Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File: 9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier: VDaeAAhLnEoObFlWA33aJTuqTTp3ruF19/LvtnHGWQ4=
Subject key identifier: BA:A0:CC:35:0B:57:27:9D:C8:FA:61:8A:7D:B9:27:75:52:60:94:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C6CC437224BE9E32EB7A7DA65AB82652E969DA2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time: Fri 07 Aug 2026 05:10:22 +0000
ROA not before: Fri 07 Aug 2026 05:10:22 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6c:c4:37:22:4b:e9:e3:2e:b7:a7:da:65:ab:82:65:2e:96:9d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:22 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b1c78bc9ca6e1a6651bd4a4d81cd0167faf062cd12638922161d5d5087c7fa3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:df:85:86:19:ac:07:ff:fb:d0:33:14:85:
27:cf:b1:c6:15:ee:f0:38:e0:c7:83:ba:ef:38:d8:
88:87:de:7f:76:20:1f:26:ba:73:1b:bf:31:93:ef:
66:2d:ad:f1:5e:3f:9d:32:4b:09:b3:30:f2:1c:59:
8f:52:2b:c7:d7:f4:31:93:1c:51:9d:24:2e:a5:72:
1d:1b:6e:c9:4e:56:7b:79:47:d1:e6:d0:87:c2:0f:
db:37:0c:c1:bd:b5:0d:5b:cf:0b:04:27:07:0b:f0:
42:43:9b:23:7f:02:1a:2a:5d:35:44:ab:ae:af:24:
aa:ba:b3:3e:6c:90:59:2d:ac:c2:77:60:8b:f4:ca:
2b:68:ed:c4:8e:3a:43:fd:ee:04:43:1d:24:74:8d:
ae:3f:4a:77:20:c2:b0:6f:ae:26:43:40:22:20:68:
47:11:1d:6f:a4:2d:0f:f0:5f:7f:c5:45:4f:19:13:
6b:bd:2f:0d:11:2a:39:bc:e7:01:b8:0b:58:ec:ce:
c9:94:64:40:2c:13:ac:b6:51:bc:bb:4c:c1:92:89:
a8:4e:c7:be:85:c2:9a:96:ab:2a:52:5c:18:fa:4a:
49:64:be:2c:aa:c3:ca:8f:bd:a5:b9:93:dc:85:76:
56:5f:a8:03:ac:ee:9a:c5:a5:1c:46:08:10:7a:c0:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:CC:35:0B:57:27:9D:C8:FA:61:8A:7D:B9:27:75:52:60:94:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/38
Signature Algorithm: sha256WithRSAEncryption
31:ee:b9:96:20:64:2a:21:c6:82:6e:87:3b:1d:22:8a:7d:4f:
6b:e1:ec:08:ac:04:d5:43:59:e1:ba:05:61:19:61:7f:b3:67:
54:bb:ef:cf:c7:e9:2f:87:b1:1c:eb:f4:c9:99:22:94:7f:b9:
94:28:7a:8a:35:49:47:01:2d:c4:91:5d:c1:15:70:d7:92:fa:
22:96:60:bc:34:34:86:f3:77:af:05:eb:d4:76:4b:6b:48:08:
1f:ca:21:c0:eb:cf:21:3d:0e:46:6f:15:5e:a1:b6:c9:4d:21:
1b:21:58:b6:77:3d:6a:2c:87:5c:67:c9:2d:03:c7:de:b4:99:
97:d7:c1:0a:d9:09:20:31:1a:bb:91:33:81:2d:37:3d:25:8a:
78:d5:5a:e8:d0:a4:eb:43:d8:aa:f9:b9:94:55:8b:cb:fc:1f:
d5:78:ba:54:ec:9b:d6:95:4a:ab:2d:5a:8d:f6:e0:23:82:34:
18:65:a2:a2:94:50:ac:d7:90:45:38:ab:3e:91:85:1c:8f:e6:
5e:ce:3b:47:09:30:39:88:db:25:a2:a0:12:1d:38:6c:d5:9f:
d1:e7:39:63:78:cd:94:22:9a:61:76:f9:a3:46:1c:4e:16:c1:
e8:f8:23:c3:5e:f4:a9:18:d0:34:88:85:6c:0d:9d:96:81:0f:
62:94:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:44 2026 by rpki-client