Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f43bed2-15fe-4a59-9d5c-729d9204020d.roa
File: 8f43bed2-15fe-4a59-9d5c-729d9204020d.roa (raw, json)
Hash identifier: TosBIk0+ByhTJ0UJwGN3WcgG667DGimO1XEvNh+BzOM=
Subject key identifier: EC:09:F5:4F:D2:F0:90:67:77:64:AD:2B:61:0E:BB:46:F2:FF:72:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0616D59429364D64F809BB3AD4D854573D6CCBA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f43bed2-15fe-4a59-9d5c-729d9204020d.roa
Signing time: Mon 10 Aug 2026 00:50:12 +0000
ROA not before: Mon 10 Aug 2026 00:50:12 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:16:d5:94:29:36:4d:64:f8:09:bb:3a:d4:d8:54:57:3d:6c:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:12 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=59771dd9d3d74500484f1ae99f26813a729518574a0165f683cf52444d1193ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:9d:0e:84:98:46:29:27:72:83:ff:e6:fd:
b5:fe:16:6e:c9:81:24:db:74:0e:7e:33:68:7c:30:
5f:31:e6:f4:8a:a0:fa:75:95:db:aa:f9:46:8b:80:
41:14:31:6a:3f:48:1b:6b:fd:47:99:83:f6:2b:f3:
99:59:b3:8a:0c:05:4b:94:ba:22:81:ec:5a:a1:30:
13:77:47:ae:23:d9:3c:d2:40:45:be:a9:0c:38:02:
72:0b:62:f9:da:84:3a:8c:47:10:d2:81:69:4d:cc:
f4:00:49:21:09:df:6e:59:af:a9:75:76:47:81:30:
59:28:9c:ac:5c:5d:31:01:9d:39:b0:e9:3b:02:22:
b5:35:f7:c4:00:93:14:15:64:44:16:be:72:d9:e8:
44:b3:4c:fe:ea:85:6c:5d:82:d4:20:d8:a6:29:0b:
d7:4c:0d:75:b5:92:a5:f0:ad:37:07:fd:ff:97:d2:
59:c9:1a:b9:3c:e1:c2:0e:fc:46:7e:bc:93:26:c1:
e2:cd:47:2e:db:98:8f:f9:23:63:7b:b9:a9:fe:40:
4b:df:99:68:13:9a:5f:b9:65:28:30:0a:84:41:86:
18:6e:bd:29:10:24:8b:5d:e8:7c:e2:70:3c:07:d6:
1b:08:79:4a:57:eb:6c:a5:9c:b6:57:d5:bd:53:1e:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:F5:4F:D2:F0:90:67:77:64:AD:2B:61:0E:BB:46:F2:FF:72:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f43bed2-15fe-4a59-9d5c-729d9204020d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:93:ae:a5:58:60:8d:7d:26:04:bf:32:a3:a2:87:ce:02:c6:
4e:4e:39:b4:aa:57:7d:c6:6c:e6:63:00:53:ea:f0:ad:9b:12:
37:07:1b:5f:69:bf:cd:20:b8:c4:4b:e4:3a:f6:62:cb:a8:48:
5c:70:7b:ff:8d:3e:a4:a2:59:17:c9:ba:be:ea:92:c9:f1:fe:
22:98:ff:4b:43:d5:f9:0b:a5:8e:83:57:01:fb:3e:39:f2:b8:
a3:2f:e7:69:02:85:84:2b:46:b2:11:06:ba:6c:f3:da:67:fb:
41:9d:f2:52:e9:da:61:b6:00:0a:66:57:78:f5:9b:a9:28:99:
bc:fa:f9:c0:dc:71:f8:00:21:cd:ca:76:b7:e6:21:29:7d:2b:
bd:f0:9b:43:b7:12:19:4e:ed:e4:cc:2f:62:d7:f1:de:6a:a7:
db:ae:46:fd:4d:f0:7e:d4:8f:fe:9d:e6:fc:37:fd:e5:a0:06:
a8:d6:ff:49:0c:08:e5:b8:74:32:c6:45:65:dc:b7:7a:ce:37:
4a:01:99:86:36:8f:25:e9:8c:1b:10:8e:0a:b4:ac:51:1d:52:
0f:3e:80:9d:5f:4d:27:1f:e2:2c:15:6d:f0:0f:15:f7:b9:01:
eb:e6:b6:1e:0a:d6:12:5e:fc:a5:5f:79:86:2b:82:59:b7:72:
fe:f0:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:58 2026 by rpki-client