Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa
File: 8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa (raw, json)
Hash identifier: fniNWuhWxpstoY6hMWgwZfL480h+PK28tsqImZWBQmw=
Subject key identifier: E5:DD:CC:3F:DD:EF:B8:34:4A:C5:2B:D1:40:B9:E1:8C:98:11:69:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 012112123EB3895A5806A79CF5D0C4E50C1DF0C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa
Signing time: Mon 10 Aug 2026 00:50:27 +0000
ROA not before: Mon 10 Aug 2026 00:50:27 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:21:12:12:3e:b3:89:5a:58:06:a7:9c:f5:d0:c4:e5:0c:1d:f0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:27 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=9808e63d63ef3be0470bda9dd03b3a68c2e372e19a88674dea34781162d694b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:c5:26:16:40:c1:11:01:b8:84:42:d3:1d:
53:0a:48:45:21:86:f4:b2:28:3a:d6:62:d8:ec:9b:
b3:02:e6:af:30:fe:b5:a9:1e:4e:0b:f7:4c:56:02:
51:7f:13:48:70:f9:c3:30:0f:12:37:1d:34:d3:94:
6c:6c:d2:7c:db:d7:a8:c4:ee:a4:ac:07:3f:d2:9a:
30:f8:91:df:97:29:d7:bd:1e:4e:16:08:0b:80:b1:
dc:ac:1c:5b:b1:91:52:ec:0c:b4:d3:de:f9:25:2c:
ec:d3:ae:39:79:f2:8e:8d:85:38:61:1a:75:84:50:
1a:a2:04:b9:b7:d4:d8:25:dd:b2:2b:c0:3b:40:c3:
ca:25:6e:66:e9:95:77:18:4e:df:51:13:53:9e:27:
1d:75:c1:b5:1f:21:bb:ac:47:74:08:cd:8c:5b:60:
d0:8b:10:57:ac:85:df:20:54:1f:b8:19:c6:70:7e:
3e:7b:83:ab:0c:ce:da:71:9e:a9:f3:0c:82:c3:fc:
21:79:8f:da:d7:0c:c1:d2:45:9d:b9:09:7f:40:a5:
e9:07:49:0e:24:df:b4:ac:58:96:ec:62:d9:5c:08:
34:55:3f:0f:84:63:ea:48:54:db:d0:77:b3:23:0c:
b1:8b:99:99:c3:49:2f:ec:96:b1:04:e4:ad:40:1d:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DD:CC:3F:DD:EF:B8:34:4A:C5:2B:D1:40:B9:E1:8C:98:11:69:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:b000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:4d:07:ae:b2:40:a2:26:93:c2:44:8c:9f:31:b7:be:0a:06:
a1:93:f7:3a:66:65:df:d0:56:93:00:f2:20:c6:5b:be:b9:ce:
fc:b5:64:06:d9:f9:50:15:5e:ce:8c:a8:cc:d2:b3:15:60:85:
fe:b5:e0:f4:03:61:57:f0:ed:c4:96:eb:64:eb:b6:8e:9a:29:
35:e6:70:e8:38:5a:9d:0a:7a:c1:bf:9f:18:27:a6:62:ed:06:
94:9e:38:fc:c3:c4:0b:62:cd:c1:08:79:f0:1d:87:84:72:eb:
9c:6d:15:6c:dc:57:95:84:1f:63:fb:4a:5f:08:9e:67:91:80:
a8:67:c2:1f:29:b7:b8:ee:62:b4:20:60:e9:a9:42:1b:59:28:
0a:7e:ff:7a:2d:3d:89:4c:3e:c4:1f:59:3d:0b:7f:ea:ec:da:
b4:c2:a1:c3:97:94:48:10:ec:24:69:8e:92:77:1d:1a:15:1b:
39:f9:3a:62:ad:49:29:82:09:e4:ca:04:ad:5b:0c:9e:03:82:
0e:e0:d9:12:c4:76:e6:ac:62:06:0e:ea:a3:e2:d1:7f:fb:44:
9b:21:a7:d1:b4:fb:55:19:2b:a0:0e:9b:c0:fc:4e:60:01:80:
c6:ac:e7:2b:f2:a8:cf:25:1d:fb:f1:e1:b0:a5:32:3f:e3:17:
80:c0:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:53 2026 by rpki-client