Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f41d994-816e-4c1f-8048-0c2fdf511f74.roa
File: 8f41d994-816e-4c1f-8048-0c2fdf511f74.roa (raw, json)
Hash identifier: CdaXvaero0TiW9ggn/kWjTsutgxzzzp2858sbZmFs4M=
Subject key identifier: 09:68:92:17:91:15:4F:5D:4E:14:B8:E0:1C:6F:78:1E:23:2F:92:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23FAD2E8577D12ADAA7A1912A2D8C40250DB672B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f41d994-816e-4c1f-8048-0c2fdf511f74.roa
Signing time: Wed 09 Sep 2026 15:12:30 +0000
ROA not before: Wed 09 Sep 2026 15:12:30 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fa:d2:e8:57:7d:12:ad:aa:7a:19:12:a2:d8:c4:02:50:db:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:30 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=0e9aabc6be6c6deb12b0dd4fe316ef7b807b33cf9d147daa2e9486e4b0ffc7bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:8a:8c:70:d7:19:28:c0:71:39:4f:ae:3f:
9a:a3:04:5a:d7:40:73:db:f1:61:47:3b:d4:c0:83:
20:d4:de:86:7d:ee:3b:63:19:79:da:36:52:83:cb:
aa:81:75:dc:a3:99:a8:62:74:05:df:a2:e0:bf:57:
57:7f:0b:3e:30:43:95:d7:41:e5:86:77:2a:05:40:
71:8e:78:84:83:67:56:1f:9d:51:7f:37:27:e2:14:
0e:d1:5c:39:59:99:bf:db:07:56:49:1a:41:49:3a:
53:b0:d3:75:b9:0a:96:c5:f4:25:2e:eb:ab:b0:ab:
e2:ca:10:21:68:c2:0a:6b:5c:b2:1f:49:ca:ac:d4:
2c:e1:bf:2c:9e:65:c4:7a:13:bb:a1:e8:e3:16:06:
a2:59:18:45:a8:bc:dd:9c:27:b5:d0:18:e4:6e:ac:
b6:26:bd:90:fc:77:20:c2:e6:9d:43:15:45:fa:7f:
14:cb:df:7b:99:47:2d:c1:bc:55:2b:37:3b:bc:c8:
8a:8d:c3:81:ec:73:19:d2:18:cf:cd:5c:db:89:e1:
ae:0d:3a:57:a8:cb:d0:c4:68:00:04:63:c1:e9:c4:
47:7b:db:99:c2:51:9e:e9:b2:97:62:4d:4e:78:ff:
78:d8:1c:a2:08:6f:1c:58:ec:9a:82:16:4b:77:93:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:68:92:17:91:15:4F:5D:4E:14:B8:E0:1C:6F:78:1E:23:2F:92:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f41d994-816e-4c1f-8048-0c2fdf511f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:8880::/48
Signature Algorithm: sha256WithRSAEncryption
70:69:c9:f1:35:88:1e:e4:de:bd:7a:8a:05:c8:68:8d:0e:7a:
84:55:d6:f5:eb:6c:59:b8:f6:90:23:e6:8b:c6:46:8e:71:55:
ad:de:b8:e7:67:63:fb:a4:c9:ec:07:89:4e:1e:f7:24:a6:70:
83:6e:43:fa:e6:00:6c:e3:bb:23:eb:a3:40:c9:95:a5:70:ef:
1d:5e:2c:5d:78:c8:d8:6c:36:d9:ae:9c:55:99:05:60:20:5a:
aa:24:13:d4:1f:ce:02:23:00:e4:fa:0c:c3:14:ce:81:08:e5:
a8:bd:bb:d1:14:b5:41:cf:df:f2:4c:34:df:82:26:27:03:39:
f7:50:fb:34:49:14:9c:44:62:e3:be:20:c4:60:d6:1a:11:e4:
bc:85:97:a7:dd:d2:7d:30:99:8f:05:02:05:37:e2:08:af:8e:
b7:9b:a9:d4:0b:86:ee:07:d7:0b:94:78:96:9c:05:bf:2f:db:
11:d1:fb:8b:62:1e:51:0d:ab:17:e7:6a:1d:f2:93:b0:53:42:
59:cf:ed:e9:71:19:ce:d4:62:75:be:d5:84:b0:8a:e3:de:02:
de:7f:e6:93:a2:43:58:9c:72:88:8c:b8:28:92:aa:68:55:9c:
00:36:4e:4c:04:76:dc:5f:18:bc:eb:8d:50:66:61:8b:c6:57:
2a:ff:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:46:23 2026 by rpki-client