Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
File: 99404275-57dd-4a36-8c29-529ab06d1d00.roa (raw, json)
Hash identifier: V1dvZVVsX1SXOv3MmltxiODez5iJba5ZONSsBu1Sbv8=
Subject key identifier: 67:E3:A6:D9:4D:50:0D:ED:05:A0:D6:C8:24:01:36:30:CB:7B:48:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76F92244854778D4D70473863DB0E4ED70246DF4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
Signing time: Fri 07 Aug 2026 05:20:56 +0000
ROA not before: Fri 07 Aug 2026 05:20:56 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f9:22:44:85:47:78:d4:d7:04:73:86:3d:b0:e4:ed:70:24:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:56 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a4b4a1e2f15a5a74ebcbcb04f61c9bfc0ad23f26db97fac8ffc5bb39ca4fbbb5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:b8:8a:d2:41:72:70:3b:f6:3a:c6:ac:c9:
7c:53:29:8f:27:a9:18:de:c5:91:ea:a1:42:92:cd:
c5:9a:ae:89:23:02:bd:e4:1d:fc:50:34:31:b0:3b:
0c:6c:3a:a3:e9:6b:67:83:f9:50:9c:4c:d6:31:d5:
d1:71:45:39:fb:6e:76:ef:0c:2e:1d:b9:68:07:f2:
30:20:fb:27:08:07:0a:d1:cf:e9:b6:09:64:cb:54:
27:ab:5d:12:8d:f8:8c:a8:04:cc:ca:d8:55:cc:54:
23:a8:f5:bf:2e:8d:24:54:4c:af:15:b5:7c:63:ce:
a3:99:22:fd:c9:9e:ae:2f:2b:00:bf:ff:87:da:83:
6a:c5:60:f4:b3:61:97:38:5c:b4:ed:b4:39:94:64:
52:2b:0b:2a:d8:3c:9b:e8:02:38:ec:dc:0f:33:a6:
7c:13:71:d0:e4:b7:ca:a3:c2:af:43:96:38:da:f5:
0b:68:7c:a5:9e:91:01:27:17:58:a0:d7:e5:85:8f:
51:ec:43:83:74:d9:0c:b4:e5:5c:c4:53:e0:b2:79:
14:84:8a:c3:87:9b:70:f4:2f:75:46:29:cd:af:ed:
dd:68:86:8b:a3:e8:7a:9f:93:eb:b7:5e:1f:18:d2:
48:d5:c2:9d:e5:ea:b6:e1:5c:86:04:fd:06:d5:53:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:A6:D9:4D:50:0D:ED:05:A0:D6:C8:24:01:36:30:CB:7B:48:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:b000::/40
Signature Algorithm: sha256WithRSAEncryption
16:15:ec:16:bc:11:da:80:3f:29:74:0a:00:d3:c9:b8:3e:1e:
ca:24:c9:32:16:9d:d0:01:7a:18:d2:8f:e1:51:a0:a2:2a:86:
c1:25:50:09:1e:79:1f:fa:6c:fe:3e:3f:40:7b:ec:f6:e2:09:
12:bd:6f:76:d2:a9:29:c5:fe:47:90:3c:2d:59:1d:56:60:df:
7c:06:19:2f:02:9a:4c:2c:32:f0:1a:98:dd:83:0d:d4:03:94:
63:6e:6b:b9:cb:95:29:57:3b:ab:65:ab:54:3e:8b:ab:43:ba:
8c:62:81:0a:8c:38:55:27:ab:c4:a0:a2:c9:8b:ae:fe:c5:bb:
43:91:e4:c9:b5:2e:ba:8d:80:53:e5:d7:42:88:38:08:b0:98:
29:4c:d1:80:b2:70:fb:59:4f:62:89:42:8b:35:18:10:04:73:
36:68:83:84:e2:69:10:84:df:7c:e7:a4:66:60:21:4c:e1:0b:
52:9f:1f:b6:f7:d2:4f:34:e8:98:22:34:02:98:97:1a:47:d4:
0a:aa:4f:b7:f7:0a:28:b2:6b:ee:08:b6:78:00:61:df:65:a4:
7a:57:06:2e:cf:91:8b:62:ed:3a:cc:20:e8:09:09:e3:5b:bf:
0a:6f:c7:cf:5f:68:71:0a:4f:74:44:7f:a1:44:ca:b7:68:be:
99:b0:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:46 2026 by rpki-client