Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
File: 87ec9982-c725-40e5-b829-ff0f06d939c8.roa (raw, json)
Hash identifier: 70QMv9oe498NrdgULdk4yZee64D2gOaGPaR4FKaTPSg=
Subject key identifier: 21:13:4A:CE:38:52:2B:5E:E7:F2:4A:F5:0A:74:E4:1F:7B:74:9D:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 783B33E2FFE2725C888CD0AA102E8429B87D2DED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
Signing time: Fri 07 Aug 2026 04:41:12 +0000
ROA not before: Fri 07 Aug 2026 04:41:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3b:33:e2:ff:e2:72:5c:88:8c:d0:aa:10:2e:84:29:b8:7d:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:41:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=525a1bc257a165379bf1d9540b851e14bcc5a61d1554a9cfcdc13521e2491db7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:0a:44:24:52:f0:22:d5:33:05:95:3a:54:
4a:4a:03:69:49:1c:71:d0:4b:de:f5:0c:48:00:18:
05:33:06:4e:25:ef:88:6f:0a:af:6e:e6:77:b6:c5:
8d:92:18:06:a2:c7:5f:91:86:2b:c3:7b:e6:e1:ea:
7c:d7:0d:42:b7:aa:f4:00:bb:8a:90:b1:8d:e6:81:
c0:b0:0e:1f:f7:39:e6:f9:77:75:23:83:2a:c3:93:
7b:fd:58:22:73:20:cd:71:c1:d8:42:98:7f:16:68:
9e:8f:46:f4:72:21:1e:1d:2f:3b:2a:26:37:27:74:
aa:37:f1:45:ca:d0:6e:3d:a1:cb:cb:c9:ad:00:7b:
a9:6d:98:49:20:ea:f9:58:76:c8:25:88:4e:a2:ab:
98:79:d7:3f:66:7d:08:6b:13:3e:17:67:c5:a5:32:
0f:e0:52:f9:83:e9:bb:bf:ad:13:c6:84:92:d4:0b:
7b:94:84:d9:f2:49:23:a7:df:4b:da:f7:c6:31:77:
99:92:12:7e:b7:d7:0e:97:b2:6e:fd:14:53:89:07:
28:4e:13:d4:30:13:63:b6:17:25:5d:76:30:48:28:
4b:39:ca:42:6d:6d:c3:08:a8:65:18:f8:20:a5:36:
37:fd:8b:6f:91:c7:8d:aa:a7:15:2c:29:2b:11:f1:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:4A:CE:38:52:2B:5E:E7:F2:4A:F5:0A:74:E4:1F:7B:74:9D:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:9000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:09:4a:5d:bc:98:14:f8:4f:8f:e6:b7:17:46:7f:a7:0b:68:
1d:79:7a:d8:eb:6b:c0:30:38:b4:61:0c:9f:f8:c6:37:50:52:
7a:28:3f:79:0e:92:8d:6f:48:c0:29:94:38:90:ce:5e:b4:2e:
37:1f:f0:40:76:6b:98:a1:62:d6:3d:e1:87:1b:85:d1:be:b3:
5e:14:9d:4f:32:41:b7:bb:08:3c:d6:33:b7:f5:b0:7c:09:4d:
92:a5:8c:68:0c:0b:ae:d2:22:13:8d:a5:69:77:59:ad:1e:c9:
c4:0e:9b:78:bb:8f:ad:18:9c:26:80:74:74:3a:06:73:e3:96:
29:58:1a:02:4a:ef:eb:bb:4e:f7:7a:d5:32:3d:3d:3a:b0:22:
60:bc:2b:29:de:bc:1a:ee:5b:c2:9e:70:8e:fe:9a:7e:9b:18:
de:c7:c4:f5:7e:f1:2d:de:5a:63:fa:0c:ce:44:82:ee:2a:90:
b5:12:7a:d6:d0:b3:88:db:de:15:f4:99:69:2b:be:ff:21:12:
fa:b5:69:cd:f5:3c:3c:b0:d7:dc:e8:af:00:4a:fc:b6:e5:be:
98:20:de:73:91:54:02:9f:c5:6d:cc:a5:93:6b:66:e9:df:23:
cf:f4:b5:c2:d0:72:44:5f:2d:8c:19:c2:bd:26:85:ee:f0:a9:
f9:9e:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:10 2026 by rpki-client