Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
File: 9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa (raw, json)
Hash identifier: 840ybcbcSTZ6p4IWlq1tZe2NCWoVajEV39/T8TIrmVk=
Subject key identifier: 1C:89:34:BF:5C:EF:E3:5D:99:E0:05:4F:A8:98:00:EC:D7:3D:B5:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B87980F2AD552196DE9DD80C669663256F92487
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
Signing time: Mon 03 Aug 2026 02:50:07 +0000
ROA not before: Mon 03 Aug 2026 02:50:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:87:98:0f:2a:d5:52:19:6d:e9:dd:80:c6:69:66:32:56:f9:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=1e13c597e0340c19011430177da702495b3e534cd8efca431b69dfd7049089f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:1c:77:13:61:ea:1a:38:dd:f9:59:5b:01:
c8:cd:9a:6a:7d:0d:51:bb:07:a2:1c:96:b5:b9:8c:
04:6d:db:a1:e4:06:c5:00:a5:e3:04:30:cb:13:17:
97:94:98:4d:17:ea:27:12:f3:5e:b4:6e:28:66:70:
e3:00:ef:f7:be:c1:d5:98:9b:f3:00:8b:b0:01:f8:
a3:a3:ba:89:13:76:f2:69:c1:8b:17:e8:9b:e3:02:
00:39:77:24:2c:ca:98:8e:14:b2:b3:8f:87:05:a3:
f4:6e:11:3d:01:be:e4:73:26:3b:55:89:38:34:38:
9f:da:49:b4:22:0d:1d:f8:45:f8:1e:91:14:e5:23:
f7:25:9a:b7:21:c2:a9:16:09:f1:b9:0a:fb:9d:81:
dd:74:18:53:84:02:7e:b4:76:a0:4a:71:43:18:38:
8a:dc:76:21:d5:31:fe:0e:c2:9f:56:2a:4d:e3:8a:
72:7f:ad:ec:ec:4f:67:c2:8f:fe:e9:0b:a5:a7:99:
b7:78:05:40:da:e7:e2:af:c7:f4:40:c3:82:d7:28:
6e:2a:05:76:30:3c:76:da:56:ba:8b:3c:d5:fe:08:
90:f1:3b:44:dc:e1:ff:c8:6c:e3:08:a2:1f:43:2d:
42:4b:cf:68:26:14:df:0e:b8:27:4f:f1:26:e4:65:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:34:BF:5C:EF:E3:5D:99:E0:05:4F:A8:98:00:EC:D7:3D:B5:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9945cd2e-c13e-46b8-83ad-2175ff7c3188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:4000::/48
Signature Algorithm: sha256WithRSAEncryption
06:c7:0b:ec:e2:a4:73:11:85:c4:5a:97:d0:4b:12:90:d9:65:
a5:21:d3:e6:fe:c1:5a:1a:2c:2d:0f:a3:3c:1b:a9:40:43:0f:
5a:9e:ac:d1:c1:71:5e:94:72:b9:ee:95:c1:01:8e:d1:18:39:
f5:b5:94:88:b8:d6:f3:a1:b6:63:c2:f0:26:ff:d9:70:9e:e5:
b3:5c:21:a4:d5:11:df:78:81:4a:ae:51:e9:91:3f:31:9d:1e:
c0:d1:93:9b:eb:a0:2b:80:3e:86:af:27:55:17:72:ac:3c:30:
c0:bb:c2:69:53:be:d4:28:4a:04:71:69:db:27:d3:e8:5e:35:
de:42:2e:0e:48:d8:82:01:d3:81:c2:40:6c:27:1a:5a:cd:b7:
3b:d9:6f:48:ae:08:ab:52:87:93:04:18:e1:0a:04:67:02:8c:
37:7d:ea:fa:d6:d7:e2:02:65:cd:9f:3f:87:69:67:a2:1f:f2:
84:7c:76:c0:0d:ed:eb:96:47:e4:4d:f7:61:c0:78:71:0d:6b:
33:03:3b:a4:92:17:d4:c0:4a:75:f7:71:dd:f5:5d:1e:25:27:
31:1a:05:1e:cd:3e:1f:06:70:27:c7:d1:4c:b4:3d:43:e9:78:
81:0d:57:d1:ff:8b:13:d9:8f:6a:75:7a:43:59:3b:da:be:95:
25:d4:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:45 2026 by rpki-client