Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json)
Hash identifier: ezJB2SnoqZRoPVhv4Yc/+Kj4esoJksxfnD1OklO84ZE=
Subject key identifier: 90:03:01:05:AE:AA:07:D2:A1:9F:4B:8F:CB:1F:42:59:0E:4A:96:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3077EB3ED89E5BA93F39375A3E31734BA36A1D29
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
Signing time: Mon 03 Aug 2026 02:50:06 +0000
ROA not before: Mon 03 Aug 2026 02:50:06 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:77:eb:3e:d8:9e:5b:a9:3f:39:37:5a:3e:31:73:4b:a3:6a:1d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:06 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=254418e428f7acdc4d7001ed45580cd3954b3df3d8c51d19b89bd6e4f3ac034f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:67:80:32:dd:96:18:af:5f:39:75:25:67:
35:c2:c6:97:e7:c8:65:bd:9f:32:8e:12:1a:43:40:
27:de:92:83:24:f4:48:71:5b:70:57:b8:21:f2:ad:
71:f9:8e:d0:af:e6:aa:f9:c1:f3:39:6f:ac:a8:0b:
fa:05:e4:fe:a1:52:74:a5:81:01:d6:e0:f1:10:ba:
4f:21:31:6d:b8:51:14:43:9d:b2:e7:3f:3e:46:9b:
9f:ce:e1:c6:e4:fb:40:f1:56:02:1a:96:bb:67:f3:
8f:ab:f9:13:12:51:0b:1d:89:b6:a7:33:dd:91:11:
75:ae:dd:42:f6:3a:ab:11:17:5b:7c:06:fa:ef:52:
5a:d2:87:bb:3a:aa:96:66:3b:a2:90:ad:7e:c9:49:
fc:ac:b7:65:a3:88:4a:a5:1a:5d:a9:33:2c:9c:d9:
9d:82:53:98:28:1a:31:6b:43:55:2e:4b:2c:41:8e:
b6:01:91:a5:f8:f6:43:86:bd:12:ae:f0:b3:d6:4b:
04:6a:bc:6a:8f:af:4f:b9:3d:cc:6a:04:58:9e:b0:
9f:fe:b7:52:6b:e0:de:23:34:bb:46:e4:27:83:70:
97:1b:a4:fd:b1:aa:7b:50:cd:a4:32:29:73:e0:0b:
05:57:da:7a:dd:58:d8:21:42:5f:10:91:f3:47:05:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:01:05:AE:AA:07:D2:A1:9F:4B:8F:CB:1F:42:59:0E:4A:96:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/40
Signature Algorithm: sha256WithRSAEncryption
18:02:66:0f:d3:5d:c5:2e:c4:49:7b:80:02:40:90:4f:a1:ae:
4b:4c:35:d7:56:87:f4:d7:1f:6b:c6:08:0d:28:6f:44:f5:d3:
24:9e:dc:05:20:81:e7:b9:11:9a:60:8f:90:02:2b:03:32:a6:
01:6f:19:5a:d0:ac:d9:48:d7:e9:32:a7:67:63:5f:f1:4b:27:
09:2f:47:8b:f0:df:d7:98:ce:1e:a6:77:8b:fe:c7:3e:fd:1b:
a8:27:0b:5c:27:be:d5:52:15:69:01:fc:d6:68:b0:77:0d:f9:
68:c2:7e:1e:9e:fc:c4:fb:32:0b:6f:b7:d3:8b:53:79:87:55:
6d:1a:5c:a8:35:a0:02:1a:39:c3:ba:64:17:5e:77:7c:58:af:
e4:78:22:86:4b:3e:5d:5d:23:0c:5b:5d:69:f5:a5:14:20:f5:
c0:d9:8a:79:74:70:aa:2e:b4:2c:59:0e:54:e8:ad:4d:a6:f2:
91:bb:ad:21:dc:ca:ff:59:d4:d2:42:02:c4:a0:98:4b:cb:0d:
45:38:0d:f8:6e:56:64:0a:ce:b3:86:73:d3:37:c1:03:84:97:
23:48:e3:67:14:f2:f1:e6:0f:49:de:0f:c6:6e:08:d1:d8:25:
45:a5:c5:e1:26:ed:f2:5b:1c:90:3f:7e:7d:28:a9:7a:e8:93:
26:05:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:58 2026 by rpki-client