Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/974764cd-c5e7-434e-93d6-6e67d7750642.roa
File: 974764cd-c5e7-434e-93d6-6e67d7750642.roa (raw, json)
Hash identifier: RwXnNSWt1lFh4ILHlTPoq4eCX/F9HA2B42/tvfq3FiM=
Subject key identifier: BA:23:96:5D:E3:EB:A0:F6:A2:A9:D4:1A:88:48:65:A1:47:BB:72:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B0B73FFD2F6FEA5016A0EE8A44108407753B76B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/974764cd-c5e7-434e-93d6-6e67d7750642.roa
Signing time: Wed 09 Sep 2026 16:14:07 +0000
ROA not before: Wed 09 Sep 2026 16:14:07 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:73:ff:d2:f6:fe:a5:01:6a:0e:e8:a4:41:08:40:77:53:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:07 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=1e132c16ecd81794481854b899042f37d71ba61a06b4323680fcf61b1cc5fd00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:cf:9e:51:b8:4f:b4:4a:2b:0b:3d:f4:af:
6e:5b:53:22:05:45:ba:f9:99:7b:54:fd:b5:42:e9:
a1:ca:e5:35:e1:1a:3a:06:9f:af:bf:8e:25:f8:01:
d6:54:2a:5c:70:0a:6a:4b:ad:a5:74:ce:65:fe:8b:
ce:2f:2d:8a:ef:5c:64:92:7f:30:57:e3:6b:d0:c1:
16:54:f1:4e:d2:51:fe:10:55:5e:7d:16:5a:46:e8:
c4:b7:d2:7c:15:61:44:e8:92:b6:dc:71:e9:6d:2b:
83:e1:25:a3:46:0f:d9:34:87:51:b9:3e:3c:df:e2:
47:56:f5:de:85:9f:39:cd:85:9e:df:a0:99:85:3e:
b0:e9:ae:f7:03:1b:3e:63:37:e8:eb:97:9c:30:c6:
8b:bc:13:02:f3:fb:e5:69:8a:70:68:ba:91:c9:b3:
cc:29:4d:6b:f2:2c:13:73:48:ec:e5:a8:d1:5b:54:
dd:43:99:c8:d7:fe:6d:60:d4:e4:67:47:68:6b:23:
95:63:36:85:73:bc:9b:d6:d9:eb:7e:6c:d7:20:1b:
22:ca:da:ff:3f:08:3e:41:70:62:03:2e:7d:8c:a5:
db:1f:ca:2e:42:69:f2:84:0d:e2:97:7a:b6:c5:c1:
a1:10:8f:43:1d:eb:e8:0c:13:ef:a8:49:1c:31:22:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:96:5D:E3:EB:A0:F6:A2:A9:D4:1A:88:48:65:A1:47:BB:72:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/974764cd-c5e7-434e-93d6-6e67d7750642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:8800::/40
Signature Algorithm: sha256WithRSAEncryption
7a:b4:31:b3:57:74:8b:82:e6:17:0b:67:5e:ed:4f:73:8d:b3:
1d:48:f0:af:60:00:d8:4f:a7:3c:86:63:0c:71:45:71:4d:d6:
aa:ac:93:f6:c2:48:50:43:22:6c:3f:58:a6:1e:d9:74:65:95:
80:69:bc:06:89:47:1d:26:fe:71:63:a5:7a:37:38:be:23:00:
6e:72:40:d3:cd:d8:ae:78:59:52:3f:6b:96:0f:33:e3:e6:f1:
57:a4:e0:bc:cf:b5:9d:46:2c:b6:70:af:a5:14:a1:b5:23:45:
0a:7a:1f:19:10:20:1d:36:c8:92:cd:2a:aa:b4:5d:d9:c0:d3:
50:d1:85:30:ee:e3:7a:f6:d1:8a:54:b0:37:82:7c:63:ae:95:
bc:c2:09:01:c0:60:50:96:6e:d0:04:37:ac:d1:f8:87:85:03:
03:c5:68:0d:a6:74:88:f6:03:78:2b:89:51:25:2a:f9:41:55:
6e:02:dd:6e:46:65:c2:81:97:c1:38:20:1c:2c:e6:9b:3c:f2:
aa:05:f9:60:01:87:18:8a:4b:73:f6:91:3b:05:4f:ff:6a:ef:
db:68:28:6a:67:5c:61:ee:f3:26:a0:2c:31:70:fb:99:43:5c:
30:d2:64:b8:d0:89:98:9f:9e:8c:4f:74:f5:d7:bd:a0:8a:91:
cd:00:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:33 2026 by rpki-client