Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
File: 981c5588-0e4a-445c-a928-99c39b0f1ca3.roa (raw, json)
Hash identifier: Kgu31idlBpNIzhVoJt7Umod0VfgDyi4h7NSYSdf2ZKI=
Subject key identifier: 68:AE:49:05:2B:81:E0:89:5C:78:88:40:A8:94:0E:DB:0E:26:F9:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 733F9AEB9077A7BDC8F37858CF714F1E75135C69
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
Signing time: Mon 10 Aug 2026 00:50:32 +0000
ROA not before: Mon 10 Aug 2026 00:50:32 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3f:9a:eb:90:77:a7:bd:c8:f3:78:58:cf:71:4f:1e:75:13:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:32 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=875b78dab337d48f66632e7fc75651f319ffa5b28bf284d3b0c87cdbad89eb0f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:40:d2:79:87:2d:a4:6d:40:4a:1a:25:00:
fd:b0:fe:fa:a8:2d:aa:0b:6c:df:a7:49:0c:d8:41:
b3:fc:50:2c:39:9a:0f:2e:43:80:6e:a8:ab:92:65:
c7:9d:56:3c:d1:cb:84:5e:ee:79:81:da:6c:8e:61:
e6:2c:7f:7f:83:7e:c9:59:cc:b7:35:94:ce:29:77:
c2:86:10:d9:49:97:43:2e:7e:c6:a9:6e:85:45:e2:
da:f1:76:49:3f:39:63:c3:95:3e:0d:9f:81:31:c6:
bb:97:b5:cd:d6:78:ec:b5:ad:d5:7f:41:90:23:39:
4c:09:41:1a:fe:4f:ef:d2:b8:36:6a:ef:4c:20:47:
02:e6:49:f1:bf:49:c0:8a:19:88:7f:17:8b:66:e4:
dc:bd:34:a3:8f:70:8d:db:9a:12:6c:7d:af:a6:9f:
b1:55:15:8f:dc:c7:00:9b:f8:b2:29:bd:9d:d8:c5:
07:81:ad:dd:9b:0a:86:75:c4:84:92:7c:0f:82:18:
ad:df:a5:fe:c6:cd:3f:64:e5:15:40:4c:7c:f0:8f:
6d:0c:40:0b:ef:e6:76:98:c8:ab:81:31:18:2f:9c:
7a:88:a3:40:75:cb:d2:4f:d6:e2:f7:a0:5a:e6:02:
08:ee:28:dd:6d:2e:26:82:6b:24:aa:c6:37:d2:29:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:49:05:2B:81:E0:89:5C:78:88:40:A8:94:0E:DB:0E:26:F9:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/981c5588-0e4a-445c-a928-99c39b0f1ca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:6040::/48
Signature Algorithm: sha256WithRSAEncryption
53:70:fc:b9:03:82:06:0a:bb:95:01:06:68:42:bb:03:fa:9d:
29:a1:7e:76:f3:63:0d:74:21:82:f5:ec:e1:b5:51:62:4f:03:
74:a5:d9:5f:81:9c:55:69:9a:ef:2b:2c:8b:31:32:a4:20:0e:
91:f4:68:87:e9:37:05:22:00:60:76:34:ba:58:d4:4a:35:69:
ef:da:6a:ba:f9:01:0f:3b:8d:d5:e3:c0:18:b5:20:26:76:3a:
c5:24:a9:76:a6:9a:0c:61:77:a6:c3:b0:f6:d5:3e:ae:49:b9:
37:9c:60:3e:d1:e6:fd:5a:66:d2:ff:74:ab:4f:38:43:f3:28:
19:47:9e:de:70:46:75:be:82:db:69:46:e9:75:34:50:17:ae:
c4:8f:ee:b6:00:e2:0e:70:88:14:64:65:85:31:0b:6a:99:a5:
51:bd:12:bd:70:8c:c1:38:0c:5a:41:ba:1d:f1:9a:de:8d:08:
9a:69:b6:4a:9f:6a:a0:47:db:93:fa:a9:ef:89:9b:28:3f:e3:
39:71:41:8b:ae:f2:83:d7:59:a0:68:ce:68:6a:5b:8f:47:d4:
42:68:75:f2:44:e7:ca:ec:d7:35:62:9c:1b:62:dd:f8:2b:eb:
88:a4:a2:3c:65:b8:00:e1:29:9d:08:e8:de:53:e8:95:63:54:
a5:55:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:52 2026 by rpki-client