Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa
File: 9843a73f-18f2-433e-b871-f493b0645337.roa (raw, json)
Hash identifier: iKZ4/J53SOhdI4gMsYSdkyD6zkgDb0vVqKJ2OiZ+Pw0=
Subject key identifier: D1:11:1E:07:DF:30:FB:07:AF:36:CD:48:AF:A6:DD:EA:9E:89:79:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 473589E13AF5CD105C6837F36E08C073CFE24909
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa
Signing time: Wed 05 Aug 2026 02:10:08 +0000
ROA not before: Wed 05 Aug 2026 02:10:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:35:89:e1:3a:f5:cd:10:5c:68:37:f3:6e:08:c0:73:cf:e2:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 02:10:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=fca08d24bfb44045270488541e21d451907fa7bbdc818a30a5c0258501287d3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:75:21:7a:b0:f6:bf:45:c1:31:c7:c0:3e:
17:e3:da:e8:a5:ac:2e:1a:58:66:40:38:00:cc:c2:
63:52:79:4e:33:79:52:13:61:62:6a:fb:13:d1:29:
82:d1:a1:e5:84:04:ef:39:31:2d:ff:62:d2:01:28:
93:79:6c:d4:55:61:1a:fc:33:53:e6:e9:eb:9c:9f:
e6:35:17:7d:e3:3e:41:3b:a9:d6:2e:97:c7:fc:33:
3a:f8:06:62:52:4e:05:4a:46:47:ad:00:b0:b8:3a:
3d:4c:b2:77:24:ce:8f:3d:c2:02:3b:40:fe:12:c5:
90:df:d7:f7:f0:d9:31:a0:cb:27:98:f0:8c:d9:07:
ed:59:f3:c7:92:76:00:b5:fb:7b:16:c2:f1:70:0a:
97:ee:9c:6b:ab:96:d5:b6:b1:a7:f6:89:58:96:fc:
b1:aa:b8:11:d0:20:78:f7:f2:f3:7b:21:c0:10:e9:
84:8e:b9:52:41:55:b2:5f:05:f4:f3:ae:ec:6e:fe:
16:19:b2:e8:cf:9d:72:e1:2e:11:7a:75:19:08:92:
46:46:ef:55:90:07:9c:d9:75:06:1a:a7:b5:d6:2b:
50:f9:00:f2:3e:94:06:0a:8d:a7:e2:36:ff:31:2b:
70:3b:59:40:66:a6:9a:ca:1a:a2:70:93:c6:6c:af:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:1E:07:DF:30:FB:07:AF:36:CD:48:AF:A6:DD:EA:9E:89:79:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:800::/40
Signature Algorithm: sha256WithRSAEncryption
4b:e2:84:86:65:f4:e3:30:02:13:42:80:b8:bf:7c:0d:74:9f:
ef:69:a9:ca:b7:e9:b9:55:14:c7:f7:7b:72:d3:f6:5c:d7:e0:
87:8f:bd:3f:3f:1c:d4:6d:c4:0e:24:3c:47:53:5b:6c:b8:2c:
e6:36:61:68:5d:47:76:96:f6:b1:20:a5:f7:6e:75:a3:b3:1a:
91:3a:90:01:43:65:94:e0:2f:24:d0:b0:26:c4:4e:a0:c3:10:
cc:fb:a3:1f:90:5c:74:84:fa:22:b2:0e:e8:e6:90:22:d7:94:
1b:41:fa:86:ab:0b:dc:97:48:3f:69:0d:a9:96:1e:cb:00:e1:
31:cb:7d:0f:03:f8:33:3f:ad:ec:38:a5:0b:44:9a:c1:c3:85:
07:49:d1:25:9e:87:1a:e2:98:a0:5b:c4:a2:00:ba:3b:5a:67:
27:02:7f:98:a4:56:b6:ff:01:21:6a:92:5e:71:25:8c:9c:2b:
6e:27:cb:c6:a8:04:24:86:b8:66:2c:bd:25:31:6e:52:d7:2b:
9e:50:8c:8c:5a:ad:de:e0:21:12:52:65:71:e3:8d:c9:6f:21:
4a:58:9f:6c:d8:c7:62:db:0f:22:3e:c0:ac:e7:6d:35:52:79:
a0:da:17:39:70:b5:9e:8d:12:e8:e9:55:3b:61:d8:99:66:ea:
66:34:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:24 2026 by rpki-client