:50:80:5f:96:9a:81:ac:b5:66:3f:6e:23:
74:a2:46:2b:03:ef:58:68:da:95:51:56:18:e1:6b:
cb:55:f1:b3:9b:a2:59:30:ff:13:dd:66:b1:7b:b4:
b0:f2:e4:bc:be:87:0b:9f:22:96:3d:7f:a8:6c:8b:
a5:67:81:15:81:53:64:4b:ea:ee:56:0e:50:83:40:
b8:b1:c0:3c:61:22:76:c1:b1:9b:f1:b1:24:6c:5b:
63:36:de:19:34:7c:dc:b7:0c:ac:db:a6:d1:02:5c:
32:e3:fa:de:f9:71:92:7f:2c:72:fa:8c:0e:68:dd:
cb:00:23:b1:55:fa:82:aa:5f:6f:4a:98:87:20:b9:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:8F:41:66:87:F6:09:2B:6E:A3:78:56:B6:D7:58:F6:CD:34:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85c21b2e-081a-400e-878b-d150f3ac3ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d039:2000::/40
Signature Algorithm: sha256WithRSAEncryption
44:c6:67:e6:cf:32:e2:fe:e7:96:54:72:cc:ae:38:a0:96:c5:
09:2e:98:89:9b:09:2a:b7:aa:87:30:0c:6e:aa:5b:17:60:4b:
b3:04:71:13:7f:33:d6:35:1b:28:d4:7a:4c:82:a3:62:62:45:
0a:21:c6:ff:ad:4e:16:0a:ee:80:c3:15:7a:dd:ad:bd:b9:48:
8d:e8:c0:38:3b:c7:5c:2d:e2:3e:d7:ad:28:1f:4d:4c:cc:70:
df:ac:cc:7a:1c:b7:83:4b:5d:ba:da:be:16:7c:95:53:9e:d9:
23:38:e1:87:48:be:15:39:6c:ea:be:7a:56:d7:f5:76:94:b7:
d4:f6:3c:c3:ba:61:b3:b5:16:c2:6d:bb:3f:a1:1f:8b:b6:9f:
60:cf:11:3e:f1:cc:6f:6e:3f:b5:c1:e6:62:e0:e0:67:da:92:
3c:c9:23:ff:74:29:6c:bd:25:c4:33:76:c6:e2:d5:b3:89:76:
f2:3a:c3:b9:f1:3b:11:02:bc:47:78:7f:7f:86:48:10:7c:c8:
8f:8e:2f:4c:9c:48:d7:aa:57:bc:66:6b:af:b2:39:45:75:b0:
2c:78:94:db:3b:9e:e7:b3:07:77:64:04:93:a9:a3:4b:b1:97:
04:e2:dd:d1:a7:e6:b7:b7:8d:52:e6:af:cf:9f:01:7b:e7:77:
cc:d6:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:52 2026 by rpki-client