Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: s7XaWMz8GA2iVGt1ngKSQboeD5b6byPccedeW56B7oY=
Subject key identifier: 21:CA:97:B5:52:16:03:A4:55:8A:0F:78:89:84:77:E9:06:D8:84:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EEFD2FCB45A9BBB8D62FE9DE00B4AEFF6AB87DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Fri 07 Aug 2026 05:10:03 +0000
ROA not before: Fri 07 Aug 2026 05:10:03 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ef:d2:fc:b4:5a:9b:bb:8d:62:fe:9d:e0:0b:4a:ef:f6:ab:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:03 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7a83d1f516f62b231fd72b1fc411d42ac21fdbf167792a9fe6e5e56fd9e2c131, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:b1:59:20:fd:94:ec:b8:a9:f2:7a:59:fb:
6b:06:59:95:31:00:b4:53:82:a4:b3:23:cf:f3:19:
cf:78:f2:e3:d1:78:e8:57:e3:39:f9:2d:2a:b3:6c:
2b:85:90:da:10:21:34:8a:e7:09:3b:df:13:96:4f:
dd:2f:64:c4:e5:34:6d:be:34:e1:95:70:e1:7f:58:
f8:0d:2a:24:d7:4e:26:6b:4b:9a:ac:55:62:fb:88:
9a:a8:9b:ab:55:35:cd:03:0f:63:dc:56:92:62:92:
3d:e8:4d:c1:eb:b3:d8:49:c6:79:9b:f9:c8:33:a4:
f1:d0:5d:30:17:19:dc:3e:78:1d:92:3f:03:9a:b9:
e4:5b:d2:7a:98:8e:ca:f8:41:23:1c:b9:4d:a7:e9:
83:f8:67:d6:7a:a9:27:b9:ea:2b:6f:e3:da:a9:c7:
08:0c:45:4d:95:a1:d6:57:2c:97:55:f4:bb:5e:19:
c6:ee:3f:cc:aa:b3:f3:e5:a8:4f:cd:75:04:6a:b7:
b8:4e:33:c9:d4:79:1a:4b:a9:81:5b:1c:ec:88:41:
47:9b:46:b8:05:8a:6f:0d:e8:01:4b:bf:d3:c1:eb:
7e:76:32:f0:c5:81:e5:30:0a:7a:84:07:9e:d5:ac:
41:c9:4a:65:97:82:c4:a8:dc:05:50:e0:0a:e3:90:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CA:97:B5:52:16:03:A4:55:8A:0F:78:89:84:77:E9:06:D8:84:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
0c:b8:c3:a5:c8:26:7c:5c:aa:2d:a1:48:de:35:d5:c0:d4:45:
37:34:95:f9:07:16:08:fe:fc:41:fd:20:0e:f7:f3:d2:4e:e4:
cf:2d:d8:33:5d:87:db:1b:14:23:ea:76:20:bc:89:23:df:aa:
02:14:02:4b:68:c3:5f:ee:22:50:f8:37:e9:5c:d6:ba:e5:53:
47:e1:43:49:23:8c:55:e2:99:42:6a:84:d9:78:cf:5d:12:1e:
65:14:97:42:ff:a4:57:0b:d4:31:3a:44:e4:53:2a:b7:a4:d2:
a2:d7:4b:17:d3:1c:b0:4e:43:ab:c6:cb:cc:7c:88:a0:68:56:
0d:ad:18:a5:e3:03:9f:d0:51:66:35:79:10:4c:d9:c7:a8:f6:
1d:dd:23:03:6e:83:be:9c:88:3f:9e:09:a5:87:0f:e2:51:6c:
ea:a4:00:e9:09:3e:ba:b4:7e:8e:fc:2d:9a:f3:2b:14:1b:b3:
88:76:8d:c4:f4:82:09:9d:a2:5d:d0:a4:c9:60:dd:fe:cc:37:
df:eb:5b:36:d3:2b:83:d9:eb:1b:62:1b:62:f3:be:b0:06:e0:
22:5d:cf:56:cb:82:9e:6c:e3:87:13:37:9f:8d:34:5b:f2:77:
52:d3:3e:75:9a:a7:0a:a5:7f:0f:b7:72:8e:75:f1:f2:2f:84:
a4:7f:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:00:58 2026 by rpki-client