Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
File: 98ae6903-6674-49ca-b677-ce1e731619a3.roa (raw, json)
Hash identifier: jf7CaUvOLv1gnclqL7YQP1Jlypogh7tjhLvHJ52AEPI=
Subject key identifier: F3:ED:C9:E9:8F:B0:E6:AE:C8:AD:61:6C:B9:71:95:FC:81:6C:2F:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37593E453F6002D575B37B834958DC68A2A29CCA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
Signing time: Sat 08 Aug 2026 00:00:07 +0000
ROA not before: Sat 08 Aug 2026 00:00:07 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:59:3e:45:3f:60:02:d5:75:b3:7b:83:49:58:dc:68:a2:a2:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:00:07 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=97f8410f6f683e8b549c0f9442c2ab2ff9370d86bfc2efcbfcb89b23d89fdebc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:b6:10:4d:7b:05:40:79:72:da:ec:c4:11:
b8:22:a0:94:42:db:c9:94:90:cf:61:99:ce:2f:7c:
4a:c7:58:11:23:7e:78:aa:74:aa:3c:86:56:1e:af:
3e:04:fd:7f:fb:14:d1:73:57:64:e0:0c:0c:0f:d3:
1c:28:10:23:5a:a9:90:ad:02:86:9e:d1:1d:df:3d:
6a:12:92:11:49:00:e5:b5:e3:2a:23:d3:d4:96:c2:
f0:f6:19:e7:7f:3d:1b:09:90:7b:83:85:98:fe:d8:
b2:25:f3:91:b8:67:7a:13:2a:0a:57:e0:34:7a:1e:
3a:f7:8c:b2:79:73:95:0d:6d:1e:b1:8a:4a:20:a5:
ed:85:cc:04:ee:21:cd:ac:81:a3:f1:a1:70:e7:a1:
86:51:15:3d:df:67:e2:6e:3e:71:76:ea:27:a1:70:
95:04:71:1f:99:66:08:58:54:70:f0:f8:0d:bb:7b:
8d:76:a7:30:98:18:b9:e1:2f:b9:3e:0f:0d:0b:f2:
25:c2:01:ed:e4:28:17:71:c1:18:04:2b:69:2e:e1:
a9:b2:f5:09:e4:d1:85:10:77:c3:36:45:dd:4f:dd:
cd:2d:73:25:94:5a:e5:6b:74:48:84:81:da:0a:59:
d9:2d:14:6a:1a:9d:7a:ce:ec:5b:7e:06:90:7b:c2:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:C9:E9:8F:B0:E6:AE:C8:AD:61:6C:B9:71:95:FC:81:6C:2F:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1c00::/38
Signature Algorithm: sha256WithRSAEncryption
9b:e6:58:4c:8a:de:aa:4e:b8:94:52:58:69:78:86:12:2f:78:
aa:b5:0b:76:88:d9:e1:00:07:92:9e:ad:ac:87:5b:e2:30:73:
95:0b:09:61:cc:33:96:1f:f0:ab:85:0f:36:2f:09:ae:70:e1:
d4:3a:df:b1:a2:e5:6a:85:ad:13:0d:66:6a:c8:44:c9:a5:fe:
18:a0:38:44:dc:84:ce:50:af:4a:34:de:79:08:ce:49:2f:c9:
c0:c7:c1:54:a7:88:d3:e2:f8:16:2c:52:65:fd:c5:33:04:2e:
46:83:e5:39:92:5f:56:80:3c:b4:f1:21:9c:39:e6:85:fd:b9:
e3:6b:aa:3f:63:e7:5d:fb:1f:e1:80:7e:eb:f7:e2:73:e7:d7:
1b:68:80:a7:ff:29:bc:4a:7f:bf:41:e8:64:12:c7:4c:2d:cf:
35:74:93:2c:c7:42:b9:58:2e:0c:94:8c:0a:ed:f7:34:fb:38:
4d:e4:0b:6c:1c:39:f2:20:f8:25:bb:bb:9b:32:e4:9c:3d:82:
bc:58:12:48:08:a3:81:af:83:99:ee:57:c1:e4:33:fe:5b:76:
9b:28:33:01:84:4f:b0:ce:75:b7:36:8d:bd:9f:c6:cd:45:51:
23:e6:02:96:08:3a:37:8f:56:ae:42:90:60:e7:a0:4c:f2:f6:
ce:16:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:26 2026 by rpki-client