Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
File: 8b940c44-168e-4976-b17d-778e9341611b.roa (raw, json)
Hash identifier: XJZ3FH7suctBOgwJ2iTmrjwsnzgJBzLID+dBkceArKY=
Subject key identifier: 7E:92:23:67:70:BC:44:0D:9C:1A:29:BE:A2:4F:F9:7E:22:CD:68:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40516C7BB1331B9098C82D8096D8A2F866671778
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
Signing time: Fri 07 Aug 2026 05:31:11 +0000
ROA not before: Fri 07 Aug 2026 05:31:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:51:6c:7b:b1:33:1b:90:98:c8:2d:80:96:d8:a2:f8:66:67:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=428140ad84534276a8cfff500c547ef98541b85e595e319c50ede852cf9cac61, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:b0:84:8b:33:5f:e1:5b:0e:a6:e3:2b:2e:
03:a4:a2:1a:ed:8f:5b:bc:31:21:03:00:9f:78:c7:
53:61:ea:37:81:a2:ba:0e:5d:c6:60:22:39:ca:fd:
47:2a:2c:59:16:97:47:cd:97:d5:46:fe:d5:cc:d6:
59:fc:df:f4:c3:be:63:a6:83:d1:67:60:f9:54:cd:
9d:7e:7b:d3:f8:8d:ca:9e:c7:13:68:ea:1d:a1:c5:
51:03:20:22:3d:6f:90:5d:f3:c9:3e:1f:b3:10:a3:
08:24:e6:ad:75:ca:7e:ef:c8:15:76:5d:2c:81:6d:
dc:de:0e:cc:27:63:40:23:7f:f0:32:3f:90:65:99:
9d:c4:96:5a:d9:ef:85:37:a8:2f:e3:7f:0c:b7:2b:
89:f8:c6:1e:64:9f:08:b9:9c:9e:12:4d:1f:26:f0:
9b:97:04:bd:d9:82:3a:45:d5:e9:d6:b3:a6:a3:1f:
5b:8f:ae:7e:43:0e:80:34:7f:e3:37:99:6b:9b:cf:
f9:9b:8a:19:a1:db:a3:3a:17:bd:5e:de:00:73:80:
de:60:40:03:55:ec:fb:59:ef:9f:9b:19:30:97:37:
5d:8e:8e:a1:b5:04:b1:d9:f4:65:73:39:d6:d6:e1:
64:6b:58:97:34:90:06:69:8b:d2:cb:9c:09:49:dd:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:23:67:70:BC:44:0D:9C:1A:29:BE:A2:4F:F9:7E:22:CD:68:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1080::/48
Signature Algorithm: sha256WithRSAEncryption
6b:7b:ca:11:07:8c:f8:35:08:a8:19:07:7d:1b:df:14:94:91:
7d:6a:61:e9:79:a2:b4:83:7b:da:19:60:82:df:15:83:38:ae:
a4:51:6a:be:92:71:cd:85:02:04:65:0b:4c:60:5a:2f:b0:20:
98:42:0f:12:63:37:8d:91:fc:06:62:d3:78:14:96:94:c3:02:
c5:46:13:59:df:7f:c1:b3:45:22:8c:36:d7:3a:b4:be:52:ae:
55:37:f5:b2:d4:a7:aa:35:91:3d:ad:4b:91:6a:47:fe:6b:3a:
3b:ac:07:d1:74:ca:b1:44:9e:84:34:4b:76:ef:20:fb:9e:dc:
9e:3f:47:97:8c:84:ac:42:f3:25:b7:b6:38:03:4b:bb:50:66:
b3:6a:67:1a:e0:1b:5c:42:48:38:cf:62:73:b6:8b:59:b4:56:
15:c0:e5:80:ce:b3:af:32:1e:87:85:75:bb:a4:e6:e6:10:b4:
de:f6:c6:ed:d0:10:ac:8d:54:b1:20:45:bc:0b:53:3d:a7:43:
56:9b:1d:a0:3b:8d:67:aa:87:c2:0a:8d:f8:dd:0c:e7:a5:99:
d4:9b:17:fb:2f:b9:72:5b:d9:75:41:3a:a0:75:9b:b3:4f:2e:
27:d2:77:5c:5a:4a:d5:8a:ec:47:83:93:d9:a0:2a:ca:ad:54:
de:1c:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:52 2026 by rpki-client