Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d7e4a0f-a68b-4982-99dd-37b9fff718d1.roa
File: 8d7e4a0f-a68b-4982-99dd-37b9fff718d1.roa (raw, json)
Hash identifier: IFmy2PaK61PWXJWR+IUeiSp19dNC9L0eMMJa1g7FIwg=
Subject key identifier: A3:21:87:25:EA:49:A9:E4:86:85:1C:1F:16:68:8C:37:15:8C:72:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CBA19D15B37FD025E5159F7A9E7D63D1E425F5A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d7e4a0f-a68b-4982-99dd-37b9fff718d1.roa
Signing time: Wed 19 Aug 2026 01:10:21 +0000
ROA not before: Wed 19 Aug 2026 01:10:21 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ba:19:d1:5b:37:fd:02:5e:51:59:f7:a9:e7:d6:3d:1e:42:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:10:21 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=915a0113c02bd264a9b59202f8ea53c1e746c3744437be0edb38caa99829611c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:38:a0:7d:ab:6f:3c:78:5a:fa:54:5d:29:
3a:76:ed:47:c8:81:00:f1:2b:c8:15:03:17:77:5a:
bf:ed:eb:a3:ef:90:cc:2a:85:0f:4d:62:77:83:fa:
85:15:fd:6c:e3:77:c0:77:49:b9:74:e9:5b:cf:2c:
0f:89:7a:16:33:2b:d1:b6:7e:77:a2:68:b0:ff:f6:
30:ea:df:f6:cc:38:c3:f4:3c:bb:68:3d:c2:17:a6:
ee:73:b6:41:71:e9:7d:9f:43:8d:e3:cb:a8:1f:d3:
29:48:27:be:1e:1f:90:7f:1f:5a:c5:59:66:19:39:
82:b6:0e:56:be:05:3b:e7:20:08:c7:45:f8:83:5a:
a0:9c:a2:e4:d5:04:f6:ff:d0:2e:a8:83:a3:6e:5f:
df:80:f5:75:1b:d6:35:98:80:f1:3b:d4:04:91:3b:
be:24:2a:20:fe:02:8c:eb:e8:11:23:f2:34:97:00:
75:91:e9:2e:15:61:7c:b2:75:ae:13:89:f0:06:85:
89:55:e7:cc:40:ed:f8:17:38:21:96:cd:36:5b:3d:
6c:c8:52:ee:4a:66:ec:2d:0e:44:99:28:77:32:d3:
e4:21:41:37:46:c3:55:bf:4e:b4:a7:9a:b2:af:33:
be:2e:09:63:41:c0:a4:bf:c4:02:aa:06:70:1b:8b:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:21:87:25:EA:49:A9:E4:86:85:1C:1F:16:68:8C:37:15:8C:72:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d7e4a0f-a68b-4982-99dd-37b9fff718d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
30:b4:85:57:f3:76:3e:45:c9:22:a2:86:34:ae:45:63:92:0d:
e7:85:69:32:91:f8:40:93:cd:ed:76:d9:c2:76:12:e1:b1:13:
80:b5:2b:de:b0:c7:46:ac:cd:bc:a2:1b:6c:21:16:5c:3a:fb:
80:9f:f1:ff:f5:c5:1a:a4:c3:43:00:4b:49:c8:59:5c:bb:a4:
d6:d0:52:1f:06:1a:f8:2b:60:08:6a:7c:3d:c1:27:92:eb:39:
37:45:43:d4:f6:46:98:5a:5d:0b:d4:70:b1:6c:ce:0e:4a:36:
29:13:56:cc:7c:ac:70:db:2d:fb:5c:77:cf:3a:6c:47:0c:e2:
52:da:32:3a:a2:46:a4:08:82:aa:f0:3c:23:0e:c6:06:a2:61:
29:9e:38:8f:54:28:c0:4b:f0:b2:4c:de:14:65:e1:60:99:d4:
ef:51:5a:05:68:21:fc:6e:9e:9d:1b:ec:e7:57:72:ed:a1:44:
8c:25:67:76:99:91:23:ce:f3:98:48:d6:fb:49:44:49:78:80:
92:28:66:06:e4:b9:fc:61:ff:b6:cf:7c:d1:7b:e2:ef:65:65:
bc:85:ce:53:71:62:23:b1:ae:06:45:3a:d5:81:91:7d:2b:c9:
e5:d3:9d:f7:7e:f9:8b:6a:ca:de:18:90:30:1f:2f:0a:ed:8d:
51:ad:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:00 2026 by rpki-client