Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a08546c-95f4-4212-bc90-84b3f9c4ef44.roa
File: 8a08546c-95f4-4212-bc90-84b3f9c4ef44.roa (raw, json)
Hash identifier: cdoibptGHB5OwLuvoT+Gy+Mld0PK4khv5UI+u0a1zPU=
Subject key identifier: D9:BB:7B:A4:52:18:E1:F4:29:D7:3D:05:AC:6A:78:40:6F:63:EA:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CE4CC026846500653E4642B46D29EABF73FB79F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a08546c-95f4-4212-bc90-84b3f9c4ef44.roa
Signing time: Wed 09 Sep 2026 16:15:16 +0000
ROA not before: Wed 09 Sep 2026 16:15:16 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e4:cc:02:68:46:50:06:53:e4:64:2b:46:d2:9e:ab:f7:3f:b7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:16 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=8ce0d752059e158aae4fcb0b51b35ed6133ee36e4bae23d4aa6a7e4ebd1d7c07, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:fb:d2:f4:7e:0d:bb:76:26:34:4b:46:b1:
09:fa:5c:8f:7d:09:f7:ab:9f:6b:be:0f:07:ee:4a:
8e:5b:de:9d:fd:03:ae:ca:90:b5:0c:e0:3e:07:b8:
fb:89:2f:6d:b7:e6:aa:23:b0:68:20:ab:f9:0e:ac:
c0:93:99:8a:9d:28:d3:a9:aa:bd:60:36:26:e4:6a:
2f:fd:79:d7:86:9f:a2:c2:1f:d5:56:0e:12:37:70:
bb:f3:83:fd:da:c6:70:d5:ae:cb:a2:cb:6d:3a:61:
05:d7:f3:35:4a:31:43:43:e8:e3:1d:3b:83:84:d6:
88:fc:2a:e7:cd:4d:7e:51:19:a4:ea:73:45:65:d1:
1f:a2:84:9c:fd:b1:56:8d:fe:d5:ac:0e:72:d6:fb:
aa:ca:42:f4:1c:bc:8f:ff:b5:e3:bd:98:33:41:06:
4a:eb:b4:40:81:f5:c7:b2:e7:3f:3a:1c:ae:0a:08:
68:f3:b5:5f:66:92:d5:51:cc:11:6f:a4:00:9f:8e:
e3:a3:be:16:d7:23:97:45:d3:42:14:ab:c2:0f:a6:
83:a7:55:2e:d7:51:af:c1:fb:19:20:95:37:f6:7e:
b7:b6:46:85:ec:a1:b9:d9:19:8c:9b:46:24:b6:bf:
0c:6d:47:8d:9b:e7:b1:c7:06:4d:00:28:20:1f:dc:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:7B:A4:52:18:E1:F4:29:D7:3D:05:AC:6A:78:40:6F:63:EA:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a08546c-95f4-4212-bc90-84b3f9c4ef44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:4800::/40
Signature Algorithm: sha256WithRSAEncryption
94:d4:56:0c:de:d9:1b:c0:68:96:bc:97:0a:a3:97:b4:3e:7b:
1e:a1:ce:17:eb:b9:89:14:f9:f3:eb:bd:c4:81:19:6e:69:07:
11:dc:fe:90:c6:c9:64:30:75:9b:3d:44:25:25:c8:63:bc:7e:
8a:57:4f:de:39:b3:8e:70:23:0c:e1:ad:a7:e2:25:db:c2:06:
56:3b:bb:ab:eb:c3:4c:99:92:be:62:a3:b2:e9:b2:3b:69:46:
66:f7:68:52:c0:6d:e5:4d:74:f5:ab:28:80:2d:cf:6f:0c:c4:
7c:41:2a:07:a1:a3:64:14:cb:86:c1:b9:42:bb:0e:ca:3d:79:
67:71:d2:59:53:76:9a:05:02:f9:cd:67:8f:84:b4:c0:c9:2c:
f4:a2:32:56:7c:42:9a:4e:e7:85:40:ae:e1:36:04:0b:83:37:
ef:7f:d5:fd:1d:72:6c:93:ee:dd:03:54:ee:73:fd:0d:88:43:
8f:30:2c:af:f2:28:a8:9f:b5:01:34:fa:cb:ed:a5:f3:05:25:
0e:6c:b6:49:f1:b3:03:30:fd:49:67:fe:76:f9:7b:4d:8d:b1:
79:c2:5c:54:ee:bb:fc:28:3f:19:3e:4f:0d:87:21:48:be:14:
c1:b2:80:2d:39:1c:f0:a1:94:6d:a5:3f:a5:7d:c8:5f:94:cb:
74:7c:7e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:20 2026 by rpki-client