Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa
File: 8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa (raw, json)
Hash identifier: aG3pNVFZ4A9Gs3606iGNkhj0Nh9wO/jXR1KorbsnV1I=
Subject key identifier: 03:AC:85:1B:06:91:A9:C0:B3:BE:0C:43:22:2E:01:ED:29:12:D7:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AE0A1760E3B661CB4160D5FA52B1F7F8281E511
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa
Signing time: Wed 19 Aug 2026 01:00:21 +0000
ROA not before: Wed 19 Aug 2026 01:00:21 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e0:a1:76:0e:3b:66:1c:b4:16:0d:5f:a5:2b:1f:7f:82:81:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:21 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=d8347682d3921dbd29edccbf79f47c7e96da401075c5fb6ad96508428cb13ef3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:f8:64:0f:f1:d9:4d:4a:e4:35:d6:12:83:
cb:4a:ce:26:45:e1:70:5a:f0:13:27:38:de:21:2e:
80:93:de:c3:63:fa:4c:f2:bb:5b:84:c9:c2:74:db:
dc:8e:51:1e:70:eb:58:45:e8:df:50:ee:08:2e:40:
40:25:11:54:51:2a:61:fe:88:e9:4a:73:60:49:d0:
ef:e7:d2:80:55:d9:42:b4:05:c5:d7:d6:72:ba:5c:
ef:c1:98:8f:bc:12:51:c2:c6:4e:70:2a:2c:91:46:
bc:75:82:20:8f:98:35:17:50:71:14:70:45:d6:be:
b5:5d:0d:e0:b2:33:d8:1f:47:ce:f9:df:bb:ea:df:
84:e9:e1:c3:25:e5:eb:37:3b:b2:03:30:48:ea:de:
c4:07:ed:27:9f:64:37:8c:64:dd:b7:01:46:ea:a4:
96:02:33:a1:53:a2:97:95:0f:6f:4e:d4:71:55:12:
b9:53:3d:1d:05:ec:00:da:a8:c2:cb:7c:1c:12:d2:
46:01:8f:8c:1d:3d:d2:c6:b6:48:73:1b:b0:99:45:
c0:6a:13:50:4d:78:37:b9:24:a5:4c:4f:b3:a1:f3:
90:90:e8:46:76:06:70:ac:27:5a:db:c5:21:6b:ee:
51:8f:b1:83:0d:e0:ae:99:b2:f1:55:d0:f7:d1:6f:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:85:1B:06:91:A9:C0:B3:BE:0C:43:22:2E:01:ED:29:12:D7:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a477d3d-2494-44b6-b75c-003c3fa9ba79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
81:f7:c8:80:56:7e:ff:93:aa:0c:c9:0b:33:21:47:b7:18:2f:
5a:8b:54:d3:80:7c:0c:4e:2b:4e:da:a3:0e:45:94:7d:f2:4d:
e9:85:29:73:bd:f0:22:9c:83:d9:36:85:59:04:ee:d3:c9:0c:
26:73:0c:9f:91:b5:b4:a4:b6:1c:8c:01:ab:25:4b:54:f0:92:
a0:1b:9f:d3:d0:61:ba:cd:41:87:ca:51:c9:85:9a:ba:f6:8d:
27:b1:37:c5:32:5a:2d:7d:b9:d2:0d:f2:e0:be:4a:33:df:44:
90:2e:ab:0f:a9:24:84:35:de:a8:2e:34:5f:7a:af:8a:e2:b8:
d7:4a:c5:63:6c:cb:dd:13:a3:b4:46:cc:b9:d5:49:b9:4d:b1:
79:74:3e:ce:0f:57:b4:76:3b:b6:36:45:f0:35:41:a8:e8:8b:
c7:79:fe:18:5f:d5:a8:85:1a:03:18:e9:76:4e:38:38:36:d6:
24:38:f9:ba:62:e5:c7:e4:34:00:17:86:3f:06:50:ae:f8:33:
e3:5a:97:98:39:d2:22:ad:de:ef:d8:23:7e:b4:57:ce:3a:e3:
7c:19:37:db:7c:f7:11:ae:d7:11:a7:9b:6f:72:c1:21:ed:e5:
43:c6:78:b9:10:b1:b6:5a:80:96:a3:30:93:4d:33:6a:ff:4d:
35:2e:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:08 2026 by rpki-client