Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa
File: 9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa (raw, json)
Hash identifier: xRaHDkTyjg22bR6cIamzD7p/8ujK07CEE9GtIXAkGF0=
Subject key identifier: 6F:8D:C4:20:B0:B8:50:B2:54:41:37:9B:FC:E7:10:1B:53:64:41:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AB473998279A7B45CCF6E8F81EF488E5C4BF605
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa
Signing time: Mon 03 Aug 2026 02:50:11 +0000
ROA not before: Mon 03 Aug 2026 02:50:11 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b4:73:99:82:79:a7:b4:5c:cf:6e:8f:81:ef:48:8e:5c:4b:f6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:11 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=76480d322c828c04c5a86e29e21c8f2e210c0a7d3278814e71c1e4b943bce2db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:0a:52:4b:cf:cb:8b:8c:94:36:c1:41:64:
4e:5f:b7:c0:72:2c:7e:cc:7c:25:82:69:aa:f6:3e:
d7:70:bc:95:68:05:ab:3c:e7:77:5d:b0:42:b8:3b:
e3:11:06:c7:f0:6b:b2:af:9f:b7:d7:6c:ce:47:e5:
87:a6:56:59:fd:da:f4:c2:44:c2:6a:d2:d3:29:1e:
e5:95:e6:46:70:88:39:b1:2d:b2:79:ba:c1:5c:56:
ea:d9:5c:1b:f9:09:5c:ed:78:5c:f6:4a:52:80:fd:
14:8c:3c:52:45:da:61:4d:d5:bb:21:f5:a4:31:f8:
90:21:2e:8f:9a:dc:2b:ae:14:a5:8f:dd:0c:6a:4f:
5f:b2:a8:bc:47:14:d0:95:83:e6:b4:46:db:cd:40:
4b:94:07:b5:8f:b0:09:af:6d:99:17:af:0c:a0:bb:
bf:a9:d6:cf:3c:8b:39:84:ab:7c:4e:c0:86:2f:3d:
84:85:68:b5:46:f2:7c:ef:8b:18:50:dc:73:d7:9a:
8c:4b:73:9a:81:4d:2a:ed:4a:b4:bc:f5:f9:9b:61:
cc:ab:10:42:84:f8:5e:91:90:31:35:6d:fe:f0:06:
16:3f:0f:0b:d8:b7:1a:68:8f:9d:98:04:07:4b:75:
8d:02:91:08:4d:64:92:51:32:b1:e9:b5:9e:d6:4a:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:C4:20:B0:B8:50:B2:54:41:37:9B:FC:E7:10:1B:53:64:41:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a5a5a5a-fd59-4048-875c-f0e74ec0a0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
18:b0:74:f6:a4:55:b6:07:91:3b:15:3f:c9:7c:c3:77:db:7b:
70:c9:a2:c7:19:17:3f:9e:80:b3:38:7f:a5:a8:74:06:ef:a5:
ff:fd:5f:69:10:0b:9b:de:7d:0e:41:cd:e8:3c:31:6b:20:6c:
80:a4:09:19:ac:d2:7c:3c:d9:46:49:de:52:f8:44:a3:4f:11:
47:28:4b:53:96:55:ac:b1:02:9e:96:e6:fd:3c:ae:0f:d7:d6:
73:69:bb:de:0c:33:98:c8:2f:d3:bd:22:8c:90:42:34:0b:6a:
68:ce:53:8d:48:46:1a:4a:dd:04:4e:d3:39:58:09:6a:02:8e:
47:f1:5e:39:72:f9:ac:d2:e2:da:53:1c:d5:a2:f3:29:11:66:
d0:71:23:97:c0:0e:cd:09:ff:5d:f2:f6:81:c3:62:01:dc:33:
b1:1d:05:8e:28:0d:0d:f1:8f:91:be:c4:57:41:a2:8f:ab:64:
8c:31:bc:cc:f5:c2:01:ba:63:e3:7a:a6:66:e1:99:89:31:aa:
74:47:29:c0:e9:2d:9b:59:16:d2:75:64:75:7b:91:d8:7a:f3:
64:58:81:9d:c0:89:38:2b:bd:fa:31:bc:70:62:ec:69:c2:37:
28:8e:ff:a2:7b:24:da:d1:7f:9a:58:bb:3c:66:0a:70:0c:13:
0c:1d:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:46 2026 by rpki-client