Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a732efb-e23f-49a4-ad51-1a43431e07c9.roa
File: 9a732efb-e23f-49a4-ad51-1a43431e07c9.roa (raw, json)
Hash identifier: aapbflIgFAGgvsi2MmpdXTqUaA9fCa1b4QsQ7ESIwMU=
Subject key identifier: 10:2D:F0:A0:BE:4A:8A:A6:78:93:2E:BC:1C:4D:E5:72:15:31:D1:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32F1F6B5FD96C628A1DB4666A4B3A59D471C9473
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a732efb-e23f-49a4-ad51-1a43431e07c9.roa
Signing time: Fri 07 Aug 2026 05:40:41 +0000
ROA not before: Fri 07 Aug 2026 05:40:41 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f1:f6:b5:fd:96:c6:28:a1:db:46:66:a4:b3:a5:9d:47:1c:94:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:41 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0888825aaff94e7420f72a2c8991dd27a529678572d276307eeeac9c873ce085, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:5c:0e:b8:cd:00:59:7f:fa:ab:e5:18:e2:
6e:33:ed:d0:11:28:05:ac:d1:cd:f3:4f:62:af:56:
68:45:1a:d4:c3:85:68:be:c1:bb:7f:08:eb:04:8e:
30:3f:3e:d0:6b:28:7b:12:a9:77:7b:41:0d:02:ad:
f4:69:0d:dc:fd:07:4d:b0:20:ef:28:7b:a7:f1:6f:
ff:cd:dd:5b:a1:ea:dc:75:71:39:b9:72:dc:58:55:
be:9e:1f:db:6f:75:a4:e9:18:8c:ec:0c:a0:7d:9d:
a3:08:e0:02:6a:65:55:f3:81:b5:53:f0:d1:91:4c:
db:63:40:b4:16:12:d1:5b:b1:73:74:4a:f0:75:95:
b1:a0:66:1f:3f:97:05:b1:42:f4:8e:a5:cb:68:21:
bb:7f:b6:78:cc:9b:a7:49:78:c6:5a:32:e4:56:25:
d6:ab:7f:ea:7e:bc:7e:91:e4:97:b8:4b:ae:fe:60:
eb:97:68:2e:c2:f9:05:5e:58:ab:6a:72:90:64:b1:
7c:2d:18:02:b2:f5:83:5a:19:50:bb:15:b0:64:dd:
d7:75:09:63:4c:ba:8b:ec:dd:18:6b:db:9a:c9:75:
5b:71:af:37:43:71:bc:8d:63:c8:21:22:43:ed:76:
34:6d:53:c1:c1:3a:1e:f9:a4:53:96:55:81:21:04:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2D:F0:A0:BE:4A:8A:A6:78:93:2E:BC:1C:4D:E5:72:15:31:D1:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a732efb-e23f-49a4-ad51-1a43431e07c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:9000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:be:a3:da:ab:b9:a5:a6:28:77:5e:3e:e3:7a:b7:42:eb:67:
4b:e2:bb:18:fd:e8:14:c7:ce:ed:0d:9d:ef:79:67:63:86:11:
ed:1a:a4:0d:a3:1f:77:fd:6b:03:5f:83:4e:7b:cb:b4:4e:3b:
73:4c:c0:4d:aa:a3:e5:0c:fc:6c:5a:16:66:a7:54:ae:28:94:
79:d2:ad:83:c7:c0:6f:fa:17:e5:f7:80:62:67:c3:fa:25:4d:
80:07:ca:76:67:e5:aa:bb:d0:dd:81:7b:4e:32:e9:19:dc:7c:
8b:2e:de:37:48:68:5d:a7:8d:00:8d:6b:8f:28:71:24:bf:1b:
54:df:a8:00:4c:6c:19:16:f3:46:cb:39:49:0e:d5:0e:37:c0:
39:13:5b:e6:a9:8c:2d:f1:4b:76:f7:e9:70:62:23:e0:c0:02:
af:cf:46:15:34:77:37:92:d7:21:4c:41:b5:ba:84:fc:60:bb:
5b:ff:b3:71:24:45:84:a0:15:f8:39:7a:b3:3e:78:1c:cd:64:
6a:eb:5e:18:2a:73:1f:f1:ed:c4:3b:1a:bb:aa:a0:77:14:6c:
c6:6d:d1:23:7e:c6:60:48:2f:57:14:85:46:67:02:a3:c7:fd:
1e:4c:ca:61:ba:46:7a:5e:46:c9:1a:be:74:e2:d3:31:0f:06:
90:5c:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 01:00:56 2026 by rpki-client