Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
File: 8d2dc443-1fef-480c-8427-f1d325c92ec9.roa (raw, json)
Hash identifier: OlXCgnsLexjr4PZ1isbuIKMX3vuaDxV1FVycfCuqq6s=
Subject key identifier: 0E:49:10:E1:43:7E:5C:A7:B3:DF:C4:F8:C9:00:D6:C8:A5:3E:05:5C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18184F339E366C6FEA031D02D7C16F04250C6CE0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
Signing time: Wed 19 Aug 2026 01:10:06 +0000
ROA not before: Wed 19 Aug 2026 01:10:06 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:18:4f:33:9e:36:6c:6f:ea:03:1d:02:d7:c1:6f:04:25:0c:6c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:06 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=0280a5f416412825fef6499fd98850bc6fad1a47ccc9c900b382041cc2bee648, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:10:e5:f9:1e:be:82:18:f4:c3:04:f8:3e:
16:21:9c:6f:02:d5:67:92:cb:38:b1:74:35:42:60:
e3:fe:1f:cd:67:7d:3f:91:ec:29:04:89:84:dc:b5:
c9:02:f9:22:54:11:bc:fe:2b:f6:24:5e:74:ba:14:
7c:fa:b5:46:69:8c:35:55:d6:18:42:72:54:a3:17:
81:65:55:b0:ee:7e:dd:62:46:c4:2d:c5:f4:dc:41:
b8:b6:d0:31:f9:00:a1:48:29:21:03:5c:3d:4f:ff:
2f:57:55:20:81:ac:eb:fe:d5:af:f7:c8:7d:38:c2:
04:2c:cc:56:b8:23:62:2a:2d:d5:0a:69:88:55:72:
9f:8f:8b:93:1c:02:7d:5a:d3:dc:54:e4:92:35:68:
8e:dc:d2:87:52:2c:55:d2:a2:6e:bb:71:5f:ea:f8:
18:0c:c7:65:f6:6f:c0:ef:9c:2f:b4:f0:67:94:c4:
8e:7a:3c:c6:bc:e5:02:bd:a4:0e:1a:6a:88:8e:6e:
06:cd:38:06:da:83:82:20:a3:a2:8e:8c:85:91:0f:
9e:ae:38:4b:39:80:ca:50:84:85:06:9f:42:ab:81:
8b:28:ed:42:c4:06:49:d8:ef:44:d7:93:85:d5:9f:
33:36:a8:59:c9:36:36:c6:7c:d2:ba:7c:5c:a7:b7:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:10:E1:43:7E:5C:A7:B3:DF:C4:F8:C9:00:D6:C8:A5:3E:05:5C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d2dc443-1fef-480c-8427-f1d325c92ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:6080::/48
Signature Algorithm: sha256WithRSAEncryption
67:8f:30:3d:ec:a1:af:ac:5a:e0:de:bd:e9:24:c3:7d:07:3b:
7f:6b:9a:8f:67:8f:bc:e6:e9:83:b3:29:01:2d:31:3f:9c:33:
50:65:32:b8:2c:26:74:0c:e0:74:ee:4c:cc:f4:66:8d:a9:00:
29:55:34:cf:23:fc:67:65:1a:8d:a6:01:7e:cf:fe:1f:1e:2e:
ab:81:37:6f:99:4a:60:a8:1d:fa:33:35:39:7f:a5:df:12:4d:
fb:8b:26:38:9a:4c:8b:33:ef:c3:98:7b:3f:ce:a4:6c:0b:6a:
d1:f4:0f:0d:ed:00:92:a1:07:50:05:97:bf:56:a5:f8:c7:28:
f0:d9:aa:38:c1:17:d1:c5:d9:ec:f6:a3:0e:4c:53:4b:22:20:
79:d3:2d:91:aa:6e:2b:d4:67:99:e1:26:f7:8e:75:59:df:22:
ed:0f:fb:b1:97:a3:73:05:b3:ef:a0:32:2c:27:69:52:01:d5:
34:27:6a:26:a3:e3:18:d2:00:f5:23:6d:bd:d7:b9:10:49:90:
1d:da:b8:7d:04:94:1b:a1:1c:44:82:d3:b1:30:7b:2d:88:43:
57:dd:47:eb:1f:e9:9f:25:11:6e:2e:5e:d0:0f:de:4f:b1:1d:
db:6b:05:47:43:81:20:f7:01:49:97:30:f5:56:b2:8f:a9:18:
48:6f:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:28 2026 by rpki-client