Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a6e44fa-0ed3-4069-8773-5a1ebfc6f786.roa
File: 8a6e44fa-0ed3-4069-8773-5a1ebfc6f786.roa (raw, json)
Hash identifier: 8QysJe+7DbSP8DvWEmUNJgucjE/k/WqQD5qrEWfLFsM=
Subject key identifier: 4A:3A:08:57:52:3E:49:33:1C:16:43:40:C9:CD:82:9C:41:0E:D6:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C228DFE0C1404E67C52CD9583FDF32D71EFD882
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a6e44fa-0ed3-4069-8773-5a1ebfc6f786.roa
Signing time: Wed 09 Sep 2026 15:12:31 +0000
ROA not before: Wed 09 Sep 2026 15:12:31 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:4880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:22:8d:fe:0c:14:04:e6:7c:52:cd:95:83:fd:f3:2d:71:ef:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:31 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=9ecd117da8de7e248399867e39dc571d73c2ea2f7dcb00ed6af399e0b633e306, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:11:a0:e5:a6:77:b7:6f:7d:d4:c0:de:af:
98:9a:9f:d9:b2:d2:90:9c:4f:13:11:b6:1b:2b:cf:
9d:66:af:e7:ff:93:8d:3a:f9:74:a3:9a:a6:b4:b8:
d2:77:9a:a7:14:c9:be:ac:0b:49:23:38:3b:a4:a0:
73:b9:53:5a:9e:91:53:d0:e8:9c:1d:96:18:cd:ba:
76:ba:dc:4f:d3:ff:5c:89:29:00:b8:9c:fb:46:e4:
2f:a3:ba:10:c0:cb:eb:dd:0a:e4:12:42:21:27:a4:
e4:30:80:cc:f7:8c:e1:b9:7b:c7:e2:4d:6b:56:fb:
f3:e7:da:e7:a4:69:6b:70:c8:89:9f:5c:54:6f:d6:
b2:55:a0:d2:cc:10:4d:12:0a:90:37:7f:ba:2e:1e:
25:3f:1d:19:cb:29:ac:61:b8:8f:21:a5:96:bf:69:
4e:f5:4f:a2:bb:da:c2:ff:28:00:69:f1:24:f8:31:
76:aa:22:f2:06:63:0d:85:3f:65:12:51:71:3f:27:
de:76:ea:c9:d5:81:3d:29:94:67:e9:b0:5e:73:5f:
be:b1:11:6c:6c:a0:07:49:54:11:9e:e0:ae:ca:5d:
ab:3e:13:7d:2a:18:10:45:a8:1a:25:0c:ee:7a:9e:
8c:aa:42:f6:73:02:3f:19:c9:25:e5:ad:b2:1f:0a:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:08:57:52:3E:49:33:1C:16:43:40:C9:CD:82:9C:41:0E:D6:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a6e44fa-0ed3-4069-8773-5a1ebfc6f786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:4880::/48
Signature Algorithm: sha256WithRSAEncryption
7a:4b:4c:1f:30:1a:c2:6f:b4:8f:19:9a:1f:b1:a8:54:b2:69:
d0:54:7f:e8:05:43:dc:bc:b2:65:32:34:12:75:2a:ff:8b:c4:
5c:53:70:47:4e:64:8f:d2:5f:7b:8e:74:ca:39:85:c4:fe:9e:
21:1b:3c:94:1e:10:2c:bd:0a:87:96:99:37:25:89:80:d3:88:
09:aa:00:d9:15:b1:bf:b1:29:7a:e5:32:ef:34:26:bb:5d:2f:
42:54:38:b9:f4:50:0f:f9:01:5b:7d:66:c4:8e:a3:83:b9:c9:
ea:55:16:df:68:02:9a:c5:51:57:12:3c:06:8c:31:9b:78:e7:
42:23:da:e6:aa:70:a9:10:9b:ba:0c:30:d9:ea:bf:ff:28:fb:
b4:eb:10:bb:8b:b6:51:e5:c8:a2:87:47:2b:8b:2b:0c:af:af:
9a:6f:2e:dd:df:97:c0:06:ae:0c:4b:a1:9f:3f:ba:ff:16:1a:
b0:0c:c3:9c:51:d1:4c:31:bb:fb:71:b9:b4:de:20:aa:90:24:
c0:81:b5:e3:fb:af:a9:1f:54:3b:89:1e:94:2a:82:bf:e4:e5:
02:84:9c:62:f1:35:d5:bb:fb:d3:02:30:8b:c8:c4:45:a4:2c:
97:5c:50:68:fd:42:41:f6:11:8f:b2:30:40:77:19:f7:14:46:
b7:20:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:43 2026 by rpki-client