Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975d4d69-c21d-4468-bf78-86985b5a861a.roa
File: 975d4d69-c21d-4468-bf78-86985b5a861a.roa (raw, json)
Hash identifier: 6CMJMIHkNEQHLCDE7f6hFWOH9UiT5c3YeZpZwQq/Hwc=
Subject key identifier: 75:AC:B8:89:A1:FC:FF:C1:2C:10:28:30:A3:9C:97:AC:47:75:19:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41900876FDE1BBDF60AA56F4A7C2047EA4E76FC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975d4d69-c21d-4468-bf78-86985b5a861a.roa
Signing time: Wed 09 Sep 2026 15:12:31 +0000
ROA not before: Wed 09 Sep 2026 15:12:31 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:90:08:76:fd:e1:bb:df:60:aa:56:f4:a7:c2:04:7e:a4:e7:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:31 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=12373f7a64f100d0e399badbeb9cfcf0453db776fc14d32dd55dcb5e28ddb7c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:54:6d:0e:15:49:25:6f:b1:0c:7e:90:12:
96:96:4e:24:bd:e6:eb:35:e6:63:d0:aa:84:a7:68:
d3:71:c7:20:2c:f9:e2:82:17:9d:35:63:20:38:44:
dd:f9:55:82:61:b1:2d:f7:e6:ee:dc:16:79:f8:d8:
1d:4f:4c:17:b2:f9:a9:66:43:69:be:de:cc:5f:71:
b9:ef:77:f4:09:78:86:c3:cb:c0:f3:67:0e:94:28:
08:e4:bd:1d:81:38:2a:7c:18:6c:7c:0e:06:cf:13:
68:5e:da:93:de:ff:83:cc:c7:d4:6a:61:49:4b:f3:
53:4a:81:17:08:a8:40:4d:01:f7:4f:6f:08:8b:f1:
8d:2a:fe:1a:09:93:46:85:bc:8e:34:e8:ee:76:4a:
ea:b1:43:03:f5:ae:3b:1a:42:12:18:93:57:d2:a3:
3e:1c:1d:56:e4:0d:06:f7:22:b0:27:02:5a:0f:f5:
8b:34:8a:6d:6a:aa:3a:bf:96:eb:fc:ec:02:0f:6e:
3d:e5:06:1c:17:bf:c5:83:d1:4b:aa:a0:c4:8b:c2:
6a:c1:51:74:fc:6a:1e:b9:96:95:ab:65:44:66:db:
d8:75:f1:16:c4:dd:62:35:08:59:b2:3f:a7:23:7e:
33:ce:d1:6c:9c:b6:a2:ac:b5:61:8f:9f:3c:27:4f:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:B8:89:A1:FC:FF:C1:2C:10:28:30:A3:9C:97:AC:47:75:19:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975d4d69-c21d-4468-bf78-86985b5a861a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8880::/48
Signature Algorithm: sha256WithRSAEncryption
8f:6a:15:18:e9:7f:a5:de:58:9b:6a:80:02:06:a1:bc:dc:08:
27:6e:68:e4:37:2c:cd:96:f0:5e:c3:42:8a:60:4c:b5:c7:68:
88:ac:cf:0e:75:bc:ef:af:d1:e3:d8:ca:c0:68:e6:89:4f:93:
50:4a:1e:eb:d7:de:24:a0:e4:fa:35:41:ed:51:47:10:b9:bc:
7a:3d:1d:ed:57:6a:8c:e6:39:ae:5d:73:58:92:2e:04:55:5a:
60:5a:0a:73:a8:51:da:e5:64:b3:2c:cf:2a:00:2b:d7:36:ac:
62:56:b5:1e:bb:70:1e:fb:15:2e:41:43:23:e6:9d:1f:7e:cc:
1e:f8:76:40:d0:45:b3:78:16:33:bc:98:9e:92:a5:ab:01:eb:
3d:22:95:d8:c9:8b:ad:c3:cc:8e:c1:2c:ce:de:33:b9:d2:82:
34:37:88:1a:60:bf:de:3d:3a:0b:1f:13:76:3a:3f:23:c7:4a:
fc:60:79:d2:48:ec:f0:24:b6:7b:cc:f2:45:7f:f2:9a:3c:32:
d6:58:37:c9:86:4d:88:5c:a1:db:ab:3e:ec:04:b7:08:46:14:
30:5e:88:ac:23:7a:23:2f:b6:8a:11:ec:d0:3c:2e:7d:5a:17:
39:96:b9:78:8b:38:41:05:d3:e5:f2:11:15:49:51:c8:16:4a:
a0:95:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:33 2026 by rpki-client