Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/89b0de0f-6d7a-449d-a144-e777ce29ce82.roa
File: 89b0de0f-6d7a-449d-a144-e777ce29ce82.roa (raw, json)
Hash identifier: tev5LFqeyS/t1o21TGGeRLzVuwVvrC7odDA9gtx1Xyo=
Subject key identifier: 90:73:4E:6D:84:B1:87:98:30:9F:AB:BB:F8:62:3D:7D:B6:82:51:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E94FF8B55E24A6B271596F42AF51F218BCFD52A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/89b0de0f-6d7a-449d-a144-e777ce29ce82.roa
Signing time: Fri 07 Aug 2026 05:20:27 +0000
ROA not before: Fri 07 Aug 2026 05:20:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:94:ff:8b:55:e2:4a:6b:27:15:96:f4:2a:f5:1f:21:8b:cf:d5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7c9b4a8014b9fcd011d6ae9aa92fc93006e1f3263c41c3e473879495043afcb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:5b:84:b9:a5:34:e3:3b:58:5f:a7:9d:f1:
3d:31:e0:08:fb:bf:23:9a:1b:fb:1b:d9:ab:f1:73:
dc:b9:8f:10:fa:03:32:e6:8a:53:75:53:00:52:6f:
f8:0c:11:34:5c:b2:8f:84:65:12:9f:82:77:e4:6a:
86:56:03:6e:3c:25:d2:c3:21:96:71:29:9e:ba:6f:
fc:0b:98:9e:ec:bc:d0:7c:45:d9:97:1c:66:ee:ca:
67:93:4b:34:a2:f2:63:20:10:b9:be:2b:59:71:46:
51:a2:60:33:e3:df:2f:5f:de:7a:00:e9:1c:8f:38:
87:a8:1a:cd:18:6f:10:85:8f:ca:30:a1:20:dc:bf:
2a:c1:7c:35:b0:2d:e6:2f:ec:7f:72:2c:7f:b6:9e:
0f:a0:60:d4:0a:00:12:08:22:df:33:a0:26:0c:44:
84:4b:47:f4:26:5a:c5:e0:a2:7b:23:d0:76:35:8b:
e8:fe:27:8f:66:f9:ea:15:80:2c:6a:9d:41:74:4d:
eb:44:8c:ad:f2:6c:13:15:e8:5b:cf:0b:a1:18:fc:
06:01:aa:a0:e1:4a:0b:06:32:95:3b:70:7e:e9:a7:
fc:fc:5a:94:97:a2:7a:ee:50:ce:fb:fe:75:04:f8:
86:70:5e:1f:98:01:ee:b6:93:9b:24:74:16:47:f7:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:4E:6D:84:B1:87:98:30:9F:AB:BB:F8:62:3D:7D:B6:82:51:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/89b0de0f-6d7a-449d-a144-e777ce29ce82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:e7:9d:3f:a3:b9:08:ae:7c:c8:1d:31:64:f3:d4:b6:d1:f1:
94:c4:28:22:16:6f:a7:5b:c4:66:e5:a9:7b:52:29:57:77:28:
1c:e4:67:2c:3a:a3:66:19:e1:ef:e5:f5:ef:a6:e1:8e:28:03:
61:97:a6:45:64:e6:8c:39:8b:62:e2:05:a9:3e:98:62:c3:c2:
b0:24:5d:66:e8:c3:c1:c4:fd:6c:23:84:75:b8:ab:9b:6e:2d:
27:af:d7:95:fe:5b:9d:b8:d3:b9:f9:c3:86:9e:50:1b:df:7b:
bb:de:5f:a3:37:d5:03:b1:ef:3e:df:7e:c7:db:12:b0:93:f4:
8e:e2:f6:4b:c2:b5:25:42:9e:c1:e1:e0:e9:a0:74:52:01:c3:
3b:2a:f1:01:a5:85:da:bc:d6:7f:11:ad:eb:9d:22:fc:9e:73:
62:9f:b3:9f:8c:8c:66:76:a8:cd:f0:ac:64:1a:68:a6:3a:13:
75:2c:c9:83:15:ba:6c:78:cf:78:dc:2e:34:1f:59:bf:db:67:
14:4b:5e:13:95:3e:59:c1:1e:84:33:68:23:85:88:38:f4:ae:
3b:78:5f:19:7d:a3:6d:52:73:5f:dc:bc:94:3c:7b:4d:f4:03:
d1:fb:37:00:c1:5c:b7:2e:85:d4:85:85:48:a4:d1:11:4e:ca:
ad:7a:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:04 2026 by rpki-client