Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa
File: 9cdec629-851f-4419-9f9b-59607b65b13a.roa (raw, json)
Hash identifier: ZbB48ofWdeD3iLxfIKpZnbu9mgUvNBo5CUCkgPrahJw=
Subject key identifier: 9D:FE:E8:DE:AE:A4:BA:B4:17:D8:4D:83:91:48:B0:B0:69:DA:19:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48718CB972560211D1E72B9C75CD19EC55D1D461
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa
Signing time: Thu 10 Sep 2026 02:40:39 +0000
ROA not before: Thu 10 Sep 2026 02:40:39 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:71:8c:b9:72:56:02:11:d1:e7:2b:9c:75:cd:19:ec:55:d1:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:39 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=d8d6256634b5b9455740175d1f45b22455fbbcaea4466319d56cbf982dc53a6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:1c:c0:f8:b5:3f:f5:e1:cc:50:85:2f:1a:
10:d5:0e:e1:13:84:ec:1b:9c:a0:49:69:6b:7c:ee:
c9:49:5e:23:50:cf:70:fc:a1:80:a9:3c:3a:29:c3:
26:8d:38:74:cb:e4:c4:c6:f7:82:18:25:61:f5:c4:
1f:b9:6d:8e:80:92:42:54:14:ff:e0:27:d0:4e:32:
2d:49:a3:24:f2:9b:a6:b7:cf:54:01:92:0f:2f:cb:
5a:53:bb:0a:e8:13:45:ce:5e:38:db:61:06:ef:97:
4d:00:8b:c4:33:53:50:48:cd:3d:5c:03:d1:6c:a4:
be:98:91:ba:14:05:c4:25:fa:4e:55:4a:5d:f5:4b:
1d:81:ad:3c:4a:03:82:2d:a4:eb:d1:34:79:19:7a:
72:52:2f:4d:48:1f:8b:c0:8f:28:0b:da:ba:b8:37:
29:6d:8d:ad:27:43:60:3d:65:0b:45:22:c4:5c:ec:
42:68:ca:8c:a5:ff:62:b4:9c:45:72:4e:f2:c4:cb:
bd:e9:2b:2e:e2:2b:2d:3a:da:65:e7:5b:dd:c8:35:
96:58:ba:45:63:90:0d:4d:f8:89:5d:88:64:ef:a4:
c0:da:e0:bd:a0:50:dc:c8:b7:3e:b8:34:65:7c:8e:
57:5e:1c:2b:9c:df:89:87:6e:6e:3d:d8:c7:f2:e4:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:E8:DE:AE:A4:BA:B4:17:D8:4D:83:91:48:B0:B0:69:DA:19:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:dd:56:61:a2:8a:7e:26:a5:ff:8a:45:9c:29:37:fb:38:78:
5a:da:04:b1:8a:6b:98:eb:62:db:9b:01:b1:87:e8:c8:6a:e3:
dd:fc:8c:1f:87:2e:17:b0:13:d0:aa:bb:54:70:c4:0e:ac:cb:
2a:47:ec:37:06:82:23:0a:95:23:e9:16:34:78:40:e6:8f:0c:
01:88:e0:6f:4c:2d:96:7f:6c:a6:99:26:0d:f7:43:90:3b:ee:
b3:67:06:f2:69:80:f0:8c:97:db:e0:9c:57:6d:7d:7a:14:b6:
a7:fd:2a:60:d8:c0:4d:16:56:82:8f:70:1d:1f:8f:91:de:70:
37:35:60:1d:50:bd:60:47:4e:ff:f7:09:cc:6a:8f:35:a2:75:
f8:9e:85:66:35:18:18:70:bb:2e:8d:05:2c:26:14:76:74:08:
1b:ad:05:d6:6a:bc:45:a3:f0:00:01:c1:ab:10:75:f3:44:46:
21:ee:2c:15:9c:d9:a9:1a:d2:68:ab:b7:49:1a:29:a5:64:ff:
0f:67:e4:5c:27:58:6b:a8:dd:fb:0e:f8:28:a5:4b:1f:44:a7:
11:ad:79:70:27:50:b2:38:69:32:c4:39:70:41:c7:a8:50:95:
0e:23:13:4a:fa:d0:a0:3e:08:40:b9:b2:7a:63:55:1f:bd:68:
51:ec:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:02 2026 by rpki-client