Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
File: 92652652-28d6-49c1-8ea6-f5079f374345.roa (raw, json)
Hash identifier: lSP9BAooc8qFv8Zl5McOkulBFwOYhYZ3qWbLBJiVZWU=
Subject key identifier: F4:40:07:92:87:39:D9:DB:5C:A9:C0:83:CE:10:81:29:44:27:21:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1736ADE1D7CFA2B6A9D352C03C7F7B9EF200A275
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
Signing time: Fri 07 Aug 2026 05:10:08 +0000
ROA not before: Fri 07 Aug 2026 05:10:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:36:ad:e1:d7:cf:a2:b6:a9:d3:52:c0:3c:7f:7b:9e:f2:00:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a723361ad1ac78df86e929b47c2c4435ce2938e3011aa1d4e95d5e1e495bafdd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:20:dc:77:ae:9e:85:d2:3c:86:cb:57:fd:
d9:02:0a:36:ad:3b:aa:50:17:b3:65:e2:8e:db:66:
75:4d:c2:0b:ba:e5:69:10:2d:b5:a8:a8:66:cc:77:
87:60:00:8a:7c:0b:91:22:f4:42:84:8b:d9:11:87:
1c:78:6a:18:07:df:c3:c0:b4:01:93:c7:9a:cb:c0:
d5:22:c2:e6:20:6c:3e:43:90:16:86:e9:5d:79:e2:
43:2e:05:13:56:80:19:7e:ad:ff:fc:e5:f1:e4:f6:
47:50:18:61:ef:2c:eb:fc:f7:cb:47:0d:7e:3c:b6:
1f:c5:41:09:2e:a6:94:b8:5a:14:c0:cc:b1:09:6f:
08:ff:72:c3:7f:c9:ee:ca:39:4c:e2:1e:ab:1b:38:
32:82:d0:80:35:4d:0d:ca:06:5a:c5:e4:19:c0:5f:
26:e4:55:bf:6d:00:d4:c9:60:bd:f9:8c:d2:12:6c:
e8:3b:cd:b2:7d:fb:52:af:c5:f5:2e:3c:b7:1b:09:
52:e1:8d:40:92:01:44:bf:5d:68:8b:c0:25:e3:a5:
7a:f0:77:2d:ed:69:9f:48:d7:60:ed:dd:7a:c4:d5:
66:00:9c:b4:de:b0:12:8f:44:d2:3b:4b:09:0e:b8:
bd:cd:b6:85:b2:19:df:3f:2b:57:eb:81:1d:da:72:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:07:92:87:39:D9:DB:5C:A9:C0:83:CE:10:81:29:44:27:21:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4060::/48
Signature Algorithm: sha256WithRSAEncryption
60:f1:e5:1f:4f:bf:13:5f:6e:0b:14:cc:77:30:a9:6e:a5:1c:
0a:92:ad:95:b5:66:83:f0:81:8c:b8:8e:0b:fe:cf:eb:9b:b5:
aa:04:1b:2d:ba:59:99:00:bc:ee:28:0a:99:18:fd:97:5c:05:
3a:ca:9d:5a:c7:58:ad:60:c6:06:4f:f0:e2:55:a8:10:ff:7c:
7a:12:31:83:8b:d7:10:f5:35:5c:39:3c:c1:fa:8e:6d:37:93:
2e:cc:c8:4c:10:a5:c0:78:68:cb:02:8d:a5:71:aa:d6:10:ca:
46:85:3b:37:1a:c8:81:aa:d9:11:8d:38:b0:f9:d8:e3:07:e0:
d5:fd:6c:de:16:d1:0c:5d:93:c2:21:73:c9:16:34:d2:36:b7:
32:59:24:a3:e1:14:c0:8c:e0:f7:10:80:a1:2f:ad:bb:ec:48:
d5:11:77:7f:12:93:cf:07:51:05:5c:61:ea:92:e4:de:ed:e4:
81:50:a9:b8:e9:6e:41:2a:87:8f:b3:ea:2c:bc:90:dc:70:eb:
4f:4d:7f:f1:d8:53:43:6d:9e:63:0c:e3:21:8b:8d:14:07:11:
13:7f:b8:df:a2:91:34:84:5a:cf:50:c4:0b:3e:a2:dd:45:f3:
12:74:64:56:21:71:7a:f7:29:b2:de:95:c0:ce:24:78:56:a3:
1a:c2:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:54 2026 by rpki-client