Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
File: 88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa (raw, json)
Hash identifier: QQUoa1ezWUNA5uCNrbc2xR6K4KV48BVXvoNLolSRC0E=
Subject key identifier: 28:01:91:22:30:C9:6D:11:04:77:3C:0D:9E:C3:C8:E1:CF:EA:FA:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E4248329C961EDDF46DEB28A70F5C7A80FCB00A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
Signing time: Fri 07 Aug 2026 04:51:02 +0000
ROA not before: Fri 07 Aug 2026 04:51:02 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:42:48:32:9c:96:1e:dd:f4:6d:eb:28:a7:0f:5c:7a:80:fc:b0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:02 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=fa662a51bf5dc235be485e417a3986fa2856f48fb081657c2414608ec2861285, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:f3:89:1a:92:4c:f6:a3:3c:3a:c3:6a:ec:
8e:a1:45:48:ed:6f:9d:3f:51:07:9b:f6:70:65:2a:
4d:c5:0a:ca:fe:c5:04:98:ea:5b:f9:82:76:3a:b5:
c8:00:7a:26:e9:f0:cf:50:6a:28:69:09:02:73:54:
d3:05:aa:d6:6c:39:d1:ea:af:8a:fa:cf:ff:48:59:
a8:43:84:7a:39:ee:69:96:be:95:64:ae:73:91:8c:
a9:52:4d:88:42:c2:5d:f5:1c:87:d4:51:bd:9d:b5:
42:ce:87:86:53:0a:ee:96:b6:8b:2a:cc:da:78:e1:
00:b1:71:0d:50:6a:5e:05:d0:70:d2:71:07:8f:24:
84:38:47:bf:5a:10:66:4f:c6:ac:9f:1b:01:50:14:
df:be:be:12:91:03:43:a7:18:c5:9e:17:da:58:66:
3a:27:18:a2:4e:ff:78:0d:3f:07:7a:84:33:ee:0e:
81:e7:39:2c:fa:3a:49:82:7d:bf:d3:6b:69:18:58:
0b:de:1e:54:ce:c7:f6:4b:89:61:ae:cd:2b:a6:48:
bd:00:d6:ec:8f:dc:fb:56:ec:97:1e:6f:72:64:ff:
4d:2d:a1:0e:bc:de:c4:78:0c:96:85:fc:ed:d3:b8:
fb:99:18:f5:9f:77:11:2a:c0:82:51:49:ee:81:77:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:91:22:30:C9:6D:11:04:77:3C:0D:9E:C3:C8:E1:CF:EA:FA:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:c00::/38
Signature Algorithm: sha256WithRSAEncryption
c9:6e:af:75:1d:b0:f6:59:e9:fa:c4:be:37:39:45:b7:85:cc:
aa:25:b9:18:3b:d6:45:f3:c1:f5:35:f1:a3:52:02:90:fc:57:
01:5f:31:a6:39:ff:e7:c6:a9:c4:3a:b9:e5:ea:fb:ae:c5:38:
5e:f0:0a:9f:f4:0e:17:ff:50:1d:e2:d3:32:05:56:cd:9f:00:
2c:28:c3:91:0f:15:5a:b8:d5:9b:58:9c:13:04:51:58:03:ee:
0e:96:ce:80:44:5a:9f:8d:99:18:ab:a9:74:bc:d1:30:ef:0d:
55:97:70:fe:14:0b:a7:bb:e5:4d:ba:de:9d:ed:28:4d:5f:e8:
93:1e:2b:d4:da:b4:c4:88:8e:fa:76:79:39:98:53:ec:77:8d:
ae:30:a6:2c:4f:bc:36:de:b0:7e:0b:89:98:a4:0e:7f:17:9c:
4d:89:0c:ea:26:6d:90:d2:a5:0b:b4:d6:c4:bc:49:a7:fb:e5:
08:35:3f:61:10:41:26:cb:6a:69:b7:03:a0:dd:e3:d4:cf:f1:
be:bc:ac:8d:59:8c:e1:16:c2:3b:49:26:2a:d7:4e:a0:72:cc:
40:6b:5b:25:2f:c8:7f:35:eb:19:5b:03:e5:90:c1:2e:11:a4:
94:3e:f2:f2:e3:ff:88:19:c0:e9:e1:79:53:c9:f0:37:9c:02:
5a:07:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:06 2026 by rpki-client